last executing test programs: 7.650600535s ago: executing program 1 (id=1206): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="aafe40224e4bd8900cac9eb4a6ed63b0", 0x10}, {0x0}], 0x2) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, 0x0, 0x0) semctl$SETVAL(r1, 0x4, 0x10, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 6.943726955s ago: executing program 1 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='devpts\x00', 0x223281a, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x858068, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async, rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (rerun: 32) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6.895966239s ago: executing program 1 (id=1212): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x6, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x2000080) 6.299101737s ago: executing program 1 (id=1217): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x5}]}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r2 = syz_clone(0x1043c11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f00000001c0)=ANY=[]) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000000c0)='{', 0x1}], 0x1}, 0x4000040) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r6, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_DELAY(r7, 0x80084121, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmmsg$unix(r9, &(0x7f0000000e80)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000540)="38a7794f0db7a43d74154681fd3866f88a7ff1eef52bfe678dd2fe3a4ae4132613be0919c60b52503349e7eb739fc552d5584bb9be5b497edfc3ade35b29fa8a0a96150c8c252ca53c77105ce3eddcf70b06dd26c149382c14b273a646d993f3586ea1c365c782196787663f9144c6b4e6e5ce5a098d8c5f772aa2face4822a25189f9fa4d8c6d07bc9ec6033c4ef2d11df5e61bc6eedd12c05027cbc5113f0a6c3acde32164312a8c5da7425a7da6332a9da6b16ed793362f86c4cd88c30bc96e407f87adfeaa579b41c00782d7f77464820dab66108b10b26ceefd2b7ffe4a8aa288233b888e23b01da4777bca2a8600e0fa1b24cd22", 0xf7}, {&(0x7f0000000f00)="5cef2369360cdebec69adab81d9be085de337d395ca80d8ababae9b58a9f51860956ef59b106e7d2d95a69c60c3ffdcc1b61360cd503d300b574db53fcb6381dca67aa0861313e41fdad14b2325980f5f4a4a19c92a0fe45e0f4c12fc5bf97b938957a37800f6970848dde14909a1fdb24b6104c68d20ceff5a0327e6446ce954a4b86ce15c4e2b4761a9cff5ea62e72c1a9acb29ddb12ae1c787c2beaf9c3f8f0767b672a16377d749365d20f480c96a9ec1088c7dffe16fad3a272f9c94bea480302bb0b0fbb", 0xc7}, {&(0x7f0000000800)="9f068e338c2e3d0c3f9d165e8364dea7d59e20b4c4b7049c97dd8fb9c3b6ba49e1ce384e89731fbbbe722acf14ed0a50cc8f7d91f79bf2af34b344b85fd53d3203c66f1c7c0c5dbd0113baf2f711eb9e1b0a50bce6a9845c59adf81706f9e6396f27c211463214dd6700fae6941e096fc2da28a44e2f4002a97b0f702dc06136e9df58e34d7725e042f4fc9a8f6d33d69abb6097cce12446545493cb477895edac666d3ad4dd3b36cee0300a8e5b5e7ab8dd7b1d6d1e156f9a23727c901608bbac85", 0xc2}, {&(0x7f0000000900)="b580beea4b21eb1d2e6d3475e57e3d69dc551cd3a73da87227bba89ea8d12670d354d464585e351c15a436dd9dfe23fb803cf0c5a47c204ea0d9609a258c6050b129d947c96ff1f48a88ff4f2b66065d2f290b55623f67e77c5f2b1343a5dd538bbb40eb89afadaeaad18037bee0f89eb13fe5cdfd7c9609e1d12bb5feb909ee9fde4c2ddbe76f550587ac0a96fc9e", 0x8f}, {&(0x7f00000009c0)="e5800ddd29337699999dc562ecfea7b0073351215d9914a44c4afa38747d342f3f5c664b84881c4244f850fed9c2f2a6bcccd4010f5128dc86040c5c5eaba966484a7901da5955070d8fb856401daa14a280b0fca15502337fa23605bfc0de342b8f80e618dd68b5c841c41c79e9887f4c7b6f27457c468ae30fa83b07b5591d2ac64c7d5f2c1adb81e6a83ffe335e81f7b865483bee521c7dd8636769dfa969cf0ce567c7a5a1a2834a6e381efe1f364c3c2e76890f43410cdeff6b5af69bfdafa85d8d52a66ba524ffaed294781ed8d6bef33e521503f5db57", 0xda}, {&(0x7f0000000640)="d6440237a715a0e72b233e37534607ed8e489d4f6e95dc7bac04b5749daec705f337a2e00838eaa39e4bc826b299c989cde04d1a83976b618e111d6e37be7927a4024348e5c30ae513545e851a8349c2e89df0edb286356072926d0fd375e1f674b4a2db6f118c61e5", 0x69}, {&(0x7f0000000ac0)="4c7328d96a0967685c046bf8ec45f42218df753de9a2076e4f79c7039a3b3ca2a665484cf1d5bb9b2c89667a37e6d877a36a696aa82a8b29c88ae05506de7c73c3678c897eda3a601fc2e60ccc5ff0753d463f0be058a4d54b4c308fb38340c8e3459d3c461bdf38af3deff622041c5b60c68ba53c148ed16fafaa079f17ffed91ad97fa107659e8fbc949ab80149f1a0a7eec3b71ce3bac7dfb9bb07ad1ac93832843ad3c2b18668f064abdfdcf5a1cd4526a026dca3963f4eab52b1c85644f992a0f17b71d11eaaa772adf2d264b1752189f27b8f6eca37cc3fe53deed3d", 0xdf}], 0x7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000900000c9000000000800140001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4060404}}, {{&(0x7f0000000d40)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000006c0)="edc2a1580f64bfe75166d4be56a7d79bc0cd511d75fbf68f37ce9e3dd15e6f884843cc930408f9317ca429932d5eb7b5f9588bc0dae75bd5c688c3f64b1b795d", 0x40}, {&(0x7f0000000dc0)="e4f0104a43a44c5c04ca5c607f28bd5e57de54f28e44c9ade209f9d0a2dc4d4608cda554ce75f5e011d272e9c82d966613968f0f1b715ecd894f6a85a0baa4e8205e94436fb5b35894550efacf2510d01c8c522439200f7d584ac19c48669bee329ea6c72fa8601d8951fec51f5f439660cd650923789fc95a5e83065e1b48c9a145ef8981247676a7b7868c10d0f88a1dbc575de6dc071e378d1acb26ed9eb55c3f983e5ed2c2b1566600ee3cb8412861ed6d3236a4936d", 0xb8}], 0x3, 0x0, 0x0, 0x80}}], 0x2, 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.58459969s ago: executing program 3 (id=1220): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @local}, &(0x7f00000000c0)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b, 0x0, 0x0, 0x4, 0x10000}, 0x28) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r5 = io_uring_setup(0xd4b, &(0x7f0000000280)={0x0, 0xfffffffc}) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 4.544663008s ago: executing program 0 (id=1221): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xe]}, 0x8) socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x104f}}, 0x601) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff, r2, 0x20001000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000000c0)={0x400000}) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000200)={0x10}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001300)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x4a) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_mtu=0xd}) 4.245874201s ago: executing program 2 (id=1222): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000c40)="e37975485d609a8d225ababc013e4b1560d943d4a4826608ddf4f9aa77e314cabe02b9860e976d1989d9cf98869ab6e3d399641e37f6ee6ba15e6131f21cf1053bc10ec89e2e6d03f7ec251ba4ab31bb92daadb7e5b62eab28b1aac057e05de2f757a191b5cbb55b8eb88ab44e658aa53b971132de81b6296f93fd16cd9e5993cee4b3223c1ab0f39d8d233ce0da8afbe8c041b3d69c30b397502bf49e637f3ce52a566218e142dd5f3ddcf97b4cf25fd5a89aa1163c06189c520a115dcd29106a6b23b38b5a3138ea0e709bb77a0dd895e4f8dcc771b38a2d05178b9f426421eb6887946f68fe4b2541fda87a472d7af813c87e3c4bc31f91a86a3c300bf996f694875e98a90d29f1ef85d9c1395360cd1a46b00c63d1e6bc47eb42562e29d94d873d18f0c38276dd035fc27b6f98a81ef9339c32baf15cb393a851639912fa92709cd78784ccab4dc1d57f6681db15cd1e7a01a936db2ef060ffb65e53ca9241a3058bc6beba7be914a395d4e7247fdcf2ca", 0x173}, {&(0x7f0000000540)="ae48b87c719ca060890e8644cfa7cb534068893d509a7b3385671fd2a94978a4f7042467c7baa9ccc846d1d78f53226e48babfa86c2ff3d46ca157a9fd980e081780896352c550cc7102dc603eb5d36729ee61affd20649c9bb2f287", 0x5c}, {&(0x7f00000005c0)="81cd721aaff747c3e89f0168cf114eb5caff5ec092e0af8c8dd56a9dda4943469bb0f27d0f734e50fe38456d8ad1109bdc6dd68c0338f2872a09b029d17489d0f77bc9ddf897e2b13b7113fa5b168859abb9e4d9227b134fa136375eb68de8d1112aeecc40912bae72a0a175bcdf90c16f9538fece587b74478540e6593ac8cc87f231ce8929a7be628e2ebae1e34e23637b3621306c766a7c5b1e0d2eea19", 0x9f}, {&(0x7f0000000180)="c0c111d6b44e3e54baa1d3a6f718585d5c0dde988213f9d33b3d8df019f2daee76dd2c34629473618c0fa4ca421ac3f363730401ff4fb93dee2df78fb07ea0ab", 0x40}], 0x4, 0x0, 0x0, 0x80c5}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r7, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d200000500"}) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) close_range(r4, 0xffffffffffffffff, 0x0) 3.853208818s ago: executing program 0 (id=1223): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100372015410d107083a97020102030109022400010706900409044781022e65220c09050d1010000701b5090587100004f60441f012f575f880c58689b4904b286c4726e46f3d0fd1a6d5830dfaf6798eb8149297ff9f15286d9a8b6b82a3cdc8e6607aa080f159cc8625af25054fa11e8c3fdaacd464a37e719e21a17563305689bc06051d1c03c5e4a8d4d5b12888bf5fc01199aa68349c5f72302860538f3158f9e5df27ff6f44653471cc1187a1bf2a4af71d9a40051f2cf80ddb802315918ce9ca9a64e7a50cc63f9ed7d9e590afb53a4723d7"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x86a02) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.615276578s ago: executing program 3 (id=1224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x24008041) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000002340)=""/238, &(0x7f00000001c0)=0xee) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffffff, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x19) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], &(0x7f00000003c0)=""/94, 0xc7, 0x5e, 0x0, 0x1017}, 0x28) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x1040000) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000003a0029020000559b18afa38000000400"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.405923984s ago: executing program 2 (id=1225): r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='task\x00') getdents(r0, 0xffffffffffffffff, 0x18) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x10001, 0x8}) 3.32186603s ago: executing program 2 (id=1226): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x69f) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') close(0x3) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10010, r4, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) dup(r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc00) socket$kcm(0x21, 0x2, 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r6, 0x100000000) userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 3.242062885s ago: executing program 1 (id=1227): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x6, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, 0x0, 0x2000080) 3.240231753s ago: executing program 4 (id=1228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x39}, "2265d77eca70ffeb", "2a7406036400", "27c800", "00000000000085bc"}, 0x28) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = dup(r1) read$FUSE(r2, &(0x7f00000014c0)={0x2020}, 0x2020) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 3.20272773s ago: executing program 4 (id=1229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0x1c, 0x16, 0xb4, 0x3}, 0x50) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r5) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, {0x0, 0x0, 0x3e00}, {}, {0x0, 0x3}, {}, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0xc, 0x4, 0x0, 0x1}) 2.609572808s ago: executing program 3 (id=1230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2802000000000000000000000000000e060800000000000005000000000000000b"], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r4, 0x83000000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000080)) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)={0x2d4, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x3b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39c5564}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ' -+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2005}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%!\\{$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')#^\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x24366b26}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'fd'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'r\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "2cc114b636d618c667fa7ed9964bb9060e383979ca81e4d37050fe568fd6c46f9a40256018bc3be584899a11b82dcceffa4e28facf35a6e102b0da4639fa58a68808c9442f3d0b6ec1741e33948fc09807341676af818ee0501934e12a5fb334cbe30571c2cfc120e82b766bc0c181340e6e55b9ec3b0532fcd449cad3af20213cf4bab2b6c3f8799bd1714581f954a9446f968b98cc816f1e0095f4e4753f3c19"}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "a0916f4d32ff9fdc0f6bffbfd62379362316c3c6e6760958eb81740a0fd8716ed07bb2bb35c4dc683560b766e718525087e65b6e230e256302444ee84ee1e96aa3d7cc6926ea0386f9b0843405dda228c0f3c3971f9f73b28e6c18a4a1c745d7c7c2fd718fba131e0fd8417971e4e8157ff4706e3f04a4ab3df90ae829d8f5688b6677a780d474995be1f1a4"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x76}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffe32, 0x4000, 0x2000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44054) r11 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r11, r12, r11}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.541937753s ago: executing program 1 (id=1231): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="20000104000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000700)={0x20, 0xc}, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x87, 0x2, 0xe807}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) 2.42230635s ago: executing program 3 (id=1232): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) 2.32590885s ago: executing program 3 (id=1233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0xc048aec8, &(0x7f0000000000)={0x40004}) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xeb82}], 0x1, 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.31865644s ago: executing program 4 (id=1234): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) syz_io_uring_setup(0x2aca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000002740)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="344265ee69d6bcd3877443bcd5a574f6f4fc44fe3b7ee8bd503fe23fec6a389cdad6b3", 0x23}], 0x2}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000626000/0x1000)=nil, 0x1000, &(0x7f0000000200)='\x00') setsockopt$inet_tcp_int(r7, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) splice(r7, 0x0, r3, 0x0, 0x7ffff000, 0xa) 2.3068926s ago: executing program 0 (id=1235): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="aafe40224e4bd8900cac9eb4a6ed63b0", 0x10}, {0x0}], 0x2) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, 0x0, 0x0) semctl$SETVAL(r1, 0x4, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.197856336s ago: executing program 2 (id=1236): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_STATX={0x15, 0x41, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x800, 0x6000, 0x3a0b61998d4e297d}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x21, 0x5, 0xd}}, 0x25) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000500)=""/82, 0x52}, 0x9}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f0000000880)=""/1, 0x1}], 0x5, &(0x7f0000000a80)=""/194, 0xc2}, 0x1000}, {{&(0x7f0000000b80)=@xdp, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/196, 0xc4}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x3, &(0x7f0000001dc0)=""/44, 0x2c}}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e80)=""/245, 0xf5}, {&(0x7f0000001f80)=""/27, 0x1b}, {&(0x7f0000001fc0)=""/20, 0x14}, {&(0x7f0000002000)=""/57, 0x39}, {&(0x7f0000002040)=""/189, 0xbd}], 0x5}, 0x3}, {{&(0x7f0000002180)=@can, 0x80, &(0x7f0000002280)=[{&(0x7f0000002200)=""/114, 0x72}], 0x1}, 0xffffff00}], 0x5, 0x10720, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) 1.545594963s ago: executing program 0 (id=1237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020010000000000000000000000000001fc000000000000000000000000000001220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890020000000000000001c000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'caif0\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x8f4e, 0x5, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x356, 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x803, 0x12) r9 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@ipv6_newnexthop={0xac, 0x68, 0x20, 0x70bd25, 0x255fdbfc, {0xa, 0x0, 0x3}, [@NHA_GROUP={0x3c, 0x2, [{0x2}, {0x1, 0x5}, {0x1, 0xb}, {0x1, 