last executing test programs: 8.596381864s ago: executing program 1 (id=283): r0 = socket$pptp(0x18, 0x1, 0x2) accept(r0, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80) set_mempolicy(0x1, &(0x7f0000000180)=0xfff, 0x2000000007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000900), 0x100) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) unshare(0x6a040000) 8.57282322s ago: executing program 0 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000018020103"], 0x146) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x0) 8.054286942s ago: executing program 2 (id=285): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c61099", 0xd5}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000002080)="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", 0x189}, {&(0x7f0000000600)="6c0b63b8d5af7b31fc81cea76104e3846f430f476d5048b2ca3c3514b61ebd4c0c7b901b986491d07ff07fbf6d9927fa6a51f7fdb35fc49340d8d5a1d33329608a9fe32377dac11e2498306930f9b116e111921fb36e18ef23b8dc653ee718f142427a74573c1ce0ec99c88bbd9ba1c43d5cac048227b01a0d61170a7ac4d2767c0f8e181e51878e", 0x88}], 0x6, &(0x7f0000000b80)=[@iv={0xe0, 0x117, 0x2, 0xc7, "ae4b815a9cfb6549cf40970e2fefb64cc0bd16cd2c3ba9e09ef96c6c15cd03844c876f09064c1f3c8c9b898821a0a266334b5f94274778a64413b1f1dfdebf2015f962a868a76ea7a9169d1b1465a86c8587908bdf42dfa758f52227f4e06af93ba9a2c692c8d49613ada9cdf8d5c5b6fd12845018d928463a70bb8dc2fc68eb3a125be620f73517baba55bec9ab436ecd3bd1a9ae553c0ff1fdbf37a69907d9c1aaf7594f7cf0a2347405ab00d53fd9f382b19655e5749c7d4f429fc1307321ab0c6eeb6b2db7"}], 0xe0}], 0x1, 0x40800) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x47, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setns(0xc9, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) write$nci(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="3f08f749a69693dfad76ce5f81902ce0418ea2429b9eafefe4ae8f7b58a2fa197437b266b83b0b4a0f2eec358d7b6644a763e50315f75dd8da9663c7920469184da4d77dadeabcd78cb50eb8e95478347f909e26417edda398d8d3aa52bff96ac2267ce66d715213c5711e7bea93673c"], 0x15) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 7.762309639s ago: executing program 2 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f000071b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001a00)={&(0x7f0000789000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=""/110, 0x6e}, &(0x7f0000001a40)=0x40) io_uring_setup(0x1694, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) 7.105949887s ago: executing program 2 (id=289): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9f22) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r3, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbe", 0x58}], 0x1}}], 0x1, 0x44040) (async) sendfile(r2, r2, 0x0, 0x1000000201005) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002008000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x48500, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) 6.34573775s ago: executing program 3 (id=291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) (fail_nth: 2) 6.324844601s ago: executing program 2 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.985004364s ago: executing program 3 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.845352579s ago: executing program 3 (id=294): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x1000001d}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000020601080000000000000000000000000c00078005001500ba8512dac1bf000006000000050005000a"], 0x38}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x1, 0x0, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) fanotify_mark(r1, 0x29, 0x8, r5, &(0x7f0000000100)='./file0\x00') r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 5.495071864s ago: executing program 3 (id=295): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) 5.494699758s ago: executing program 0 (id=296): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0xea080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x189482, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_XRUN(r2, 0x4148, 0x0) socket(0x1e, 0xe, 0x400000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) r9 = dup(r3) write$UHID_INPUT(r9, &(0x7f0000000000)={0xfc, {"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", 0xfffffffffffffec0}}, 0x1006) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x18, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5.172729495s ago: executing program 1 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 4.655996807s ago: executing program 3 (id=299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f000071b000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001a00)={&(0x7f0000789000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=""/110, 0x6e}, &(0x7f0000001a40)=0x40) io_uring_setup(0x1694, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) 4.58737564s ago: executing program 1 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = socket(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000000)={0xffffff24, 0x20b3, 0xa}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000007940)={'vcan0\x00'}) sendmmsg(r2, &(0x7f000000a980), 0x0, 0x4000801) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x13, 0x19, "017f4225a7fb2d2b506bffd2273e96"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0xf4, 