0xfa}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}]}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8a70}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x674}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffc}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r10}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x41) r11 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r11, 0x567, 0x0, 0x0, 0x0, 0x0) 1.297547103s ago: executing program 4 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() ioctl(r0, 0x6, &(0x7f0000000000)="c6c5d62275193748eed32132a867f48508ce69f739a8a0df199621ce09ff093ffd05738be785cf33459d62fedcb0e8bd14a133f0a4c56fde6a6d68e156419725862b83cb89e376398fb6a32fdaf5e4b5303c7b1ea99dbb7832af4b305aa92be56692e6a53f44f402bc557a283569c80432880ab8273b92a60bcc7e2ebae89e3c1268fee68d786767d2a9c4cdf4ac323176512df640da1e04be8864fe0818d6f1aa44de0525c240f890817863b311d87673ab843ea3730985e264c38dcc91ada936808cb0905fb9ecf871591c68ab14bbc9a075d7697a242ebecdf59d70a96aedc4a60a") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000cc001a80180002"], 0xec}}, 0x0) r8 = dup(r4) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) 1.194002079s ago: executing program 2 (id=1239): prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/116) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4d, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) r3 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0x2020) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xee, 0x533c009c}, 0x5}, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r5}, 0x18) memfd_secret(0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 735.236712ms ago: executing program 3 (id=1240): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x87, 0xfe, 0x4, 0xff}, {0x6}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@cgroup=r3, r3, 0x2f, 0x14, 0x4, @void, @value=r3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_UNLOCK(r5, 0x6406) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x102980, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000200)=@v3={0x3000000, [{0x185f, 0x29b6}, {0xbe8, 0xddee}], r7}, 0x18, 0x2) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r7, &(0x7f00000002c0)={0xf, 0xaaef, 0x0, 0x4, 0x2, 0x4, 0x5, 0x661}) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x300, 0x300, 0x0, 0x40, 0x3bb6, 0x2, 0x0, 0x2, {0x0, 0x2}, {0x80004, 0x2, 0x1}, {0x4004000, 0x8001}, {0x0, 0x8}, 0x3, 0x80, 0x0, 0xd613, 0x0, 0x0, 0x2116, 0x800f, 0x2, 0xff, 0x80, 0x0, 0x11, 0x0, 0x0, 0x3}) 581.847012ms ago: executing program 0 (id=1241): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) (fail_nth: 7) 199.0507ms ago: executing program 4 (id=1242): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x6, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x28000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) 178.483124ms ago: executing program 2 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 178.024027ms ago: executing program 0 (id=1244): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r2, 0xa07a000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r6, 0x0, 0x20000023896) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0xa, 0x0, @SEQ_NOTEON=@special}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x284, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xfff2}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x8, 0x7ff, 0x0, 0xbff0, 0x101, 0x7, 0x7, 0x1, 0x112d0f7e, 0x6, 0x1b, 0x1d, 0x9, 0x4, 0x8}}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "c966080a614046def18aeaa8b5fbb81f2057f8c40557854a9b91135492c4cf1a03171276ae1f64c8e2a2d223fb43b914c070464bfea01c7c9caf073e8d31ea1dbc215fa3e1897a0cae67e84b8ebcc9f1cf7d3450fb12060bcb53ae26a0b24f38f8783c1043ff84e1a23f3af0c1fb654bb5305425bd6919f4967a18afc8afd5ee4a0953111ff6151603d8571613db49cb73408ac4f4cee2f9f0ba71652c54f126b0b4d9f1be560df54088c72934b7f4b85ad0e04b812bd6612d81046a1963b4ea4a6ee90ddea763b51379696509fe976add5fe13432354eb13523f477ccf09ffc5f12141411ab953574522ea88d338ef600d15944f00601c63b1163e7e72dbcb3"}, @TCA_GRED_STAB={0x104, 0x2, "165f2ad79e9830529823cad451814f551bcf0e32d337691630db0548835a018b5be90ce0759d60dd667dc8d65fd4d6b7f220be458f7f4090b764176a8fea2c9517767c7b840860d3326b030bb2ccf4b4b0fca674e85c4d09763f60418e28e1d4290c185c260fe60f86c201f13c5b182aadd10bf0cd77a011cf0e5944aa1c76a59077d6a235dafdb47f427a53934c2f079b50b790a8c5a91122ee7ac110de135b04488478fae01ab378140efca5c7cf69c7c28d13ff5668f552fb994af6b8fa4935b2ff99c9765a1ab38086ed83182757e01d662bcbd1c23c40f9471f142c3c8e80aca17ab540919b4f39ea2a953a6c7cffbddb335fd376cd9fd2140c385189b7"}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}]}, 0x284}, 0x1, 0x0, 0x0, 0x20040068}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x11, 0x5d032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 4 (id=1245): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0x1c, 0x16, 0xb4, 0x3}, 0x50) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, {0x0, 0x0, 0x3e00}, {}, {0x0, 0x3}, {}, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0xc, 0x4, 0x0, 0x1}) kernel console output (not intermixed with test programs): ext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 216.452244][ T5965] usb 1-1: USB disconnect, device number 33 [ 216.566949][ T30] audit: type=1400 audit(1755934368.679:8398): avc: denied { read } for pid=8453 comm="syz.1.695" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 216.596146][ T30] audit: type=1400 audit(1755934368.679:8399): avc: denied { open } for pid=8453 comm="syz.1.695" path="/149/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 216.679331][ T8454] orangefs_mount: mount request failed with -4 [ 216.801058][ T30] audit: type=1400 audit(1755934368.909:8400): avc: denied { ioctl } for pid=8461 comm="syz.2.698" path="socket:[21473]" dev="sockfs" ino=21473 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.024843][ T8473] Failed to initialize the IGMP autojoin socket (err -2) [ 217.221544][ T8484] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 217.351208][ T5998] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 217.361998][ T8489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.705'. [ 217.417627][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 217.546984][ T5998] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 217.555317][ T5998] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 217.564077][ T5998] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 217.573239][ T5998] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 217.584148][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 217.594117][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 217.609413][ T30] audit: type=1400 audit(1755934369.719:8401): avc: denied { connect } for pid=8461 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.630565][ T5998] usb 5-1: string descriptor 0 read error: -22 [ 217.640626][ T5998] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 217.649883][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.660594][ T5998] usb 5-1: config 0 descriptor?? [ 217.713544][ T5908] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 217.722636][ T8473] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.747579][ T5998] hub 5-1:0.0: bad descriptor, ignoring hub [ 217.758157][ T5998] hub 5-1:0.0: probe with driver hub failed with error -5 [ 217.771044][ T8497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.783324][ T5998] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 217.802048][ T8497] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 217.885845][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 217.892325][ T5908] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.900746][ T5908] usb 1-1: config 0 has no interface number 0 [ 217.908538][ T5908] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.917817][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.925972][ T5908] usb 1-1: Product: syz [ 217.930174][ T5908] usb 1-1: Manufacturer: syz [ 217.934791][ T5908] usb 1-1: SerialNumber: syz [ 217.942210][ T5908] usb 1-1: config 0 descriptor?? [ 218.007582][ T5853] usb 5-1: USB disconnect, device number 30 [ 218.085299][ T5965] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 218.092989][ T30] audit: type=1400 audit(1755934370.179:8402): avc: denied { connect } for pid=8500 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.123165][ T5908] smsc95xx v2.0.0 [ 218.266268][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 218.273108][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.282172][ T5965] usb 2-1: config 3 has an invalid interface number: 187 but max is 0 [ 218.295055][ T5965] usb 2-1: config 3 has no interface number 0 [ 218.308788][ T5965] usb 2-1: config 3 interface 187 has no altsetting 0 [ 218.319538][ T5965] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=71.88 [ 218.329292][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.367492][ T5965] usb 2-1: Product: syz [ 218.373597][ T5965] usb 2-1: Manufacturer: syz [ 218.378663][ T5965] usb 2-1: SerialNumber: syz [ 218.529287][ T5908] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 218.563734][ T5908] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.589201][ T8499] netlink: 60 bytes leftover after parsing attributes in process `syz.1.708'. [ 218.762772][ T5908] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 218.808950][ T5908] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 218.824674][ T5908] usb 1-1: USB disconnect, device number 34 [ 219.895817][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.909317][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 219.913818][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 219.927684][ T43] usb 3-1: can't read configurations, error -71 [ 220.366338][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 220.992385][ T43] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 221.084902][ T5965] HFC-S_USB 2-1:3.187: probe with driver HFC-S_USB failed with error -5 [ 221.115719][ T5965] usb 2-1: USB disconnect, device number 24 [ 221.176967][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.185172][ T43] usb 3-1: config 0 has no interface number 0 [ 221.200300][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 221.232461][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.277903][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.722'. [ 221.287466][ T43] usb 3-1: config 0 descriptor?? [ 221.303074][ T43] usb 3-1: selecting invalid altsetting 1 [ 221.327056][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 221.341036][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 221.405405][ T43] DVB: Unable to find symbol cx22700_attach() [ 221.434870][ T43] DVB: Unable to find symbol tda10046_attach() [ 221.441576][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 221.851930][ T30] audit: type=1400 audit(1755934373.959:8403): avc: denied { read } for pid=8558 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.175732][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 223.320419][ T5998] usb 3-1: USB disconnect, device number 34 [ 223.425779][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 223.434081][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 223.444109][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.452452][ T43] usb 5-1: Product: syz [ 223.506196][ T43] usb 5-1: Manufacturer: syz [ 223.511081][ T43] usb 5-1: SerialNumber: syz [ 223.565596][ T43] usb 5-1: config 0 descriptor?? [ 223.597299][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 223.782337][ T8580] ALSA: mixer_oss: invalid OSS volume 'u' [ 223.835349][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.736'. [ 224.353847][ T8609] Failed to initialize the IGMP autojoin socket (err -2) [ 224.647079][ T5908] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 224.816616][ T5908] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 224.831695][ T5908] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 224.857109][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 224.866424][ T5908] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 224.880826][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 224.913476][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 224.939191][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 224.945523][ T5908] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 224.976368][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.995140][ T5908] usb 1-1: config 0 descriptor?? [ 225.003172][ T8612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.014426][ T5908] hub 1-1:0.0: bad descriptor, ignoring hub [ 225.020433][ T5908] hub 1-1:0.0: probe with driver hub failed with error -5 [ 225.031060][ T5908] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 225.080565][ C1] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 225.387443][ T5965] usb 1-1: USB disconnect, device number 35 [ 225.871026][ T8640] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.746'. [ 226.063870][ T30] audit: type=1400 audit(1755934378.159:8404): avc: denied { ioctl } for pid=8642 comm="syz.0.748" path="/dev/usbmon7" dev="devtmpfs" ino=742 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.363810][ T43] gspca_sonixj: reg_w1 err -71 [ 226.476221][ T43] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 226.485640][ T43] usb 5-1: USB disconnect, device number 31 [ 226.890696][ T30] audit: type=1400 audit(1755934378.949:8405): avc: denied { getopt } for pid=8657 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.908982][ T8736] kernel read not supported for file /!sel (pid: 8736 comm: syz.1.776) [ 230.012691][ T30] audit: type=1800 audit(1755934382.119:8406): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.776" name="!sel" dev="mqueue" ino=22398 res=0 errno=0 [ 230.067311][ T30] audit: type=1400 audit(1755934382.119:8407): avc: denied { getopt } for pid=8735 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.098080][ T30] audit: type=1326 audit(1755934382.199:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.144528][ T30] audit: type=1326 audit(1755934382.199:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.171167][ T30] audit: type=1326 audit(1755934382.199:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.209932][ T30] audit: type=1326 audit(1755934382.239:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.265303][ T30] audit: type=1326 audit(1755934382.239:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.364383][ T30] audit: type=1326 audit(1755934382.239:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.388670][ T30] audit: type=1326 audit(1755934382.239:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8722 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026418ebe9 code=0x7ffc0000 [ 230.540744][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 230.608503][ T8751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.782'. [ 230.676200][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 230.857220][ T10] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 231.288568][ T10] usb 5-1: config 0 has no interface number 0 [ 231.294736][ T10] usb 5-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 231.305407][ T10] usb 5-1: config 0 interface 173 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.316028][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 231.325205][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.335140][ T10] usb 5-1: config 0 descriptor?? [ 231.342194][ T8745] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.559797][ T10] hdpvr 5-1:0.173: unexpected answer of status request, len -71 [ 231.578759][ T10] hdpvr 5-1:0.173: device init failed [ 231.594335][ T10] hdpvr 5-1:0.173: probe with driver hdpvr failed with error -12 [ 231.615488][ T10] usb 5-1: USB disconnect, device number 32 [ 231.913975][ T8774] program syz.0.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.932735][ T8774] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 232.164818][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.793'. [ 232.213767][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 232.213783][ T30] audit: type=1400 audit(1755934384.319:8420): avc: denied { remount } for pid=8781 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 232.217228][ T8782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8782 comm=syz.2.794 [ 232.221055][ T30] audit: type=1400 audit(1755934384.329:8421): avc: denied { bind } for pid=8781 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.241628][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 232.287606][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.794'. [ 232.296666][ T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 232.458359][ T43] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 232.499190][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.269469][ T43] usb 1-1: config 0 descriptor?? [ 233.617225][ T5965] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 233.836323][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 233.872713][ T5965] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 233.881502][ T5965] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 233.898158][ T5965] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.912942][ T5965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.000179][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.015946][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 234.016467][ T5965] usbtmc 4-1:16.0: bulk endpoints not found [ 234.165784][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 234.173978][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 234.183643][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.192410][ T5908] usb 3-1: Product: syz [ 234.197191][ T5908] usb 3-1: Manufacturer: syz [ 234.201865][ T5908] usb 3-1: SerialNumber: syz [ 234.210533][ T5908] usb 3-1: config 0 descriptor?? [ 234.217536][ T5965] usb 4-1: USB disconnect, device number 30 [ 234.280398][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 234.365952][ T5998] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 234.409750][ T43] usb 1-1: Cannot set autoneg [ 234.414616][ T43] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 234.556277][ T5998] usb 2-1: Using ep0 maxpacket: 32 [ 234.601959][ T5998] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 234.649842][ T5998] usb 2-1: config 0 has no interface number 0 [ 234.657378][ T43] usb 1-1: USB disconnect, device number 36 [ 234.664021][ T5998] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.675153][ T5998] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 234.687739][ T5998] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 234.697642][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.706672][ T5998] usb 2-1: Product: syz [ 234.710972][ T5998] usb 2-1: Manufacturer: syz [ 234.715588][ T5998] usb 2-1: SerialNumber: syz [ 234.722048][ T5998] usb 2-1: config 0 descriptor?? [ 234.729906][ T5998] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 234.758098][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.810'. [ 234.759387][ T30] audit: type=1400 audit(1755934386.869:8422): avc: denied { write } for pid=8826 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 234.935810][ T5998] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 234.942844][ T5998] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 235.066323][ T5965] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 235.194573][ T8842] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 235.204146][ T8842] overlayfs: missing 'lowerdir' [ 235.219176][ T5998] usb 2-1: USB disconnect, device number 25 [ 235.269410][ T5965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.278948][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.288166][ T5965] usb 4-1: Product: syz [ 235.292400][ T5965] usb 4-1: Manufacturer: syz [ 235.298040][ T5965] usb 4-1: SerialNumber: syz [ 235.412274][ T5965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.450918][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.159299][ T8858] Failed to initialize the IGMP autojoin socket (err -2) [ 236.448461][ T5965] usb 4-1: USB disconnect, device number 31 [ 236.465793][ T5895] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 236.506486][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 236.516332][ T10] ath9k_htc: Failed to initialize the device [ 236.545788][ T5965] usb 4-1: ath9k_htc: USB layer deinitialized [ 236.575781][ T5998] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 236.628238][ T5895] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 236.640664][ T30] audit: type=1400 audit(1755934388.749:8423): avc: denied { map } for pid=8865 comm="syz.3.820" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 236.677272][ T5895] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 236.752331][ T30] audit: type=1400 audit(1755934388.749:8424): avc: denied { execute } for pid=8865 comm="syz.3.820" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 236.781174][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 236.790320][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 236.801620][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 236.813573][ T8866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.835350][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 236.852211][ T5895] usb 2-1: string descriptor 0 read error: -22 [ 236.858857][ T5895] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 236.869761][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.879675][ T5998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.890897][ T5998] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 236.908834][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.927875][ T5895] usb 2-1: config 0 descriptor?? [ 236.938857][ T8860] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 236.953061][ T5908] gspca_sonixj: reg_w1 err -71 [ 236.966925][ T5895] hub 2-1:0.0: bad descriptor, ignoring hub [ 236.984515][ T5895] hub 2-1:0.0: probe with driver hub failed with error -5 [ 236.992753][ T5998] usb 1-1: config 0 descriptor?? [ 236.997898][ T5908] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 237.012661][ T5908] usb 3-1: USB disconnect, device number 35 [ 237.034810][ T5895] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 237.430001][ T5998] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 237.551206][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.822'. [ 237.622777][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.627114][ T10] usb 2-1: USB disconnect, device number 26 [ 237.645271][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.695444][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.712135][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.721144][ T5998] lenovo 0003:17EF:6047.0009: Failed to switch F7/9/11 mode: -71 [ 237.735831][ T5998] lenovo 0003:17EF:6047.0009: Failed to switch middle button: -71 [ 237.754179][ T5998] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71 [ 237.762097][ T5998] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 237.781722][ T5998] usb 1-1: USB disconnect, device number 37 [ 238.541596][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.550686][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.558744][ T30] audit: type=1400 audit(1755934390.649:8425): avc: denied { getopt } for pid=8905 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.715855][ T5908] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 238.796335][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 238.885929][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 238.992876][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 238.998835][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.999188][ T5908] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 238.999352][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.028467][ T5908] usb 1-1: config 0 descriptor?? [ 239.124551][ T10] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 239.133193][ T10] usb 2-1: config 0 has no interface number 0 [ 239.145381][ T10] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 239.147665][ T5908] usbhid 1-1:0.0: can't add hid device: -22 [ 239.166359][ T10] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 239.232911][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 239.260919][ T10] usb 2-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 239.271691][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.292855][ T10] usb 2-1: Product: syz [ 239.303397][ T10] usb 2-1: Manufacturer: syz [ 239.310628][ T10] usb 2-1: SerialNumber: syz [ 239.321088][ T10] usb 2-1: config 0 descriptor?? [ 239.329586][ T8927] syz.2.839: attempt to access beyond end of device [ 239.329586][ T8927] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 239.342803][ T8927] syz.2.839: attempt to access beyond end of device [ 239.342803][ T8927] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 239.356013][ T8927] Mount JFS Failure: -5 [ 239.445819][ T8908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.453035][ T8908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.666762][ T10] hub 2-1:0.219: bad descriptor, ignoring hub [ 239.673580][ T10] hub 2-1:0.219: probe with driver hub failed with error -5 [ 239.683159][ T10] option 2-1:0.219: GSM modem (1-port) converter detected [ 239.697635][ T10] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 239.806660][ T10] usb 2-1: USB disconnect, device number 27 [ 240.009630][ T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 240.026856][ T10] option 2-1:0.219: device disconnected [ 240.428390][ T5965] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 240.615844][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 240.623167][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.647183][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.658693][ T5965] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 240.668766][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.678501][ T5965] usb 4-1: config 0 descriptor?? [ 240.855848][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 240.946837][ T5851] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 241.005717][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 241.020106][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.032002][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.041935][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.050513][ T5908] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 241.060619][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.075444][ T5908] usb 2-1: config 0 descriptor?? [ 241.092366][ T5965] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x1 [ 241.104238][ T5965] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 241.300565][ T5965] usb 4-1: USB disconnect, device number 32 [ 241.507978][ T5908] cougar 0003:060B:500A.000B: unexpected long global item [ 241.523058][ T5908] cougar 0003:060B:500A.000B: parse failed [ 241.529417][ T5908] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 241.548014][ T30] audit: type=1400 audit(1755934393.659:8426): avc: denied { relabelfrom } for pid=8959 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.568510][ T30] audit: type=1400 audit(1755934393.659:8427): avc: denied { relabelto } for pid=8959 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 241.629080][ T5998] usb 1-1: USB disconnect, device number 38 [ 241.695242][ T8965] syz.0.851: attempt to access beyond end of device [ 241.695242][ T8965] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 241.709498][ T8965] syz.0.851: attempt to access beyond end of device [ 241.709498][ T8965] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 241.722880][ T8965] Mount JFS Failure: -5 [ 241.726693][ T5908] usb 2-1: USB disconnect, device number 28 [ 242.297464][ T30] audit: type=1400 audit(1755934394.409:8428): avc: denied { audit_write } for pid=8974 comm="syz.2.855" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 242.893439][ T8998] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.858'. [ 242.904535][ T8989] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.858'. [ 243.080210][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 243.148380][ T30] audit: type=1400 audit(1755934395.239:8429): avc: denied { create } for pid=8980 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.170651][ T30] audit: type=1400 audit(1755934395.239:8430): avc: denied { write } for pid=8980 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 243.212135][ T30] audit: type=1400 audit(1755934395.259:8431): avc: denied { setopt } for pid=8983 comm="syz.3.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.821102][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.863'. [ 243.979481][ T9017] Failed to initialize the IGMP autojoin socket (err -2) [ 244.107820][ T30] audit: type=1400 audit(1755934396.209:8432): avc: denied { create } for pid=9016 comm="syz.3.866" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.138557][ T9029] FAULT_INJECTION: forcing a failure. [ 244.138557][ T9029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.178160][ T30] audit: type=1400 audit(1755934396.219:8433): avc: denied { mounton } for pid=9016 comm="syz.3.866" path="/182/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.186241][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.0.868 Not tainted syzkaller #0 PREEMPT(full) [ 244.186268][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.186276][ T9029] Call Trace: [ 244.186282][ T9029] [ 244.186288][ T9029] dump_stack_lvl+0x16c/0x1f0 [ 244.186308][ T9029] should_fail_ex+0x512/0x640 [ 244.186327][ T9029] _copy_from_iter+0x29f/0x16f0 [ 244.186347][ T9029] ? __alloc_skb+0x200/0x380 [ 244.186361][ T9029] ? __pfx__copy_from_iter+0x10/0x10 [ 244.186379][ T9029] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 244.186400][ T9029] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 244.186423][ T9029] netlink_sendmsg+0x829/0xdd0 [ 244.186442][ T9029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.186462][ T9029] ____sys_sendmsg+0xa95/0xc70 [ 244.186481][ T9029] ? copy_msghdr_from_user+0x10a/0x160 [ 244.186496][ T9029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.186514][ T9029] ? __pfx_kstrtouint+0x10/0x10 [ 244.186530][ T9029] ? kstrtouint_from_user+0x13c/0x1d0 [ 244.186545][ T9029] ___sys_sendmsg+0x134/0x1d0 [ 244.186559][ T9029] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.186578][ T9029] ? rcu_is_watching+0x12/0xc0 [ 244.186603][ T9029] __sys_sendmsg+0x16d/0x220 [ 244.186618][ T9029] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.186639][ T9029] do_syscall_64+0xcd/0x4c0 [ 244.186655][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.186670][ T9029] RIP: 0033:0x7f026418ebe9 [ 244.186682][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.186696][ T9029] RSP: 002b:00007f0264f93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.186711][ T9029] RAX: ffffffffffffffda RBX: 00007f02643b6090 RCX: 00007f026418ebe9 [ 244.186721][ T9029] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 244.186731][ T9029] RBP: 00007f0264f93090 R08: 0000000000000000 R09: 0000000000000000 [ 244.186739][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.186748][ T9029] R13: 00007f02643b6128 R14: 00007f02643b6090 R15: 00007fffbb588258 [ 244.186762][ T9029] [ 244.275819][ T5908] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 244.316234][ T5853] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 244.513783][ T30] audit: type=1400 audit(1755934396.619:8434): avc: denied { unlink } for pid=5842 comm="syz-executor" name="file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 244.570212][ T5908] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 244.586420][ T5908] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 244.586501][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 