0x19, "4b7fa43d26f4b846e43816ce63deb3aa8aa5ad144fe4e746607c555c131f51f3ac7a95e35bdb84ff9f5f7130d57ad60be779491528117abdb9e4513ae2ac8eb1bccef75fa0694f816beab353ccb0907a220530269a4cbde53fed2a76d0551147aee6ed4ba2cebcab90d7918977265ed4092bb1daa8d296592913c0cf62b6e503b69e12596ce91d0a7d0f611fadd4657c67455e83d60f2bc11d8883071068602d5fa98587e4920c37f85ed5a1626c43e837e94e5c6ecfe27c7dae46cab7f34966365aa54ac170b0cb48a72c7bfe6dcdba580c35aa37c820112c06d562baab70e03e8b96b73111d14f285f2954cfc25f6b"}]}, 0x154}, 0x1, 0x0, 0x0, 0x22004040}, 0x4040) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 4.462988316s ago: executing program 4 (id=301): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setattr(r0, 0x0, 0x0) 4.425189501s ago: executing program 1 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x4021, 0x4}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/../file0/../file0\x00', 0x2000, 0x1e9) lseek(r2, 0x9, 0x3) 4.351210402s ago: executing program 4 (id=303): iopl(0x3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x5, 0x1, 0x400, 0x9, 0x8000000000000001}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) accept$unix(r1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 4.235898228s ago: executing program 0 (id=304): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 3.275043014s ago: executing program 4 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (fail_nth: 2) 3.233745366s ago: executing program 0 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.874408859s ago: executing program 4 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setitimer(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000580), 0x4003) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 2.680727859s ago: executing program 2 (id=308): socket$nl_route(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r3, r4, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x545c, 0x0) landlock_restrict_self(r0, 0xe) 2.678720685s ago: executing program 1 (id=309): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, 0x0, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 2.600028462s ago: executing program 0 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) io_uring_setup(0x705b, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xeec, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xe74, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe5c, 0x3, [@m_pedit={0xe58, 0x11, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xeec}}, 0x800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.466617709s ago: executing program 3 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.701647305s ago: executing program 2 (id=312): r0 = socket$pptp(0x18, 0x1, 0x2) accept(r0, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80) set_mempolicy(0x1, &(0x7f0000000180)=0xfff, 0x2000000007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r3, &(0x7f0000000900), 0x100) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) unshare(0x6a040000) 1.150406564s ago: executing program 1 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f00000004c0)='./file0\x00') r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x300, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) timer_create(0x2, &(0x7f0000000140)={0x0, 0x4021, 0x4}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/../file0/../file0\x00', 0x2000, 0x1e9) lseek(r2, 0x9, 0x3) 685.331524ms ago: executing program 4 (id=314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400339ff6e7eb5b486b5c8000001800010900000000ffdbdf2502180004ff0000080000000208000100ac141400000000001000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r2, 0xc, &(0x7f00000000c0)={0xb, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 384.508233ms ago: executing program 0 (id=315): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000020c0), 0x121880, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001500010300000000000000010a"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x8040) listen(r2, 0x5) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r6, &(0x7f00000000c0)=""/4096, 0x1000) openat$audio(0xffffffffffffff9c, &(0x7f00000010c0), 0x100, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffef0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0x0) socket(0x10, 0x3, 0x0) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\xa57', 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002f00090027bd7000fddbdf2504000000a4001a"], 0xb8}, 0x1, 0x0, 0x0, 0x42800}, 0x84) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000240)={0x2000}) 0s ago: executing program 4 (id=316): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) kernel console output (not intermixed with test programs): ect, device number 2 [ 84.130475][ T5896] gadgetfs: disconnected [ 84.260350][ T981] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 84.824865][ T5782] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 84.857375][ T5710] usb 3-1: USB disconnect, device number 5 [ 84.917515][ T5710] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 85.018591][ T30] audit: type=1400 audit(1786460068.792:257): avc: denied { mount } for pid=5955 comm="syz.4.40" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.095783][ T30] audit: type=1400 audit(1786460068.792:258): avc: denied { mounton } for pid=5955 comm="syz.4.40" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 85.143368][ T5958] FAULT_INJECTION: forcing a failure. [ 85.143368][ T5958] name failslab, interval 1, probability 0, space 0, times 0 [ 85.184390][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(full) [ 