244.620661][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 244.622345][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.641732][ T5853] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 244.651371][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.790916][ T5853] usb 3-1: config 0 descriptor?? [ 244.797471][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 244.808585][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 244.822444][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 244.832918][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 244.858741][ T5908] usb 2-1: string descriptor 0 read error: -22 [ 244.865099][ T5908] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 244.878636][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.888248][ T5908] usb 2-1: config 0 descriptor?? [ 244.893713][ T9021] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.923801][ T5908] hub 2-1:0.0: bad descriptor, ignoring hub [ 244.935301][ T5908] hub 2-1:0.0: probe with driver hub failed with error -5 [ 244.945094][ T5908] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 244.993177][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 245.052158][ T5895] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 245.061765][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.078544][ T5895] usb 1-1: Product: syz [ 245.083131][ T5895] usb 1-1: Manufacturer: syz [ 245.097419][ T5895] usb 1-1: SerialNumber: syz [ 245.118472][ T5965] usb 2-1: USB disconnect, device number 29 [ 245.120241][ T5895] usb 1-1: config 0 descriptor?? [ 245.191313][ T5895] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 245.203997][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.214428][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.229048][ T5853] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 245.239050][ T5853] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 245.247544][ T5853] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 245.256892][ T5853] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 245.268262][ T5853] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 245.285151][ T5853] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 245.491724][ T5853] koneplus 0003:1E7D:2D51.000C: couldn't init struct koneplus_device [ 245.512555][ T5853] koneplus 0003:1E7D:2D51.000C: couldn't install mouse [ 245.549544][ T5853] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -71 [ 245.581736][ T5853] usb 3-1: USB disconnect, device number 36 [ 245.593228][ T9044] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.872'. [ 246.066775][ T9055] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 246.066775][ T9055] program syz.2.876 not setting count and/or reply_len properly [ 246.200044][ T9059] No control pipe specified [ 247.136528][ T5853] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 247.154235][ T5908] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.306292][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 247.312718][ T5853] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 247.325850][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 247.326325][ T5853] usb 2-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 247.352788][ T5908] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.366639][ T5853] usb 2-1: config 0 has no interface number 0 [ 247.368187][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.388605][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 247.404113][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.418104][ T9097] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.886'. [ 247.428633][ T5908] usb 4-1: Product: syz [ 247.432811][ T5908] usb 4-1: Manufacturer: syz [ 247.432888][ T5853] usb 2-1: Product: syz [ 247.437819][ T5908] usb 4-1: SerialNumber: syz [ 247.446360][ T5853] usb 2-1: Manufacturer: syz [ 247.450977][ T5853] usb 2-1: SerialNumber: syz [ 247.478534][ T5908] usb 4-1: config 0 descriptor?? [ 247.484178][ T5853] usb 2-1: config 0 descriptor?? [ 247.653362][ T9104] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 247.653362][ T9104] program syz.2.888 not setting count and/or reply_len properly [ 247.688965][ T5908] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.706204][ T5853] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 247.767159][ T5853] usb 2-1: No valid video chain found. [ 247.789184][ T5853] usb 2-1: USB disconnect, device number 30 [ 247.800654][ T5895] gspca_sonixj: reg_w1 err -71 [ 247.846333][ T5895] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 247.960077][ T5895] usb 1-1: USB disconnect, device number 39 [ 248.993105][ T30] audit: type=1400 audit(1755934401.099:8435): avc: denied { map } for pid=9125 comm="syz.2.894" path="/proc/595/task/596/loginuid" dev="proc" ino=24423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 249.256362][ T5853] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 249.264347][ T9128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.275450][ T9128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.545219][ T9128] bond0 (unregistering): Released all slaves [ 249.599954][ T5853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 249.616538][ T30] audit: type=1400 audit(1755934401.719:8436): avc: denied { ioctl } for pid=9133 comm="syz.0.897" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.651834][ T5853] usb 3-1: not running at top speed; connect to a high speed hub [ 249.673603][ T5908] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.674777][ T5853] usb 3-1: config 7 has an invalid descriptor of length 102, skipping remainder of the config [ 249.692783][ T5908] usb 4-1: USB disconnect, device number 33 [ 249.694506][ T5853] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26232, setting to 64 [ 249.712768][ T5853] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.728687][ T5853] usb 3-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 249.733143][ T9139] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.898'. [ 249.738338][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.756390][ T5853] usb 3-1: Product: syz [ 249.760726][ T5853] usb 3-1: Manufacturer: syz [ 249.766456][ T5853] usb 3-1: SerialNumber: syz [ 250.034537][ T5853] usb 3-1: USB disconnect, device number 37 [ 250.105763][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 250.312810][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 250.319705][ T5895] usb 2-1: config 9 has an invalid interface number: 70 but max is 0 [ 250.328032][ T5895] usb 2-1: config 9 has no interface number 0 [ 250.335780][ T5895] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 250.345074][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.353190][ T5895] usb 2-1: Product: syz [ 250.357459][ T5895] usb 2-1: Manufacturer: syz [ 250.362042][ T5895] usb 2-1: SerialNumber: syz [ 250.713234][ T5895] ttusb_dec_send_command: command bulk message failed: error -22 [ 250.723903][ T5895] ttusb-dec 2-1:9.70: probe with driver ttusb-dec failed with error -22 [ 250.762522][ T5895] usb 2-1: USB disconnect, device number 31 [ 250.846339][ T5908] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 251.016234][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 251.023375][ T5908] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 251.031942][ T5908] usb 1-1: config 0 has no interface number 0 [ 251.039408][ T5908] usb 1-1: config 0 interface 12 has no altsetting 0 [ 251.057414][ T5908] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 251.066662][ T5908] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 251.233702][ T5908] usb 1-1: Product: syz [ 251.240582][ T5908] usb 1-1: Manufacturer: syz [ 251.245271][ T5908] usb 1-1: SerialNumber: syz [ 251.265621][ T5908] usb 1-1: config 0 descriptor?? [ 251.406257][ T5853] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 251.558478][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 252.175695][ T5853] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 252.316188][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.326785][ T5853] usb 4-1: config 0 descriptor?? [ 252.667073][ T9190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 252.698810][ T5853] usbhid 4-1:0.0: can't add hid device: -71 [ 252.704781][ T5853] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 252.716691][ T5853] usb 4-1: USB disconnect, device number 34 [ 253.408809][ T30] audit: type=1400 audit(1755934405.519:8437): avc: denied { ioctl } for pid=9221 comm="syz.1.921" path="socket:[25721]" dev="sockfs" ino=25721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.523526][ T30] audit: type=1400 audit(1755934405.629:8438): avc: denied { map } for pid=9225 comm="syz.4.923" path="socket:[25361]" dev="sockfs" ino=25361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 253.557130][ T30] audit: type=1400 audit(1755934405.629:8439): avc: denied { accept } for pid=9225 comm="syz.4.923" path="socket:[25361]" dev="sockfs" ino=25361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 253.757088][ T5908] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 253.765488][ T5908] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 253.804341][ T5908] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 253.894828][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 253.904053][ T5908] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 253.964700][ T5908] usb 1-1: USB disconnect, device number 40 [ 254.176961][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 254.330063][ T30] audit: type=1400 audit(1755934406.439:8440): avc: denied { write } for pid=9248 comm="syz.0.930" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 254.438722][ T30] audit: type=1400 audit(1755934406.469:8441): avc: denied { ioctl } for pid=9248 comm="syz.0.930" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 254.471295][ T9256] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 254.642446][ T9264] FAULT_INJECTION: forcing a failure. [ 254.642446][ T9264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.692039][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) [ 254.692066][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.692077][ T9264] Call Trace: [ 254.692082][ T9264] [ 254.692088][ T9264] dump_stack_lvl+0x16c/0x1f0 [ 254.692111][ T9264] should_fail_ex+0x512/0x640 [ 254.692132][ T9264] _copy_to_user+0x32/0xd0 [ 254.692154][ T9264] __sys_bpf+0x289f/0x4de0 [ 254.692179][ T9264] ? __pfx___sys_bpf+0x10/0x10 [ 254.692199][ T9264] ? ksys_write+0x190/0x250 [ 254.692215][ T9264] ? rcu_is_watching+0x12/0xc0 [ 254.692236][ T9264] ? lock_release+0x201/0x2f0 [ 254.692263][ T9264] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 254.692288][ T9264] ? fput+0x9b/0xd0 [ 254.692313][ T9264] ? ksys_write+0x1ac/0x250 [ 254.692329][ T9264] ? __pfx_ksys_write+0x10/0x10 [ 254.692348][ T9264] __x64_sys_bpf+0x78/0xc0 [ 254.692369][ T9264] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 254.692389][ T9264] do_syscall_64+0xcd/0x4c0 [ 254.692409][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.692426][ T9264] RIP: 0033:0x7fbaa2f8ebe9 [ 254.692439][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.692456][ T9264] RSP: 002b:00007fbaa3e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.692474][ T9264] RAX: ffffffffffffffda RBX: 00007fbaa31b5fa0 RCX: 00007fbaa2f8ebe9 [ 254.692485][ T9264] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 254.692496][ T9264] RBP: 00007fbaa3e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 254.692506][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.692516][ T9264] R13: 00007fbaa31b6038 R14: 00007fbaa31b5fa0 R15: 00007ffc4c11c738 [ 254.692534][ T9264] [ 254.695215][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 254.748927][ T9267] tipc: Enabling of bearer rejected, failed to enable media [ 255.235153][ T9275] netlink: 240 bytes leftover after parsing attributes in process `syz.0.936'. [ 255.298220][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.304553][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.780802][ T9292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.120043][ T30] audit: type=1400 audit(1755934408.209:8442): avc: denied { read write } for pid=9295 comm="syz.2.946" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.367471][ T30] audit: type=1400 audit(1755934408.209:8443): avc: denied { open } for pid=9295 comm="syz.2.946" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.404610][ T30] audit: type=1400 audit(1755934408.209:8444): avc: denied { ioctl } for pid=9295 comm="syz.2.946" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.463069][ T9307] tmpfs: Unknown parameter 'size%' [ 256.509269][ T9308] Failed to initialize the IGMP autojoin socket (err -2) [ 256.520339][ T30] audit: type=1400 audit(1755934408.629:8445): avc: denied { read } for pid=9305 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.601788][ T30] audit: type=1400 audit(1755934408.679:8446): avc: denied { bind } for pid=9305 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.817722][ T5965] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 257.290717][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.949'. [ 257.306863][ T5965] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 257.329121][ T5965] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 257.343911][ T5965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 257.455247][ T5965] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 257.582687][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 257.596567][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 257.625184][ T5965] usb 4-1: string descriptor 0 read error: -22 [ 257.631991][ T5965] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 257.652357][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.694972][ T5965] usb 4-1: config 0 descriptor?? [ 257.715038][ T9310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.977019][ T5965] hub 4-1:0.0: bad descriptor, ignoring hub [ 258.036044][ T5965] hub 4-1:0.0: probe with driver hub failed with error -5 [ 258.045501][ T5965] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38 [ 258.598418][ T5965] usb 4-1: USB disconnect, device number 35 [ 258.839861][ T9369] netlink: 'syz.0.968': attribute type 58 has an invalid length. [ 258.852307][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'. [ 259.222138][ T5965] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 259.376330][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 260.027474][ T5965] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 260.037081][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.045071][ T5965] usb 2-1: Product: syz [ 260.049409][ T5965] usb 2-1: Manufacturer: syz [ 260.054043][ T5965] usb 2-1: SerialNumber: syz [ 260.067150][ T5965] usb 2-1: config 0 descriptor?? [ 260.073940][ T5965] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 260.213526][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 260.234551][ T30] audit: type=1400 audit(1755934412.339:8447): avc: denied { read } for pid=9383 comm="syz.3.974" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.297928][ T30] audit: type=1400 audit(1755934412.339:8448): avc: denied { open } for pid=9383 comm="syz.3.974" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.346708][ T30] audit: type=1400 audit(1755934412.339:8449): avc: denied { ioctl } for pid=9383 comm="syz.3.974" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.349577][ T9388] netlink: 68 bytes leftover after parsing attributes in process `syz.3.975'. [ 260.372150][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.355713][ T5908] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 261.515980][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 261.540886][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.541777][ T5908] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 261.541879][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.600413][ T5908] usb 4-1: config 0 descriptor?? [ 261.602698][ T5908] usbhid 4-1:0.0: can't add hid device: -22 [ 261.602762][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 261.804055][ T9423] fuse: Unknown parameter '' [ 262.798359][ T9437] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 262.871328][ T9435] Failed to initialize the IGMP autojoin socket (err -2) [ 262.976547][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 262.993396][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 263.098202][ T5965] gspca_sonixj: reg_w1 err -71 [ 263.136358][ T5965] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 263.146422][ T5965] usb 2-1: USB disconnect, device number 32 [ 263.403265][ T9448] Failed to initialize the IGMP autojoin socket (err -2) [ 263.706109][ T10] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 264.022316][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 264.031073][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 264.040042][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 264.049418][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 264.070226][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 264.081670][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 264.183317][ T43] usb 4-1: USB disconnect, device number 36 [ 264.316467][ T10] usb 5-1: string descriptor 0 read error: -22 [ 264.323490][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 264.333410][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.343672][ T10] usb 5-1: config 0 descriptor?? [ 264.354019][ T9448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.380530][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 264.483632][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 264.559906][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input39 [ 265.148292][ T30] audit: type=1400 audit(1755934417.249:8450): avc: granted { setsecparam } for pid=9468 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 265.358859][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.997'. [ 265.368237][ T9479] openvswitch: netlink: Flow key attr not present in new flow. [ 265.578340][ T9483] FAULT_INJECTION: forcing a failure. [ 265.578340][ T9483] name failslab, interval 1, probability 0, space 0, times 0 [ 265.591067][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.1.1000 Not tainted syzkaller #0 PREEMPT(full) [ 265.591089][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.591096][ T9483] Call Trace: [ 265.591100][ T9483] [ 265.591104][ T9483] dump_stack_lvl+0x16c/0x1f0 [ 265.591119][ T9483] should_fail_ex+0x512/0x640 [ 265.591133][ T9483] should_failslab+0xc2/0x120 [ 265.591147][ T9483] __kmalloc_cache_noprof+0x6a/0x3e0 [ 265.591164][ T9483] ? snd_seq_oss_open+0x55/0xa20 [ 265.591180][ T9483] snd_seq_oss_open+0x55/0xa20 [ 265.591194][ T9483] odev_open+0x6f/0x90 [ 265.591206][ T9483] ? __pfx_odev_open+0x10/0x10 [ 265.591218][ T9483] soundcore_open+0x40c/0x580 [ 265.591230][ T9483] ? __pfx_soundcore_open+0x10/0x10 [ 265.591242][ T9483] chrdev_open+0x231/0x6a0 [ 265.591255][ T9483] ? __pfx_chrdev_open+0x10/0x10 [ 265.591268][ T9483] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 265.591283][ T9483] do_dentry_open+0x982/0x1530 [ 265.591295][ T9483] ? __pfx_chrdev_open+0x10/0x10 [ 265.591309][ T9483] vfs_open+0x82/0x3f0 [ 265.591323][ T9483] path_openat+0x1de4/0x2cb0 [ 265.591337][ T9483] ? __pfx_path_openat+0x10/0x10 [ 265.591351][ T9483] do_filp_open+0x20b/0x470 [ 265.591362][ T9483] ? __pfx_do_filp_open+0x10/0x10 [ 265.591379][ T9483] ? alloc_fd+0x471/0x7d0 [ 265.591391][ T9483] do_sys_openat2+0x11b/0x1d0 [ 265.591406][ T9483] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.591421][ T9483] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 265.591435][ T9483] ? rcu_is_watching+0x12/0xc0 [ 265.591450][ T9483] __x64_sys_openat+0x174/0x210 [ 265.591465][ T9483] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.591489][ T9483] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 265.591503][ T9483] do_syscall_64+0xcd/0x4c0 [ 265.591519][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.591530][ T9483] RIP: 0033:0x7f987f18ebe9 [ 265.591539][ T9483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.591550][ T9483] RSP: 002b:00007f987ffec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.591561][ T9483] RAX: ffffffffffffffda RBX: 00007f987f3b6090 RCX: 00007f987f18ebe9 [ 265.591568][ T9483] RDX: 0000000000088302 RSI: 0000200000001bc0 RDI: 00000000ffffff9c [ 265.591575][ T9483] RBP: 00007f987ffec090 R08: 0000000000000000 R09: 0000000000000000 [ 265.591582][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.591588][ T9483] R13: 00007f987f3b6128 R14: 00007f987f3b6090 R15: 00007fff7ca7f678 [ 265.591598][ T9483] [ 266.302832][ T9498] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=9498 comm=syz.0.1003 [ 266.621389][ T5895] usb 5-1: USB disconnect, device number 33 [ 267.818497][ T43] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 268.019762][ T43] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 268.051788][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 268.076162][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 268.106169][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.131241][ T43] usb 5-1: config 0 descriptor?? [ 268.171134][ T9524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.585251][ T30] audit: type=1400 audit(1755934420.689:8451): avc: denied { create } for pid=9555 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 268.683446][ T43] konepure 0003:1E7D:2DBE.000D: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 268.716403][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 268.966643][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 268.993246][ T10] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 269.382288][ T10] usb 4-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 269.416643][ T10] usb 4-1: config 0 has no interface number 0 [ 269.486492][ T10] usb 4-1: config 0 interface 212 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.564101][ T10] usb 4-1: config 0 interface 212 has no altsetting 0 [ 269.573207][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=c5.d3 [ 269.595763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.610920][ T10] usb 4-1: Product: syz [ 269.615182][ T10] usb 4-1: Manufacturer: syz [ 269.621321][ T10] usb 4-1: SerialNumber: syz [ 269.687099][ T43] usb 5-1: USB disconnect, device number 34 [ 269.708883][ T10] usb 4-1: config 0 descriptor?? [ 270.023726][ T10] kvaser_usb 4-1:0.212: error -ENODEV: Cannot get usb endpoint(s) [ 270.044865][ T10] usb 4-1: USB disconnect, device number 37 [ 270.092127][ T30] audit: type=1400 audit(1755934422.199:8452): avc: denied { getopt } for pid=9574 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.112040][ T5851] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 270.120346][ T5851] Bluetooth: hci4: Injecting HCI hardware error event [ 270.127350][ T5854] Bluetooth: hci4: hardware error 0x00 [ 270.295824][ T5908] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 270.356174][ T5965] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 270.436919][ T5908] usb 2-1: device descriptor read/64, error -71 [ 270.499480][ T30] audit: type=1400 audit(1755934422.609:8453): avc: denied { read } for pid=9578 comm="syz.0.1030" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.535468][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 270.545594][ T30] audit: type=1400 audit(1755934422.609:8454): avc: denied { open } for pid=9578 comm="syz.0.1030" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.582396][ T5965] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 270.596314][ T5965] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 270.635169][ T5965] usb 3-1: config 5 has no interface number 0 [ 270.641947][ T30] audit: type=1400 audit(1755934422.609:8455): avc: denied { ioctl } for pid=9578 comm="syz.0.1030" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 270.697682][ T9591] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=9591 comm=syz.4.1029 [ 270.732353][ T5965] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 270.750004][ T5965] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 270.766597][ T30] audit: type=1400 audit(1755934422.879:8456): avc: denied { associate } for pid=9581 comm="syz.0.1031" name=33C42B0592C958E8AE79B29152D8B50314D61F068BADD9531F07BABBE641A1A76E121A8B0C0604A15B2738AFC9BD635FA6496716C0A1E9F2DA35A4B6CEF320F0095F9B9D77417F3FA278563EF8F50E01504FA1763858AF3BB0A73E478D115CF4 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.804644][ T5965] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 0 [ 270.814654][ T5908] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 270.825140][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.834036][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.859514][ T5965] usb 3-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.873382][ T5965] usb 3-1: config 5 interface 168 has no altsetting 0 [ 270.966033][ T5908] usb 2-1: device descriptor read/64, error -71 [ 271.076931][ T5908] usb usb2-port1: attempt power cycle [ 271.086380][ T5965] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 271.101067][ T5853] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 271.117517][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.136277][ T5965] usb 3-1: Product: syz [ 271.140552][ T5965] usb 3-1: Manufacturer: syz [ 271.185545][ T5965] usb 3-1: SerialNumber: syz [ 271.256195][ T5853] usb 4-1: device descriptor read/64, error -71 [ 271.445716][ T5908] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 271.459702][ T5965] pn533_usb 3-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 271.497246][ T5853] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 271.507197][ T5908] usb 2-1: device descriptor read/8, error -71 [ 271.509737][ T5965] usb 3-1: USB disconnect, device number 38 [ 271.590709][ T9610] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 271.636374][ T5853] usb 4-1: device descriptor read/64, error -71 [ 271.746128][ T5853] usb usb4-port1: attempt power cycle [ 271.785890][ T5908] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 271.806861][ T5908] usb 2-1: device descriptor read/8, error -71 [ 271.917067][ T5908] usb usb2-port1: unable to enumerate USB device [ 272.086038][ T5853] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 272.116489][ T5853] usb 4-1: device descriptor read/8, error -71 [ 272.176293][ T5854] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 272.183858][ T9619] Failed to initialize the IGMP autojoin socket (err -2) [ 272.352281][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1040'. [ 272.386335][ T5853] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 272.396511][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1040'. [ 272.406753][ T5853] usb 4-1: device descriptor read/8, error -71 [ 272.488122][ T30] audit: type=1400 audit(1755934424.599:8457): avc: denied { map } for pid=9623 comm="syz.0.1041" path="pipe:[27225]" dev="pipefs" ino=27225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 272.516811][ T5853] usb usb4-port1: unable to enumerate USB device [ 272.546205][ T10] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 272.731120][ T10] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 272.742725][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 272.752930][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 272.765317][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 272.777216][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 272.787742][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 272.937915][ T10] usb 3-1: string descriptor 0 read error: -22 [ 272.944267][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 272.953753][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.982838][ T10] usb 3-1: config 0 descriptor?? [ 273.002778][ T9619] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 273.041416][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 273.063220][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 273.092261][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 273.158000][ T9634] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1045'. [ 273.431134][ T10] usb 3-1: USB disconnect, device number 39 [ 274.921749][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1051'. [ 274.936272][ T5853] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 275.076034][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 275.093778][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 275.101899][ T5853] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 275.330427][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.341710][ T5853] usb 4-1: Product: syz [ 275.346344][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 275.439951][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 275.454164][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.465273][ T5853] usb 4-1: Manufacturer: syz [ 275.481050][ T10] usb 3-1: config 0 descriptor?? [ 275.489754][ T5853] usb 4-1: SerialNumber: syz [ 275.507812][ T5853] usb 4-1: config 0 descriptor?? [ 275.514337][ T5853] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 275.529445][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 275.619898][ T30] audit: type=1400 audit(1755934427.729:8458): avc: denied { mount } for pid=9680 comm="syz.0.1060" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.762538][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 275.918568][ T9665] ceph: No mds server is up or the cluster is laggy [ 276.016805][ T5965] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 276.056039][ T10] gspca_sunplus: reg_w_riv err -110 [ 276.105400][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 276.196785][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 276.204046][ T5965] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.213941][ T5965] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.223231][ T5965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.232858][ T5965] usb 1-1: config 1 has no interface number 0 [ 276.240562][ T5965] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.252112][ T5965] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.266761][ T5965] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.276413][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.289431][ T5965] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 276.395705][ T5908] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 276.450975][ T10] usb 3-1: USB disconnect, device number 40 [ 276.577202][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 276.589509][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.609533][ T5908] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 276.624809][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.635023][ T5908] usb 5-1: config 0 descriptor?? [ 276.646920][ T5908] usbhid 5-1:0.0: can't add hid device: -22 [ 276.654269][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 277.168582][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 277.694697][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 277.866226][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 278.016352][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 278.022876][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 278.031478][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 278.041074][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.049483][ T9] usb 2-1: Product: syz [ 278.053688][ T9] usb 2-1: Manufacturer: syz [ 278.058705][ T9] usb 2-1: SerialNumber: syz [ 278.064270][ T9] usb 2-1: config 0 descriptor?? [ 278.172644][ T5853] gspca_sonixj: reg_w1 err -71 [ 278.216271][ T5853] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 278.225571][ T5853] usb 4-1: USB disconnect, device number 42 [ 278.530567][ T9] gs_usb 2-1:0.0: Configuring for 84 interfaces [ 278.537234][ T9] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 278.545275][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 278.817289][ T5965] snd_usb_pod 1-1:1.1: set_interface failed [ 278.835138][ T5965] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 278.853628][ T5965] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 278.872008][ T5965] usb 1-1: USB disconnect, device number 41 [ 279.195831][ T5908] usb 5-1: USB disconnect, device number 35 [ 279.673801][ T9747] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 280.030635][ T30] audit: type=1400 audit(1755934432.129:8459): avc: denied { read } for pid=9753 comm="syz.0.1081" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.084053][ T30] audit: type=1400 audit(1755934432.129:8460): avc: denied { open } for pid=9753 comm="syz.0.1081" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 280.293858][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 280.342265][ T9765] Failed to initialize the IGMP autojoin socket (err -2) [ 280.644524][ T5908] usb 2-1: USB disconnect, device number 37 [ 280.685777][ T43] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 280.899151][ T43] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 280.929381][ T43] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 280.999876][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 281.041390][ T9784] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=9784 comm=syz.2.1086 [ 281.065790][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 281.626459][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 281.655307][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 281.695093][ T9795] tmpfs: Unknown parameter 'Quota' [ 281.720866][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1085'. [ 282.046659][ T5895] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 282.078634][ T43] usb 1-1: string descriptor 0 read error: -22 [ 282.085459][ T43] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 282.163324][ T9804] binder: 9798:9804 ioctl c0306201 200000000080 returned -22 [ 282.179650][ T30] audit: type=1400 audit(1755934434.259:8461): avc: denied { set_context_mgr } for pid=9798 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 282.398486][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.408213][ T43] usb 1-1: config 0 descriptor?? [ 282.420304][ T9767] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.428258][ T43] hub 1-1:0.0: bad descriptor, ignoring hub [ 282.491809][ T43] hub 1-1:0.0: probe with driver hub failed with error -5 [ 282.521544][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 282.533995][ T9808] FAULT_INJECTION: forcing a failure. [ 282.533995][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 282.561065][ T9808] CPU: 0 UID: 0 PID: 9808 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) [ 282.561082][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.561089][ T9808] Call Trace: [ 282.561093][ T9808] [ 282.561097][ T9808] dump_stack_lvl+0x16c/0x1f0 [ 282.561113][ T9808] should_fail_ex+0x512/0x640 [ 282.561126][ T9808] should_failslab+0xc2/0x120 [ 282.561139][ T9808] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 282.561151][ T9808] ? __alloc_skb+0x2b2/0x380 [ 282.561162][ T9808] __alloc_skb+0x2b2/0x380 [ 282.561171][ T9808] ? __pfx___alloc_skb+0x10/0x10 [ 282.561180][ T9808] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 282.561193][ T9808] netlink_ack+0x15d/0xb80 [ 282.561207][ T9808] netlink_rcv_skb+0x332/0x420 [ 282.561219][ T9808] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.561231][ T9808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.561245][ T9808] ? netlink_deliver_tap+0x1ae/0xd30 [ 282.561260][ T9808] netlink_unicast+0x5aa/0x870 [ 282.561273][ T9808] ? __pfx_netlink_unicast+0x10/0x10 [ 282.561284][ T9808] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 282.561298][ T9808] netlink_sendmsg+0x8d1/0xdd0 [ 282.561311][ T9808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.561325][ T9808] ____sys_sendmsg+0xa95/0xc70 [ 282.561340][ T9808] ? copy_msghdr_from_user+0x10a/0x160 [ 282.561350][ T9808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.561363][ T9808] ? __pfx_kstrtouint+0x10/0x10 [ 282.561375][ T9808] ? kstrtouint_from_user+0x13c/0x1d0 [ 282.561386][ T9808] ___sys_sendmsg+0x134/0x1d0 [ 282.561396][ T9808] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.561409][ T9808] ? rcu_is_watching+0x12/0xc0 [ 282.561427][ T9808] __sys_sendmsg+0x16d/0x220 [ 282.561438][ T9808] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.561456][ T9808] do_syscall_64+0xcd/0x4c0 [ 282.561468][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.561480][ T9808] RIP: 0033:0x7f987f18ebe9 [ 282.561489][ T9808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.561499][ T9808] RSP: 002b:00007f988000d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.561510][ T9808] RAX: ffffffffffffffda RBX: 00007f987f3b5fa0 RCX: 00007f987f18ebe9 [ 282.561517][ T9808] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 282.561523][ T9808] RBP: 00007f988000d090 R08: 0000000000000000 R09: 0000000000000000 [ 282.561530][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.561536][ T9808] R13: 00007f987f3b6038 R14: 00007f987f3b5fa0 R15: 00007fff7ca7f678 [ 282.561546][ T9808] [ 282.625807][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 282.928001][ T5895] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 282.993575][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 283.017202][ T5895] usb 5-1: config 0 has no interface number 0 [ 283.028768][ T5895] usb 5-1: config 0 interface 12 has no altsetting 0 [ 283.417189][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 283.490113][ T5895] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 283.525029][ T5895] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 283.591225][ T5895] usb 5-1: Product: syz [ 283.615494][ T5895] usb 5-1: Manufacturer: syz [ 283.625100][ T5895] usb 5-1: SerialNumber: syz [ 283.647320][ T5895] usb 5-1: config 0 descriptor?? [ 283.659147][ T9] usb 1-1: USB disconnect, device number 42 [ 283.962998][ T43] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 284.187304][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.198418][ T43] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 284.207733][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.220760][ T43] usb 4-1: config 0 descriptor?? [ 284.855803][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 284.973110][ T43] acrux 0003:1A34:F705.000E: unexpected long global item [ 284.995060][ T43] acrux 0003:1A34:F705.000E: parse failed [ 285.000134][ T9847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9847 comm=syz.2.1107 [ 285.002234][ T43] acrux 0003:1A34:F705.000E: probe with driver acrux failed with error -22 [ 285.014924][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 285.031940][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 285.043503][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.056480][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.068460][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.081485][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 285.090315][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 285.102041][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.114367][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.126259][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.142327][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 285.160232][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 285.175142][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.184770][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.194902][ T5853] usb 4-1: USB disconnect, device number 43 [ 285.201893][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.218901][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 285.231163][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 285.248104][ T9] usb 1-1: string descriptor 0 read error: -22 [ 285.254444][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 285.265237][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.278732][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 285.488326][ T5853] usb 1-1: USB disconnect, device number 43 [ 285.600863][ T5895] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 285.613812][ T5895] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 285.632345][ T5895] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 285.648862][ T5895] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 285.701404][ T5895] usb 5-1: USB disconnect, device number 36 [ 286.120778][ T30] audit: type=1400 audit(1755934438.229:8462): avc: denied { read } for pid=9872 comm="syz.2.1114" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.432589][ T30] audit: type=1400 audit(1755934438.229:8463): avc: denied { open } for pid=9872 comm="syz.2.1114" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.479982][ T30] audit: type=1400 audit(1755934438.539:8464): avc: denied { ioctl } for pid=9872 comm="syz.2.1114" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 286.505047][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.537020][ T5853] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 286.615189][ T9879] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=9879 comm=syz.0.1113 [ 286.875804][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 287.239415][ T5853] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 287.247727][ T5853] usb 2-1: config 0 has no interface number 0 [ 287.277813][ T5853] usb 2-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 287.289385][ T5853] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 287.300914][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.308223][ T43] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 287.340277][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.340391][ T5853] usb 2-1: config 0 descriptor?? [ 287.359232][ T9870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.400546][ T43] usb 3-1: config 0 descriptor?? [ 287.738989][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.539534][ T43] usb 3-1: Cannot set autoneg [ 288.564499][ T43] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 288.724838][ T30] audit: type=1400 audit(1755934440.829:8465): avc: denied { write } for pid=9904 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.022868][ T9918] FAULT_INJECTION: forcing a failure. [ 289.022868][ T9918] name failslab, interval 1, probability 0, space 0, times 0 [ 289.035636][ T9918] CPU: 1 UID: 0 PID: 9918 Comm: syz.3.1124 Not tainted syzkaller #0 PREEMPT(full) [ 289.035661][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.035671][ T9918] Call Trace: [ 289.035676][ T9918] [ 289.035683][ T9918] dump_stack_lvl+0x16c/0x1f0 [ 289.035705][ T9918] should_fail_ex+0x512/0x640 [ 289.035727][ T9918] ? skcipher_walk_next+0xb20/0xe20 [ 289.035752][ T9918] should_failslab+0xc2/0x120 [ 289.035772][ T9918] __kmalloc_noprof+0xd2/0x510 [ 289.035792][ T9918] skcipher_walk_next+0xb20/0xe20 [ 289.035819][ T9918] skcipher_walk_done+0x400/0x8b0 [ 289.035847][ T9918] cbc_decrypt+0x59a/0x980 [ 289.035866][ T9918] ? kfree+0x2b4/0x4d0 [ 289.035888][ T9918] ? __pfx_cbc_decrypt+0x10/0x10 [ 289.035914][ T9918] crypto_skcipher_decrypt+0xf8/0x170 [ 289.035936][ T9918] skcipher_recvmsg+0xc31/0x1030 [ 289.035960][ T9918] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 289.035983][ T9918] sock_recvmsg+0x1f9/0x250 [ 289.036006][ T9918] ____sys_recvmsg+0x218/0x6b0 [ 289.036029][ T9918] ? __pfx_____sys_recvmsg+0x10/0x10 [ 289.036054][ T9918] ? lock_release+0x201/0x2f0 [ 289.036082][ T9918] ___sys_recvmsg+0x114/0x1a0 [ 289.036098][ T9918] ? __pfx____sys_recvmsg+0x10/0x10 [ 289.036114][ T9918] ? ksys_write+0x12a/0x250 [ 289.036132][ T9918] ? rcu_is_watching+0x12/0xc0 [ 289.036160][ T9918] __sys_recvmsg+0x16a/0x220 [ 289.036177][ T9918] ? __pfx___sys_recvmsg+0x10/0x10 [ 289.036202][ T9918] do_syscall_64+0xcd/0x4c0 [ 289.036221][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.036237][ T9918] RIP: 0033:0x7fd9fb18ebe9 [ 289.036250][ T9918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.036266][ T9918] RSP: 002b:00007fd9fbfa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 289.036282][ T9918] RAX: ffffffffffffffda RBX: 00007fd9fb3b5fa0 RCX: 00007fd9fb18ebe9 [ 289.036293][ T9918] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000004 [ 289.036303][ T9918] RBP: 00007fd9fbfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 289.036314][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.036323][ T9918] R13: 00007fd9fb3b6038 R14: 00007fd9fb3b5fa0 R15: 00007ffd99854238 [ 289.036335][ T9918] [ 289.637106][ T9] usb 2-1: USB disconnect, device number 38 [ 289.939751][ T9936] lo speed is unknown, defaulting to 1000 [ 289.945527][ T9936] lo speed is unknown, defaulting to 1000 [ 289.951667][ T9936] lo speed is unknown, defaulting to 1000 [ 289.958807][ T9936] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 289.967280][ T9936] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 289.980152][ T9936] lo speed is unknown, defaulting to 1000 [ 289.986488][ T9936] lo speed is unknown, defaulting to 1000 [ 289.992790][ T9936] lo speed is unknown, defaulting to 1000 [ 289.999183][ T9936] lo speed is unknown, defaulting to 1000 [ 290.005495][ T9936] lo speed is unknown, defaulting to 1000 [ 290.108622][ T5853] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 290.266561][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 290.291098][ T5853] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 290.324042][ T5853] usb 1-1: config 0 has no interface number 0 [ 290.354009][ T5853] usb 1-1: config 0 interface 153 has no altsetting 0 [ 290.401704][ T5853] usb 1-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice= f.f0 [ 290.440186][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.500696][ T5853] usb 1-1: Product: syz [ 290.523824][ T5853] usb 1-1: Manufacturer: syz [ 290.634747][ T5853] usb 1-1: SerialNumber: syz [ 290.717343][ T10] usb 3-1: USB disconnect, device number 41 [ 290.751661][ T5853] usb 1-1: config 0 descriptor?? [ 290.797992][ T5853] ti_usb_3410_5052 1-1:0.153: TI USB 3410 1 port adapter converter detected [ 290.891957][ T5853] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 291.180874][ T5853] usb 1-1: USB disconnect, device number 44 [ 291.188622][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1130'. [ 291.203754][ T5853] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 291.316214][ T5853] ti_usb_3410_5052 1-1:0.153: device disconnected [ 291.465676][ T30] audit: type=1400 audit(1755934443.549:8466): avc: denied { ioctl } for pid=9956 comm="syz.4.1134" path="socket:[29082]" dev="sockfs" ino=29082 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 291.606746][ T9957] netlink: 'syz.4.1134': attribute type 10 has an invalid length. [ 291.840851][ T9965] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 (while UP) [ 291.897368][ T9967] No control pipe specified [ 292.439827][ T9983] Failed to initialize the IGMP autojoin socket (err -2) [ 292.735761][ T43] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 292.848976][ T9994] FAULT_INJECTION: forcing a failure. [ 292.848976][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 292.864122][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.3.1146 Not tainted syzkaller #0 PREEMPT(full) [ 292.864147][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.864156][ T9994] Call Trace: [ 292.864161][ T9994] [ 292.864167][ T9994] dump_stack_lvl+0x16c/0x1f0 [ 292.864184][ T9994] should_fail_ex+0x512/0x640 [ 292.864198][ T9994] should_failslab+0xc2/0x120 [ 292.864211][ T9994] __kmalloc_cache_noprof+0x6a/0x3e0 [ 292.864229][ T9994] ? lock_release+0x201/0x2f0 [ 292.864246][ T9994] ? alloc_fs_context+0x57/0x9c0 [ 292.864260][ T9994] alloc_fs_context+0x57/0x9c0 [ 292.864275][ T9994] path_mount+0xbdd/0x2000 [ 292.864290][ T9994] ? __pfx_path_mount+0x10/0x10 [ 292.864304][ T9994] ? kmem_cache_free+0x2d1/0x4d0 [ 292.864314][ T9994] ? putname+0x154/0x1a0 [ 292.864328][ T9994] ? putname+0x154/0x1a0 [ 292.864343][ T9994] ? __x64_sys_mount+0x28d/0x310 [ 292.864356][ T9994] __x64_sys_mount+0x28d/0x310 [ 292.864375][ T9994] ? __pfx___x64_sys_mount+0x10/0x10 [ 292.864391][ T9994] do_syscall_64+0xcd/0x4c0 [ 292.864403][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.864414][ T9994] RIP: 0033:0x7fd9fb18ebe9 [ 292.864423][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.864434][ T9994] RSP: 002b:00007fd9fbfa5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.864446][ T9994] RAX: ffffffffffffffda RBX: 00007fd9fb3b5fa0 RCX: 00007fd9fb18ebe9 [ 292.864453][ T9994] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 292.864459][ T9994] RBP: 00007fd9fbfa5090 R08: 0000200000000140 R09: 0000000000000000 [ 292.864466][ T9994] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 292.864472][ T9994] R13: 00007fd9fb3b6038 R14: 00007fd9fb3b5fa0 R15: 00007ffd99854238 [ 292.864482][ T9994] [ 293.085716][ T43] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 293.094014][ T43] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 293.102127][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 293.111024][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 293.121821][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 293.131707][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 293.148643][ T43] usb 2-1: string descriptor 0 read error: -22 [ 293.154840][ T43] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 293.163896][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.172721][ T43] usb 2-1: config 0 descriptor?? [ 293.178348][ T9986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.186421][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 293.192302][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 293.200301][ T43] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42 [ 294.165374][ T30] audit: type=1400 audit(1755934446.260:8467): avc: denied { ioctl } for pid=10010 comm="syz.4.1151" path="socket:[29826]" dev="sockfs" ino=29826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.164473][T10027] FAULT_INJECTION: forcing a failure. [ 295.164473][T10027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.276338][T10027] CPU: 0 UID: 0 PID: 10027 Comm: syz.3.1157 Not tainted syzkaller #0 PREEMPT(full) [ 295.276356][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.276363][T10027] Call Trace: [ 295.276366][T10027] [ 295.276370][T10027] dump_stack_lvl+0x16c/0x1f0 [ 295.276386][T10027] should_fail_ex+0x512/0x640 [ 295.276400][T10027] _copy_to_user+0x32/0xd0 [ 295.276414][T10027] generic_map_lookup_batch+0x5b2/0xb40 [ 295.276432][T10027] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 295.276446][T10027] ? __might_fault+0x30/0x190 [ 295.276458][T10027] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 295.276472][T10027] bpf_map_do_batch+0x264/0x680 [ 295.276483][T10027] __sys_bpf+0x188d/0x4de0 [ 295.276498][T10027] ? lock_release+0x201/0x2f0 [ 295.276516][T10027] ? __pfx___sys_bpf+0x10/0x10 [ 295.276529][T10027] ? ksys_write+0x190/0x250 [ 295.276540][T10027] ? rcu_is_watching+0x12/0xc0 [ 295.276554][T10027] ? lock_release+0x201/0x2f0 [ 295.276571][T10027] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 295.276587][T10027] ? fput+0x9b/0xd0 [ 295.276606][T10027] ? ksys_write+0x1ac/0x250 [ 295.276617][T10027] ? __pfx_ksys_write+0x10/0x10 [ 295.276628][T10027] __x64_sys_bpf+0x78/0xc0 [ 295.276643][T10027] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 295.276656][T10027] do_syscall_64+0xcd/0x4c0 [ 295.276668][T10027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.276680][T10027] RIP: 0033:0x7fd9fb18ebe9 [ 295.276688][T10027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.276699][T10027] RSP: 002b:00007fd9fbfa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.276711][T10027] RAX: ffffffffffffffda RBX: 00007fd9fb3b5fa0 RCX: 00007fd9fb18ebe9 [ 295.276718][T10027] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 295.276725][T10027] RBP: 00007fd9fbfa5090 R08: 0000000000000000 R09: 0000000000000000 [ 295.276731][T10027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.276738][T10027] R13: 00007fd9fb3b6038 R14: 00007fd9fb3b5fa0 R15: 00007ffd99854238 [ 295.276748][T10027] [ 295.818823][T10042] ALSA: mixer_oss: invalid OSS volume 'DI' [ 296.092182][ T30] audit: type=1326 audit(1755934448.200:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.128564][T10032] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 296.138203][ T30] audit: type=1326 audit(1755934448.200:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.162127][ T30] audit: type=1326 audit(1755934448.200:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.188660][ T30] audit: type=1326 audit(1755934448.200:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.207692][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'. [ 296.215312][ T30] audit: type=1326 audit(1755934448.230:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.233671][ T5908] usb 2-1: USB disconnect, device number 39 [ 296.253337][ T30] audit: type=1326 audit(1755934448.230:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.290632][ T30] audit: type=1326 audit(1755934448.230:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd9fb18ebe9 code=0x7ffc0000 [ 296.366582][ T30] audit: type=1326 audit(1755934448.230:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9fb185ba7 code=0x7ffc0000 [ 296.419118][ T30] audit: type=1326 audit(1755934448.230:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9fb12add9 code=0x7ffc0000 [ 296.754164][T10056] Failed to initialize the IGMP autojoin socket (err -2) [ 297.045698][ T5895] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 297.347000][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 297.357897][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1168'. [ 297.448757][ T5895] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 297.477103][ T5895] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 297.533730][ T5895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 297.605905][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 297.836588][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 297.880424][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 297.933052][ T5895] usb 2-1: string descriptor 0 read error: -22 [ 297.947793][ T5895] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 297.987374][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.000419][ T5895] usb 2-1: config 0 descriptor?? [ 298.015546][T10062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.023280][ T5895] hub 2-1:0.0: bad descriptor, ignoring hub [ 298.048856][ T5895] hub 2-1:0.0: probe with driver hub failed with error -5 [ 298.065037][ T5895] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 298.086186][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 298.118230][T10086] block device autoloading is deprecated and will be removed. [ 298.147651][T10086] 9pnet_fd: Insufficient options for proto=fd [ 298.234743][ T5895] usb 2-1: USB disconnect, device number 40 [ 298.268254][T10089] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=10089 comm=syz.0.1171 [ 298.284088][ T10] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 298.297727][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.366379][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.407154][ T10] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 298.426478][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.571374][ T10] usb 4-1: config 0 descriptor?? [ 298.587560][ T10] usb-storage 4-1:0.0: USB Mass Storage device detected [ 298.596674][ T10] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 299.296100][ T5965] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 299.335749][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 299.428121][T10116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1180'. [ 299.465951][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 299.472892][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.488359][ T5965] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 299.505756][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 299.522225][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.544660][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.544672][ T5965] usb 2-1: config 0 descriptor?? [ 299.544696][ T43] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 299.568207][ T5965] usbhid 2-1:0.0: can't add hid device: -22 [ 299.576216][ T5965] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 299.603281][T10119] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 299.637026][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 299.637042][ T30] audit: type=1400 audit(1755934451.700:8517): avc: denied { setopt } for pid=10115 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 299.663469][T10119] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 299.683051][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.766090][ T43] usb 3-1: config 0 descriptor?? [ 299.804965][ T43] usbhid 3-1:0.0: can't add hid device: -22 [ 299.811071][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 300.737083][T10137] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 301.081592][T10135] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 301.287961][T10140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.444552][ T30] audit: type=1326 audit(1755934453.550:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.480574][ T30] audit: type=1326 audit(1755934453.550:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.654964][ T30] audit: type=1326 audit(1755934453.580:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.784237][ T30] audit: type=1326 audit(1755934453.580:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.870494][ T30] audit: type=1326 audit(1755934453.580:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.925569][ T30] audit: type=1326 audit(1755934453.580:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 301.953185][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1190'. [ 301.981813][ T30] audit: type=1326 audit(1755934453.580:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 302.033608][ T30] audit: type=1326 audit(1755934453.580:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 302.090140][ T43] usb 2-1: USB disconnect, device number 41 [ 302.480993][ T30] audit: type=1326 audit(1755934453.580:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.4.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 302.540973][ T43] usb 3-1: USB disconnect, device number 42 [ 303.501929][ T43] usb 4-1: USB disconnect, device number 44 [ 303.848330][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.874889][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.947642][T10190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1200'. [ 304.085720][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 304.278339][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 304.357234][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.371079][ T43] usb 5-1: config 127 has an invalid interface number: 255 but max is 0 [ 304.379588][ T43] usb 5-1: config 127 has no interface number 0 [ 304.404690][ T43] usb 5-1: config 127 interface 255 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 32 [ 304.425275][ T43] usb 5-1: config 127 interface 255 has no altsetting 0 [ 304.447420][ T43] usb 5-1: New USB device found, idVendor=1608, idProduct=0242, bcdDevice=d2.d7 [ 304.466708][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.484290][ T43] usb 5-1: Product: syz [ 304.496832][ T43] usb 5-1: Manufacturer: syz [ 304.507680][ T43] usb 5-1: SerialNumber: syz [ 304.579656][T10186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.978528][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.999999][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.018744][ T43] io_ti 5-1:127.255: required endpoints missing [ 305.045626][ T43] usb 5-1: USB disconnect, device number 37 [ 305.254425][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1205'. [ 305.476344][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 305.573727][T10219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.646157][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 305.648523][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 305.648546][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.648564][ T10] usb 1-1: Product: syz [ 305.648577][ T10] usb 1-1: Manufacturer: syz [ 305.648589][ T10] usb 1-1: SerialNumber: syz [ 305.649567][ T10] usb 1-1: config 0 descriptor?? [ 305.650563][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 305.851185][T10227] syzkaller0: entered promiscuous mode [ 305.856933][T10227] syzkaller0: entered allmulticast mode [ 306.217035][ T5853] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 306.264305][T10239] FAULT_INJECTION: forcing a failure. [ 306.264305][T10239] name failslab, interval 1, probability 0, space 0, times 0 [ 306.278507][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.3.1213 Not tainted syzkaller #0 PREEMPT(full) [ 306.278531][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.278540][T10239] Call Trace: [ 306.278546][T10239] [ 306.278557][T10239] dump_stack_lvl+0x16c/0x1f0 [ 306.278573][T10239] should_fail_ex+0x512/0x640 [ 306.278588][T10239] ? tomoyo_encode2+0x100/0x3e0 [ 306.278605][T10239] should_failslab+0xc2/0x120 [ 306.278618][T10239] __kmalloc_noprof+0xd2/0x510 [ 306.278630][T10239] tomoyo_encode2+0x100/0x3e0 [ 306.278647][T10239] tomoyo_encode+0x29/0x50 [ 306.278662][T10239] tomoyo_realpath_from_path+0x18f/0x6e0 [ 306.278679][T10239] ? tomoyo_profile+0x47/0x60 [ 306.278690][T10239] tomoyo_path_number_perm+0x245/0x580 [ 306.278703][T10239] ? tomoyo_path_number_perm+0x237/0x580 [ 306.278716][T10239] ? io_schedule_timeout+0xd4/0x150 [ 306.278734][T10239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.278754][T10239] ? hook_file_ioctl_common+0x36/0x410 [ 306.278765][T10239] ? hook_file_ioctl_common+0xac/0x410 [ 306.278776][T10239] ? hook_file_ioctl_common+0x145/0x410 [ 306.278786][T10239] ? __rcu_read_unlock+0x2bc/0x550 [ 306.278798][T10239] ? __fget_files+0x20e/0x3c0 [ 306.278811][T10239] security_file_ioctl+0x9b/0x240 [ 306.278827][T10239] __x64_sys_ioctl+0xb7/0x210 [ 306.278844][T10239] do_syscall_64+0xcd/0x4c0 [ 306.278856][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.278868][T10239] RIP: 0033:0x7fd9fb18ebe9 [ 306.278877][T10239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.278888][T10239] RSP: 002b:00007fd9fbf84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.278899][T10239] RAX: ffffffffffffffda RBX: 00007fd9fb3b6090 RCX: 00007fd9fb18ebe9 [ 306.278906][T10239] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000004 [ 306.278912][T10239] RBP: 00007fd9fbf84090 R08: 0000000000000000 R09: 0000000000000000 [ 306.278919][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.278925][T10239] R13: 00007fd9fb3b6128 R14: 00007fd9fb3b6090 R15: 00007ffd99854238 [ 306.278934][T10239] [ 306.279059][T10239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.637648][ T10] gspca_sonixj: reg_w1 err -110 [ 306.642556][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 306.726306][ T5853] usb 3-1: device descriptor read/64, error -71 [ 306.904103][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 306.904118][ T30] audit: type=1326 audit(1755934459.010:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 306.934198][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.027721][ T30] audit: type=1326 audit(1755934459.010:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.051211][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.076301][ T5853] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 307.088781][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 307.106424][ T30] audit: type=1326 audit(1755934459.050:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.132800][ T30] audit: type=1326 audit(1755934459.050:8558): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.256648][ T30] audit: type=1326 audit(1755934459.060:8559): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.284873][T10254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.291575][T10254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.326262][ T5853] usb 3-1: device descriptor read/64, error -71 [ 307.349592][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 307.369775][T10254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.376450][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.388230][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.428729][ T30] audit: type=1326 audit(1755934459.060:8560): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.452538][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.459888][ T5853] usb usb3-port1: attempt power cycle [ 307.465264][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.467785][T10254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.475112][ T30] audit: type=1326 audit(1755934459.060:8561): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.503395][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.511990][ T10] usb 2-1: config 0 descriptor?? [ 307.533783][ T30] audit: type=1326 audit(1755934459.060:8562): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.557801][ T30] audit: type=1326 audit(1755934459.100:8563): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.582528][ T30] audit: type=1326 audit(1755934459.100:8564): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10246 comm="syz.4.