85.184414][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 85.184424][ T5958] Call Trace: [ 85.184430][ T5958] [ 85.184437][ T5958] dump_stack_lvl+0x100/0x190 [ 85.184466][ T5958] should_fail_ex.cold+0x5/0xa [ 85.184489][ T5958] should_failslab+0xc2/0x120 [ 85.184514][ T5958] __kmalloc_noprof+0xfc/0x820 [ 85.184533][ T5958] ? is_bpf_text_address+0x8a/0x1a0 [ 85.184559][ T5958] ? bpf_test_init.isra.0+0x88/0x100 [ 85.184591][ T5958] bpf_test_init.isra.0+0x88/0x100 [ 85.184620][ T5958] bpf_prog_test_run_skb+0x497/0x3540 [ 85.184646][ T5958] ? find_held_lock+0x2b/0x80 [ 85.184665][ T5958] ? __fget_files+0x1d1/0x3d0 [ 85.184695][ T5958] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 85.184718][ T5958] ? fput+0x79/0x100 [ 85.184741][ T5958] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 85.184760][ T5958] __sys_bpf+0x2a12/0x4e80 [ 85.184787][ T5958] ? __pfx___sys_bpf+0x10/0x10 [ 85.184806][ T5958] ? find_held_lock+0x2b/0x80 [ 85.184822][ T5958] ? get_pid_task+0xfc/0x250 [ 85.184838][ T5958] ? get_pid_task+0xfc/0x250 [ 85.184863][ T5958] ? find_held_lock+0x2b/0x80 [ 85.184884][ T5958] ? rcu_read_lock_any_held+0x6a/0xa0 [ 85.184903][ T5958] ? find_held_lock+0x2b/0x80 [ 85.184918][ T5958] ? ksys_write+0x190/0x250 [ 85.184934][ T5958] ? ksys_write+0x190/0x250 [ 85.184968][ T5958] ? fput+0x79/0x100 [ 85.184994][ T5958] ? __x64_sys_bpf+0xce/0x140 [ 85.185012][ T5958] __x64_sys_bpf+0xce/0x140 [ 85.185031][ T5958] ? do_syscall_64+0x90/0x870 [ 85.185057][ T5958] do_syscall_64+0x115/0x870 [ 85.185079][ T5958] ? clear_bhb_loop+0x70/0xc0 [ 85.185101][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.185118][ T5958] RIP: 0033:0x7f80f999e0d9 [ 85.185134][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.185149][ T5958] RSP: 002b:00007f80fa7f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.185167][ T5958] RAX: ffffffffffffffda RBX: 00007f80f9c25fa0 RCX: 00007f80f999e0d9 [ 85.185178][ T5958] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 85.185188][ T5958] RBP: 00007f80fa7f4090 R08: 0000000000000000 R09: 0000000000000000 [ 85.185198][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.185207][ T5958] R13: 00007f80f9c26038 R14: 00007f80f9c25fa0 R15: 00007ffd93b11dd8 [ 85.185231][ T5958] [ 85.473805][ T5962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.685198][ T30] audit: type=1400 audit(1786460068.802:259): avc: denied { read write } for pid=5955 comm="syz.4.40" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.717226][ T30] audit: type=1400 audit(1786460068.802:260): avc: denied { open } for pid=5955 comm="syz.4.40" path="/6/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.894804][ T30] audit: type=1400 audit(1786460068.802:261): avc: denied { ioctl } for pid=5955 comm="syz.4.40" path="/6/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.966715][ T5732] usb 5-1: USB disconnect, device number 2 [ 86.368001][ T29] cfg80211: failed to load regulatory.db [ 86.523562][ T5975] input: syz1 as /devices/virtual/input/input5 [ 86.780039][ T5987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.769979][ T6005] netlink: 308 bytes leftover after parsing attributes in process `syz.1.52'. [ 87.860193][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.54'. [ 87.894850][ T6010] Zero length message leads to an empty skb [ 88.053921][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 88.053933][ T30] audit: type=1400 audit(1786460071.842:284): avc: denied { write } for pid=6012 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.135650][ T30] audit: type=1400 audit(1786460071.882:285): avc: denied { nlmsg_write } for pid=6012 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.544583][ T6018] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.046912][ T30] audit: type=1400 audit(1786460075.842:286): avc: denied { read write } for pid=6034 comm="syz.2.63" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.055448][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 92.178751][ T6038] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 92.239520][ T30] audit: type=1400 audit(1786460075.842:287): avc: denied { open } for pid=6034 comm="syz.2.63" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 92.282183][ T6041] comedi comedi1: 8255: I/O port conflict (0x140,4) [ 92.454374][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.633554][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 92.674697][ T30] audit: type=1400 audit(1786460075.842:288): avc: denied { append } for pid=6034 comm="syz.2.63" name="cec2" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.731637][ T30] audit: type=1400 audit(1786460075.842:289): avc: denied { setopt } for pid=6034 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.774099][ T30] audit: type=1400 audit(1786460075.842:290): avc: denied { execute } for pid=6034 comm="syz.2.63" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.801682][ T30] audit: type=1400 audit(1786460076.462:291): avc: denied { mounton } for pid=6040 comm="syz.1.64" path="/17/file0" dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 92.867116][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.00 [ 92.969342][ T6053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.67'. [ 92.990348][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.034016][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.213605][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.306346][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.313064][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.345369][ T9] usb 4-1: config 0 descriptor?? [ 94.965602][ T5732] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.089196][ T6069] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 95.112130][ T9] apple 0003:05AC:0251.0002: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 95.141654][ T9] input: HID 05ac:0251 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0251.0002/input/input6 [ 95.154869][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 95.172203][ T5732] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 95.199679][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.234816][ T5732] usb 5-1: config 0 descriptor?? [ 95.249878][ T5732] gspca_main: sq930x-2.14.0 probing 041e:403c [ 95.266433][ T9] apple 0003:05AC:0251.0002: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0251] on usb-dummy_hcd.3-1/input0 [ 95.316012][ T6032] netlink: 'syz.3.60': attribute type 34 has an invalid length. [ 95.334353][ T5723] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.345045][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.504738][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 95.525474][ T5782] usb 4-1: USB disconnect, device number 2 [ 95.531783][ T30] audit: type=1400 audit(1786460079.322:292): avc: denied { create } for pid=6074 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.567432][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.585474][ T5723] usb 1-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 95.585647][ T30] audit: type=1400 audit(1786460079.382:293): avc: denied { read write } for pid=6074 comm="syz.1.73" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.663478][ T5723] usb 1-1: config index 0 descriptor too short (expected 341, got 85) [ 95.693478][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.696516][ T30] audit: type=1400 audit(1786460079.382:294): avc: denied { open } for pid=6074 comm="syz.1.73" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.737033][ T6065] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 95.750968][ T6077] warning: `syz.4.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.764130][ T29] IPVS: starting estimator thread 0... [ 95.775448][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 95.793021][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 95.812827][ T5723] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.813103][ T30] audit: type=1400 audit(1786460079.412:295): avc: denied { ioctl } for pid=6074 comm="syz.1.73" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.847099][ T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 95.874876][ T5723] usb 1-1: config 1 interface 0 has no altsetting 0 [ 95.903660][ T30] audit: type=1400 audit(1786460079.442:296): avc: denied { prog_load } for pid=6074 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.903662][ T9] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.903697][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.932571][ T6078] IPVS: using max 75 ests per chain, 180000 per kthread [ 95.968008][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.983481][ T5723] usb 1-1: Product: syz [ 95.986520][ T30] audit: type=1400 audit(1786460079.472:297): avc: denied { bind } for pid=6064 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.016425][ T5723] usb 1-1: Manufacturer: syz [ 96.024136][ T5723] usb 1-1: SerialNumber: syz [ 96.029211][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.054119][ T9] usb 3-1: config 0 descriptor?? [ 96.069827][ T6083] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.072969][ T6083] @0Ù: renamed from bond_slave_1 (while UP) [ 96.175825][ T30] audit: type=1400 audit(1786460079.942:298): avc: denied { mount } for pid=6081 comm="syz.1.75" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.281433][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 96.294267][ T5732] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 96.351310][ T6084] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 96.364457][ T5732] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 96.380685][ T5732] usb 5-1: USB disconnect, device number 3 [ 96.604014][ T5723] usb 1-1: No union descriptors [ 96.620324][ T30] audit: type=1400 audit(1786460080.412:299): avc: denied { mount } for pid=6070 comm="syz.2.72" name="/" dev="ramfs" ino=10321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.650403][ T190] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.676042][ T5723] usb 1-1: USB disconnect, device number 3 [ 96.835373][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 96.842212][ T190] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.865149][ T30] audit: type=1400 audit(1786460080.652:300): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.865544][ T190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 96.899495][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.956596][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.969676][ T190] usb 4-1: Product: syz [ 96.977739][ T190] usb 4-1: Manufacturer: syz [ 96.982848][ T190] usb 4-1: SerialNumber: syz [ 97.008316][ T190] usb 4-1: config 0 descriptor?? [ 97.050219][ T190] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.081694][ T190] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 97.163375][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.191143][ T6101] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 97.210012][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.229937][ T6089] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 97.243258][ T30] audit: type=1400 audit(1786460081.022:301): avc: denied { read } for pid=6088 comm="syz.3.77" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.395525][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 97.401970][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.470372][ T9] usb 3-1: USB disconnect, device number 6 [ 97.528597][ T6105] block device autoloading is deprecated and will be removed. [ 97.694522][ T5732] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.776015][ T190] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 97.831611][ T190] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 97.841304][ T190] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 97.848600][ T190] em28xx 4-1:0.0: No AC97 audio processor [ 97.870098][ T190] usb 4-1: USB disconnect, device number 3 [ 97.884735][ T5732] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 97.890428][ T190] em28xx 4-1:0.0: Disconnecting em28xx [ 97.908336][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25196, setting to 64 [ 97.923366][ T190] em28xx 4-1:0.0: Freeing device [ 97.933788][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.962428][ T5732] usb 2-1: config 0 descriptor?? [ 97.977808][ T6107] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.429346][ T5732] smartjoyplus 0003:0B43:0003.0003: unknown main item tag 0x0 [ 98.463538][ T5732] smartjoyplus 0003:0B43:0003.0003: ignoring exceeding usage max [ 98.512298][ T5732] smartjoyplus 0003:0B43:0003.0003: hidraw0: USB HID v0.81 Device [HID 0b43:0003] on usb-dummy_hcd.1-1/input0 [ 98.531922][ T5732] smartjoyplus 0003:0B43:0003.0003: no output reports found [ 98.551444][ T6147] FAULT_INJECTION: forcing a failure. [ 98.551444][ T6147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.564989][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(full) [ 98.565012][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.565022][ T6147] Call Trace: [ 98.565027][ T6147] [ 98.565034][ T6147] dump_stack_lvl+0x100/0x190 [ 98.565063][ T6147] should_fail_ex.cold+0x5/0xa [ 98.565084][ T6147] _copy_from_user+0x2e/0xd0 [ 98.565119][ T6147] memdup_user+0x6b/0xe0 [ 98.565139][ T6147] strndup_user+0x78/0xe0 [ 98.565159][ T6147] __x64_sys_mount+0x136/0x310 [ 98.565183][ T6147] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.565213][ T6147] do_syscall_64+0x115/0x870 [ 98.565236][ T6147] ? clear_bhb_loop+0x70/0xc0 [ 98.565258][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.565276][ T6147] RIP: 0033:0x7fd03299e0d9 [ 98.565290][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.565306][ T6147] RSP: 002b:00007fd033830028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.565324][ T6147] RAX: ffffffffffffffda RBX: 00007fd032c25fa0 RCX: 00007fd03299e0d9 [ 98.565335][ T6147] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 98.565344][ T6147] RBP: 00007fd033830090 R08: 0000200000000400 R09: 0000000000000000 [ 98.565355][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.565365][ T6147] R13: 00007fd032c26038 R14: 00007fd032c25fa0 R15: 00007ffed13d3788 [ 98.565389][ T6147] [ 98.767119][ T5732] usb 2-1: USB disconnect, device number 2 [ 99.795883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 100.042889][ T6166] netlink: 'syz.0.86': attribute type 5 has an invalid length. [ 100.437859][ T6179] FAULT_INJECTION: forcing a failure. [ 100.437859][ T6179] name failslab, interval 1, probability 0, space 0, times 0 [ 100.452176][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 100.452201][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.452210][ T6179] Call Trace: [ 100.452215][ T6179] [ 100.452221][ T6179] dump_stack_lvl+0x100/0x190 [ 100.452247][ T6179] should_fail_ex.cold+0x5/0xa [ 100.452273][ T6179] should_failslab+0xc2/0x120 [ 100.452297][ T6179] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 100.452319][ T6179] ? __get_vm_area_node+0x101/0x330 [ 100.452345][ T6179] __get_vm_area_node+0x101/0x330 [ 100.452371][ T6179] __vmalloc_node_range_noprof+0x228/0x1630 [ 100.452394][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 100.452416][ T6179] ? find_held_lock+0x2b/0x80 [ 100.452435][ T6179] ? __lock_acquire+0x49f/0x1a40 [ 100.452460][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 100.452490][ T6179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.452515][ T6179] ? find_held_lock+0x2b/0x80 [ 100.452531][ T6179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 100.452558][ T6179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 100.452583][ T6179] ? avc_has_perm_noaudit+0x145/0x3b0 [ 100.452605][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 100.452626][ T6179] __vmalloc_node_noprof+0xad/0xf0 [ 100.452651][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 100.452677][ T6179] __vmalloc_noprof+0xa3/0x120 [ 100.452701][ T6179] ? __pfx___vmalloc_noprof+0x10/0x10 [ 100.452728][ T6179] ? rcu_is_watching+0x12/0xc0 [ 100.452754][ T6179] ? cap_capable+0x107/0x430 [ 100.452779][ T6179] bpf_prog_alloc_no_stats+0x59/0x630 [ 100.452800][ T6179] ? security_capable+0x80/0x260 [ 100.452824][ T6179] bpf_prog_alloc+0x3b/0x200 [ 100.452844][ T6179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.452867][ T6179] bpf_prog_load+0x4a9/0x2fa0 [ 