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2f8ebe9 code=0x7ffc0000 [ 307.606334][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.756697][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 307.846174][ T5853] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 307.867731][ T5853] usb 3-1: device descriptor read/8, error -71 [ 307.907123][ T43] usb 4-1: config 0 has no interfaces? [ 307.912677][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.922099][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.003410][ T43] usb 4-1: config 0 descriptor?? [ 308.441857][ T5853] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 308.464345][ T43] usb 4-1: USB disconnect, device number 45 [ 308.477204][ T5853] usb 3-1: device descriptor read/8, error -71 [ 308.489369][ T5998] usb 1-1: USB disconnect, device number 45 [ 308.718995][ T5853] usb usb3-port1: unable to enumerate USB device [ 309.153247][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 309.375766][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 309.381777][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 309.456244][ T5853] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 309.535821][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 309.616269][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 309.623103][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.657208][ T5853] usb 1-1: config 7 has an invalid interface number: 71 but max is 0 [ 309.665492][ T5853] usb 1-1: config 7 has no interface number 0 [ 309.672400][ T5853] usb 1-1: config 7 interface 71 altsetting 129 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 309.699891][ T5853] usb 1-1: config 7 interface 71 has no altsetting 0 [ 309.711832][ T5853] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a08, bcdDevice= 2.97 [ 309.723274][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.818790][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 309.914879][ T10] usb 2-1: USB disconnect, device number 42 [ 309.921757][ T5853] usb 1-1: Product: syz [ 309.927685][ T5853] usb 1-1: Manufacturer: syz [ 309.935392][ T5853] usb 1-1: SerialNumber: syz [ 310.313835][ T5853] usb 1-1: Could not find all expected endpoints [ 310.328392][ T5853] usb 1-1: USB disconnect, device number 46 [ 310.781790][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 311.162530][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 311.390616][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 311.420994][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.436316][ T9] usb 2-1: Product: syz [ 311.480192][ T9] usb 2-1: Manufacturer: syz [ 311.485526][ T9] usb 2-1: SerialNumber: syz [ 311.491947][ T9] usb 2-1: config 0 descriptor?? [ 311.569083][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 311.949620][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 311.958726][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 312.321828][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 312.321844][ T30] audit: type=1326 audit(1755934464.430:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10343 comm="syz.3.1240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9fb18ebe9 code=0x0 [ 312.423985][ T30] audit: type=1400 audit(1755934464.530:8596): avc: denied { map } for pid=10343 comm="syz.3.1240" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.463304][T10347] FAULT_INJECTION: forcing a failure. [ 312.463304][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 312.493880][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.0.1241 Not tainted syzkaller #0 PREEMPT(full) [ 312.493905][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.493914][T10347] Call Trace: [ 312.493919][T10347] [ 312.493925][T10347] dump_stack_lvl+0x16c/0x1f0 [ 312.493946][T10347] should_fail_ex+0x512/0x640 [ 312.493965][T10347] ? tomoyo_encode2+0x100/0x3e0 [ 312.493988][T10347] should_failslab+0xc2/0x120 [ 312.494007][T10347] __kmalloc_noprof+0xd2/0x510 [ 312.494022][T10347] ? rcu_is_watching+0x12/0xc0 [ 312.494044][T10347] tomoyo_encode2+0x100/0x3e0 [ 312.494068][T10347] tomoyo_encode+0x29/0x50 [ 312.494089][T10347] tomoyo_mount_acl+0x144/0x850 [ 312.494109][T10347] ? lock_release+0x201/0x2f0 [ 312.494132][T10347] ? bpf_ksym_find+0x127/0x1c0 [ 312.494153][T10347] ? is_bpf_text_address+0x94/0x1a0 [ 312.494170][T10347] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 312.494190][T10347] ? __kernel_text_address+0xd/0x40 [ 312.494209][T10347] ? unwind_get_return_address+0x59/0xa0 [ 312.494227][T10347] ? arch_stack_walk+0xa6/0x100 [ 312.494253][T10347] ? rcu_is_watching+0x12/0xc0 [ 312.494272][T10347] ? lock_acquire+0x2cd/0x350 [ 312.494295][T10347] ? kasan_save_free_info+0x3b/0x60 [ 312.494317][T10347] ? tomoyo_domain+0xbb/0x150 [ 312.494331][T10347] ? tomoyo_profile+0x47/0x60 [ 312.494346][T10347] tomoyo_mount_permission+0x16d/0x420 [ 312.494368][T10347] ? tomoyo_mount_permission+0x14f/0x420 [ 312.494390][T10347] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 312.494418][T10347] security_sb_mount+0x9b/0x260 [ 312.494439][T10347] path_mount+0x15f/0x2000 [ 312.494460][T10347] ? __pfx_path_mount+0x10/0x10 [ 312.494480][T10347] ? kmem_cache_free+0x2d1/0x4d0 [ 312.494494][T10347] ? putname+0x154/0x1a0 [ 312.494515][T10347] ? putname+0x154/0x1a0 [ 312.494541][T10347] ? __x64_sys_mount+0x28d/0x310 [ 312.494560][T10347] __x64_sys_mount+0x28d/0x310 [ 312.494580][T10347] ? __pfx___x64_sys_mount+0x10/0x10 [ 312.494602][T10347] ? rcu_is_watching+0x12/0xc0 [ 312.494622][T10347] do_syscall_64+0xcd/0x4c0 [ 312.494639][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.494655][T10347] RIP: 0033:0x7f026418ebe9 [ 312.494667][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.494683][T10347] RSP: 002b:00007f0264fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.494698][T10347] RAX: ffffffffffffffda RBX: 00007f02643b5fa0 RCX: 00007f026418ebe9 [ 312.494709][T10347] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 312.494719][T10347] RBP: 00007f0264fb4090 R08: 0000200000000140 R09: 0000000000000000 [ 312.494729][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.494738][T10347] R13: 00007f02643b6038 R14: 00007f02643b5fa0 R15: 00007fffbb588258 [ 312.494753][T10347] [ 312.907715][ T30] audit: type=1400 audit(1755934465.010:8597): avc: denied { mount } for pid=10352 comm="syz.2.1243" name="/" dev="hugetlbfs" ino=31084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 313.065875][ T5895] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 313.073946][ T30] audit: type=1400 audit(1755934465.180:8598): avc: denied { ioctl } for pid=10357 comm="syz.4.1245" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.268928][T10345] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2cf3f pfn:0x4e07f [ 313.278196][T10345] memcg:ffff888140492700 [ 313.282504][T10345] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 313.290492][T10345] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 313.299787][T10345] raw: 000000000002cf3f 0000000000000000 00000001ffffffff ffff888140492700 [ 313.319737][T10345] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 313.330673][T10345] page_owner tracks the page as allocated [ 313.336533][T10345] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10345, tgid 10343 (syz.3.1240), ts 313268902819, free_ts 313161918467 [ 313.338792][ T30] audit: type=1400 audit(1755934465.450:8599): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 313.357775][T10345] post_alloc_hook+0x1c0/0x230 [ 313.357812][T10345] get_page_from_freelist+0x132b/0x38e0 [ 313.357829][T10345] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 313.357847][T10345] alloc_pages_mpol+0x1fb/0x550 [ 313.386526][ T30] audit: type=1400 audit(1755934465.450:8600): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.398433][T10345] folio_alloc_noprof+0x20/0x2d0 [ 313.407825][ T30] audit: type=1400 audit(1755934465.450:8601): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.453550][ T30] audit: type=1400 audit(1755934465.450:8602): avc: denied { add_name } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.476913][ T30] audit: type=1400 audit(1755934465.450:8603): avc: denied { create } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.499689][ T30] audit: type=1400 audit(1755934465.450:8604): avc: denied { append open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.527921][T10345] filemap_alloc_folio_noprof+0x3a1/0x470 [ 313.533752][T10345] page_cache_ra_order+0x4e1/0xd70 [ 313.542126][T10345] filemap_fault+0x152e/0x2930 [ 313.548748][T10345] __do_fault+0x10d/0x490 [ 313.553250][T10345] do_pte_missing+0xf50/0x3ba0 [ 313.559365][T10345] __handle_mm_fault+0x152a/0x2a50 [ 313.564645][T10345] handle_mm_fault+0x589/0xd10 [ 313.570955][T10345] do_user_addr_fault+0x60c/0x1370 [ 313.576157][T10345] exc_page_fault+0x5c/0xb0 [ 313.580695][T10345] asm_exc_page_fault+0x26/0x30 [ 313.585614][T10345] page last free pid 10358 tgid 10357 stack trace: [ 313.592900][T10345] free_unref_folios+0xa61/0x16b0 [ 313.598443][T10345] folios_put_refs+0x56f/0x740 [ 313.603225][T10345] truncate_inode_pages_range+0x311/0xe50 [ 313.609614][T10345] set_blocksize+0x2b8/0x500 [ 313.614274][T10345] blkdev_bszset+0x19b/0x240 [ 313.619358][T10345] blkdev_ioctl+0x44e/0x6d0 [ 313.623910][T10345] __x64_sys_ioctl+0x18b/0x210 [ 313.629887][T10345] do_syscall_64+0xcd/0x4c0 [ 313.634460][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.641016][T10345] ------------[ cut here ]------------ [ 313.647005][T10345] kernel BUG at mm/filemap.c:867! [ 313.652120][T10345] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 313.658532][T10345] CPU: 0 UID: 0 PID: 10345 Comm: syz.3.1240 Not tainted syzkaller #0 PREEMPT(full) [ 313.667892][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.677941][T10345] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 313.683916][T10345] Code: 7a c8 ff 48 c7 c6 e0 23 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 40 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48 [ 313.703512][T10345] RSP: 0018:ffffc9000fe77810 EFLAGS: 00010246 [ 313.709600][T10345] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000ec03000 [ 313.717565][T10345] RDX: 0000000000080000 RSI: ffffffff81f316ba RDI: ffff88802d372884 [ 313.725526][T10345] RBP: 0000000000112cc0 R08: 0000000000000000 R09: 0000000000000000 [ 313.733493][T10345] R10: ffffffff90ab4097 R11: 0000000000000001 R12: 0000000000000004 [ 313.741451][T10345] R13: ffffea0001381fc0 R14: 0000000000000000 R15: 000000000002c920 [ 313.749419][T10345] FS: 00007fd9fbf846c0(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 313.758331][T10345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.764928][T10345] CR2: 0000001b31f22ff8 CR3: 000000005c387000 CR4: 00000000003526f0 [ 313.772890][T10345] Call Trace: [ 313.776159][T10345] [ 313.779071][T10345] ? rcu_is_watching+0x12/0xc0 [ 313.783831][T10345] ? memcg1_check_events+0x59/0x5a0 [ 313.789025][T10345] ? __pfx___filemap_add_folio+0x10/0x10 [ 313.794639][T10345] filemap_add_folio+0x10e/0x220 [ 313.799550][T10345] ? __pfx_filemap_add_folio+0x10/0x10 [ 313.805011][T10345] ? css_rstat_updated+0x1c2/0x510 [ 313.810120][T10345] page_cache_ra_order+0x5a7/0xd70 [ 313.815239][T10345] filemap_fault+0x152e/0x2930 [ 313.819992][T10345] ? __pfx_filemap_fault+0x10/0x10 [ 313.825097][T10345] ? __pfx_filemap_map_pages+0x10/0x10 [ 313.830549][T10345] __do_fault+0x10d/0x490 [ 313.834880][T10345] ? __pfx_filemap_map_pages+0x10/0x10 [ 313.840320][T10345] do_pte_missing+0xf50/0x3ba0 [ 313.845098][T10345] ? __handle_mm_fault+0x14fd/0x2a50 [ 313.850385][T10345] ? rcu_is_watching+0x12/0xc0 [ 313.855158][T10345] ? lock_release+0x201/0x2f0 [ 313.859843][T10345] __handle_mm_fault+0x152a/0x2a50 [ 313.864963][T10345] ? __pfx___handle_mm_fault+0x10/0x10 [ 313.870407][T10345] ? vma_start_read+0x2fc/0x870 [ 313.875249][T10345] ? __pfx_vma_start_read+0x10/0x10 [ 313.880453][T10345] ? lock_vma_under_rcu+0x1eb/0x530 [ 313.885648][T10345] ? rcu_is_watching+0x12/0xc0 [ 313.890423][T10345] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 313.895955][T10345] handle_mm_fault+0x589/0xd10 [ 313.900729][T10345] ? __bpf_trace_exceptions+0x1/0x40 [ 313.906010][T10345] do_user_addr_fault+0x60c/0x1370 [ 313.911130][T10345] ? rcu_is_watching+0x12/0xc0 [ 313.916060][T10345] exc_page_fault+0x5c/0xb0 [ 313.920547][T10345] asm_exc_page_fault+0x26/0x30 [ 313.925387][T10345] RIP: 0033:0x7fd9fb060780 [ 313.929792][T10345] Code: b6 ec 18 00 31 c0 e8 7f da fe ff 48 8d 54 24 60 89 df 31 c0 be 03 55 08 40 e8 3c e0 12 00 41 89 c6 e9 9e fe ff ff 0f 1f 40 00 <48> 8b 4c 06 f8 4c 89 cf 49 89 4c 01 f8 8d 48 ff c1 e9 03 f3 48 a5 [ 313.949390][T10345] RSP: 002b:00007fd9fbf81f70 EFLAGS: 00010216 [ 313.955438][T10345] RAX: 0000000000000012 RBX: 000000000000000b RCX: 0000000000000012 [ 313.963386][T10345] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 00007fd9fb1ef2e0 [ 313.971349][T10345] RBP: 00007fd9fbf82fe0 R08: 0000000000000080 R09: 00007fd9fbf81fd8 [ 313.979300][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 313.987251][T10345] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fd9fb21d391 [ 313.995217][T10345] [ 313.998220][T10345] Modules linked in: [ 314.002994][T10345] ---[ end trace 0000000000000000 ]--- [ 314.016247][T10345] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 314.022265][T10345] Code: 7a c8 ff 48 c7 c6 e0 23 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 40 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48 [ 314.042616][T10345] RSP: 0018:ffffc9000fe77810 EFLAGS: 00010246 [ 314.048819][T10345] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000ec03000 [ 314.076312][T10345] RDX: 0000000000080000 RSI: ffffffff81f316ba RDI: ffff88802d372884 [ 314.084499][T10345] RBP: 0000000000112cc0 R08: 0000000000000000 R09: 0000000000000000 [ 314.093189][T10345] R10: ffffffff90ab4097 R11: 0000000000000001 R12: 0000000000000004 [ 314.104377][T10345] R13: ffffea0001381fc0 R14: 0000000000000000 R15: 000000000002c920 [ 314.113179][T10345] FS: 00007fd9fbf846c0(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 314.124014][T10345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.142291][T10345] CR2: 0000001b31f22ff8 CR3: 000000005c387000 CR4: 00000000003526f0 [ 314.150915][T10345] Kernel panic - not syncing: Fatal exception [ 314.157176][T10345] Kernel Offset: disabled [ 314.161481][T10345] Rebooting in 86400 seconds..