100.452891][ T6179] ? __pfx_bpf_prog_load+0x10/0x10 [ 100.452909][ T6179] ? avc_has_perm_noaudit+0x145/0x3b0 [ 100.452950][ T6179] __sys_bpf+0x18dc/0x4e80 [ 100.452976][ T6179] ? __pfx___sys_bpf+0x10/0x10 [ 100.452994][ T6179] ? find_held_lock+0x2b/0x80 [ 100.453009][ T6179] ? get_pid_task+0xfc/0x250 [ 100.453025][ T6179] ? get_pid_task+0xfc/0x250 [ 100.453050][ T6179] ? find_held_lock+0x2b/0x80 [ 100.453071][ T6179] ? rcu_read_lock_any_held+0x6a/0xa0 [ 100.453089][ T6179] ? find_held_lock+0x2b/0x80 [ 100.453104][ T6179] ? ksys_write+0x190/0x250 [ 100.453120][ T6179] ? ksys_write+0x190/0x250 [ 100.453154][ T6179] ? fput+0x79/0x100 [ 100.453179][ T6179] ? __x64_sys_bpf+0xce/0x140 [ 100.453196][ T6179] __x64_sys_bpf+0xce/0x140 [ 100.453214][ T6179] ? do_syscall_64+0x90/0x870 [ 100.453239][ T6179] do_syscall_64+0x115/0x870 [ 100.453259][ T6179] ? clear_bhb_loop+0x70/0xc0 [ 100.453281][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.453298][ T6179] RIP: 0033:0x7fd03299e0d9 [ 100.453313][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.453328][ T6179] RSP: 002b:00007fd033830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.453345][ T6179] RAX: ffffffffffffffda RBX: 00007fd032c25fa0 RCX: 00007fd03299e0d9 [ 100.453356][ T6179] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 100.453366][ T6179] RBP: 00007fd033830090 R08: 0000000000000000 R09: 0000000000000000 [ 100.453375][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.453385][ T6179] R13: 00007fd032c26038 R14: 00007fd032c25fa0 R15: 00007ffed13d3788 [ 100.453408][ T6179] [ 100.453563][ T6179] syz.0.92: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 100.544253][ T5732] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.551880][ T6179] ,cpuset= [ 100.694246][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 100.694262][ T30] audit: type=1400 audit(1786460084.452:323): avc: denied { create } for pid=6183 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.696785][ T6179] /,mems_allowed=0-1 [ 101.756884][ T5732] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 101.984433][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 101.984449][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.984456][ T6179] Call Trace: [ 101.984460][ T6179] [ 101.984464][ T6179] dump_stack_lvl+0x100/0x190 [ 101.984483][ T6179] warn_alloc.cold+0x94/0xa8 [ 101.984496][ T6179] ? __pfx_warn_alloc+0x10/0x10 [ 101.984512][ T6179] ? __kasan_kmalloc+0x8a/0xb0 [ 101.984531][ T6179] ? __get_vm_area_node+0x208/0x330 [ 101.984549][ T6179] __vmalloc_node_range_noprof+0xccd/0x1630 [ 101.984567][ T6179] ? find_held_lock+0x2b/0x80 [ 101.984580][ T6179] ? __lock_acquire+0x49f/0x1a40 [ 101.984595][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 101.984613][ T6179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.984630][ T6179] ? find_held_lock+0x2b/0x80 [ 101.984640][ T6179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 101.984653][ T6179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 101.984668][ T6179] ? avc_has_perm_noaudit+0x145/0x3b0 [ 101.984682][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 101.984696][ T6179] __vmalloc_node_noprof+0xad/0xf0 [ 101.984713][ T6179] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 101.984729][ T6179] __vmalloc_noprof+0xa3/0x120 [ 101.984745][ T6179] ? __pfx___vmalloc_noprof+0x10/0x10 [ 101.984763][ T6179] ? rcu_is_watching+0x12/0xc0 [ 101.984781][ T6179] ? cap_capable+0x107/0x430 [ 101.984796][ T6179] bpf_prog_alloc_no_stats+0x59/0x630 [ 101.984810][ T6179] ? security_capable+0x80/0x260 [ 101.984826][ T6179] bpf_prog_alloc+0x3b/0x200 [ 101.984839][ T6179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.984854][ T6179] bpf_prog_load+0x4a9/0x2fa0 [ 101.984868][ T6179] ? __pfx_bpf_prog_load+0x10/0x10 [ 101.984879][ T6179] ? avc_has_perm_noaudit+0x145/0x3b0 [ 101.984904][ T6179] __sys_bpf+0x18dc/0x4e80 [ 101.984919][ T6179] ? __pfx___sys_bpf+0x10/0x10 [ 101.984930][ T6179] ? find_held_lock+0x2b/0x80 [ 101.984943][ T6179] ? get_pid_task+0xfc/0x250 [ 101.984953][ T6179] ? get_pid_task+0xfc/0x250 [ 101.984967][ T6179] ? find_held_lock+0x2b/0x80 [ 101.984980][ T6179] ? rcu_read_lock_any_held+0x6a/0xa0 [ 101.984991][ T6179] ? find_held_lock+0x2b/0x80 [ 101.985001][ T6179] ? ksys_write+0x190/0x250 [ 101.985011][ T6179] ? ksys_write+0x190/0x250 [ 101.985030][ T6179] ? fput+0x79/0x100 [ 101.985046][ T6179] ? __x64_sys_bpf+0xce/0x140 [ 101.985057][ T6179] __x64_sys_bpf+0xce/0x140 [ 101.985069][ T6179] ? do_syscall_64+0x90/0x870 [ 101.985085][ T6179] do_syscall_64+0x115/0x870 [ 101.985099][ T6179] ? clear_bhb_loop+0x70/0xc0 [ 101.985113][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.985124][ T6179] RIP: 0033:0x7fd03299e0d9 [ 101.985134][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.985144][ T6179] RSP: 002b:00007fd033830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.985155][ T6179] RAX: ffffffffffffffda RBX: 00007fd032c25fa0 RCX: 00007fd03299e0d9 [ 101.985162][ T6179] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 101.985168][ T6179] RBP: 00007fd033830090 R08: 0000000000000000 R09: 0000000000000000 [ 101.985174][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.985180][ T6179] R13: 00007fd032c26038 R14: 00007fd032c25fa0 R15: 00007ffed13d3788 [ 101.985193][ T6179] [ 101.985198][ T6179] Mem-Info: [ 102.326652][ T5732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.337838][ T5732] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 102.350055][ T6179] active_anon:8125 inactive_anon:0 isolated_anon:0 [ 102.350055][ T6179] active_file:0 inactive_file:66824 isolated_file:0 [ 102.350055][ T6179] unevictable:0 dirty:479 writeback:0 [ 102.350055][ T6179] slab_reclaimable:11556 slab_unreclaimable:95301 [ 102.350055][ T6179] mapped:31202 shmem:530 pagetables:1228 [ 102.350055][ T6179] sec_pagetables:0 bounce:0 [ 102.350055][ T6179] kernel_misc_reclaimable:0 [ 102.350055][ T6179] free:1271419 free_pcp:37938 free_cma:0 [ 102.401946][ T6179] Node 0 active_anon:32500kB inactive_anon:0kB active_file:0kB inactive_file:267096kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124808kB dirty:1912kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.462582][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.488185][ T30] audit: type=1400 audit(1786460086.242:324): avc: denied { mount } for pid=6187 comm="syz.1.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.521459][ T5732] usb 5-1: Product: syz [ 102.536449][ T5732] usb 5-1: Manufacturer: syz [ 102.551641][ T5732] usb 5-1: SerialNumber: syz [ 102.583473][ T30] audit: type=1400 audit(1786460086.242:325): avc: denied { search } for pid=6187 comm="syz.1.95" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.672705][ T6171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.681823][ T6171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.698360][ T6179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 102.806167][ T30] audit: type=1400 audit(1786460086.242:326): avc: denied { search } for pid=6187 comm="syz.1.95" name="events" dev="tracefs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.885022][ T5732] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 102.930607][ T6179] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.996876][ T5732] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 103.022248][ T30] audit: type=1400 audit(1786460086.242:327): avc: denied { search } for pid=6187 comm="syz.1.95" name="task" dev="tracefs" ino=10434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.072401][ T5732] usbserial_generic 5-1:1.0: generic converter detected [ 103.087194][ T6196] FAULT_INJECTION: forcing a failure. [ 103.087194][ T6196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.100247][ T6171] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 103.102556][ T6179] lowmem_reserve[]: [ 103.108886][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.2.97 Not tainted syzkaller #0 PREEMPT(full) [ 103.108909][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.108919][ T6196] Call Trace: [ 103.108925][ T6196] [ 103.108931][ T6196] dump_stack_lvl+0x100/0x190 [ 103.108957][ T6196] should_fail_ex.cold+0x5/0xa [ 103.108979][ T6196] strncpy_from_user+0x3b/0x2d0 [ 103.109003][ T6196] do_getname+0x78/0x390 [ 103.109029][ T6196] do_sys_openat2+0xc7/0x1e0 [ 103.109051][ T6196] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.109074][ T6196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.109099][ T6196] ? __fget_files+0x21f/0x3d0 [ 103.109120][ T6196] __x64_sys_openat+0x12d/0x210 [ 103.109142][ T6196] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.109163][ T6196] ? ksys_write+0x1ac/0x250 [ 103.109186][ T6196] do_syscall_64+0x115/0x870 [ 103.109208][ T6196] ? clear_bhb_loop+0x70/0xc0 [ 103.109229][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.109246][ T6196] RIP: 0033:0x7f1504f5e90e [ 103.109261][ T6196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.109275][ T6196] RSP: 002b:00007f1505d92b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.109291][ T6196] RAX: ffffffffffffffda RBX: 00007f1505d936c0 RCX: 00007f1504f5e90e [ 103.109302][ T6196] RDX: 0000000000000002 RSI: 00007f1505d92c00 RDI: ffffffffffffff9c [ 103.109313][ T6196] RBP: 00007f1505d93090 R08: 0000000000000000 R09: 0000000000000000 [ 103.109322][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.109332][ T6196] R13: 00007f1505226038 R14: 00007f1505225fa0 R15: 00007ffd80fdf518 [ 103.109355][ T6196] [ 103.129953][ T5732] usb 5-1: generic converter now attached to ttyUSB0 [ 103.194681][ T6179] 0 [ 103.213914][ T5732] usb 5-1: USB disconnect, device number 4 [ 103.222123][ T30] audit: type=1400 audit(1786460086.242:328): avc: denied { search } for pid=6187 comm="syz.1.95" name="task_rename" dev="tracefs" ino=10436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.230878][ T5732] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 103.292561][ T30] audit: type=1400 audit(1786460086.252:329): avc: denied { write } for pid=6187 comm="syz.1.95" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.292602][ T30] audit: type=1400 audit(1786460086.252:330): avc: denied { open } for pid=6187 comm="syz.1.95" path="/27/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.369133][ T5732] usbserial_generic 5-1:1.0: device disconnected [ 103.392637][ T6179] 2472 2473 2473 2473 [ 103.401559][ T6179] Node 0 DMA32 free:1125868kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32500kB inactive_anon:0kB active_file:0kB inactive_file:267096kB unevictable:0kB writepending:2112kB zspages:0kB present:3129332kB managed:2532244kB mlocked:0kB bounce:0kB free_pcp:150924kB local_pcp:119132kB free_cma:0kB [ 103.434698][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 103.439459][ T6179] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.478798][ T30] audit: type=1400 audit(1786460086.862:331): avc: denied { mount } for pid=6170 comm="syz.4.89" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 103.499748][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 103.506359][ T30] audit: type=1400 audit(1786460086.872:332): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.527972][ T6179] Node 1 Normal free:3944312kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:800kB local_pcp:800kB free_cma:0kB [ 103.563640][ T6179] lowmem_reserve[]: 0 0 0 0 0 [ 103.571328][ T6179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.584609][ T6179] Node 0 DMA32: 216*4kB (UM) 311*8kB (U) 64*16kB (U) 23*32kB (U) 6*64kB (UE) 7*128kB (UE) 7*256kB (UM) 3*512kB (UE) 4*1024kB (UME) 3*2048kB (UM) 270*4096kB (UM) = 1125880kB [ 103.601980][ T6179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 103.613663][ T6179] Node 1 Normal: 0*4kB 7*8kB (UM) 8*16kB (UM) 13*32kB (UM) 7*64kB (UM) 5*128kB (UM) 5*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944344kB [ 103.631999][ T6179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.641600][ T5782] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.649290][ T6179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.662531][ T6179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.672464][ T6179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 103.684544][ T6179] 67331 total pagecache pages [ 103.689285][ T6179] 0 pages in swap cache [ 103.693478][ T6179] Free swap = 124996kB [ 103.698114][ T6179] Total swap = 124996kB [ 103.702341][ T6179] 2097051 pages RAM [ 103.706205][ T6179] 0 pages HighMem/MovableOnly [ 103.711046][ T6179] 432279 pages reserved [ 103.737905][ T6179] 0 pages cma reserved [ 103.794903][ T5782] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.484549][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.500444][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.510617][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.523900][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.534876][ T5782] usb 2-1: config 0 descriptor?? [ 104.694166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.531315][ T5782] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.946902][ T5782] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.016145][ T6234] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 106.041990][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 106.058610][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 106.058644][ T30] audit: type=1400 audit(1786460089.852:343): avc: denied { write } for pid=6215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.186427][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 106.192294][ T5782] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 106.203565][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 24, changing to 8 [ 106.217203][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.243445][ T5782] usb 1-1: config 0 descriptor?? [ 106.292617][ T30] audit: type=1400 audit(1786460090.082:344): avc: denied { write } for pid=6238 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.469566][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.483213][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.778566][ T30] audit: type=1400 audit(1786460090.572:345): avc: denied { setopt } for pid=6223 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.779592][ T6225] netlink: 'syz.0.106': attribute type 13 has an invalid length. [ 106.816243][ T6225] netlink: 'syz.0.106': attribute type 17 has an invalid length. [ 106.854518][ T30] audit: type=1400 audit(1786460090.572:346): avc: denied { read } for pid=6223 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.930211][ T30] audit: type=1400 audit(1786460090.682:347): avc: denied { unlink } for pid=6223 comm="syz.0.106" name="#1" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.991675][ T30] audit: type=1400 audit(1786460090.692:348): avc: denied { mount } for pid=6223 comm="syz.0.106" name="/" dev="overlay" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.062971][ T6225] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 107.091916][ T30] audit: type=1400 audit(1786460090.722:349): avc: denied { remount } for pid=6223 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.161104][ T5782] usbhid 1-1:0.0: can't add hid device: -71 [ 107.170818][ T5782] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.239386][ T5782] usb 1-1: USB disconnect, device number 4 [ 107.366077][ T30] audit: type=1400 audit(1786460091.162:350): avc: denied { write } for pid=6240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.448068][ T6258] FAULT_INJECTION: forcing a failure. [ 107.448068][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 107.484858][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT(full) [ 107.484884][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 107.484893][ T6258] Call Trace: [ 107.484898][ T6258] [ 107.484904][ T6258] dump_stack_lvl+0x100/0x190 [ 107.484932][ T6258] should_fail_ex.cold+0x5/0xa [ 107.484952][ T6258] should_failslab+0xc2/0x120 [ 107.484975][ T6258] __kmalloc_noprof+0xfc/0x820 [ 107.484993][ T6258] ? is_bpf_text_address+0x8a/0x1a0 [ 107.485016][ T6258] ? bpf_test_init.isra.0+0x88/0x100 [ 107.485047][ T6258] bpf_test_init.isra.0+0x88/0x100 [ 107.485075][ T6258] bpf_prog_test_run_skb+0x497/0x3540 [ 107.485098][ T6258] ? find_held_lock+0x2b/0x80 [ 107.485116][ T6258] ? __fget_files+0x1d1/0x3d0 [ 107.485139][ T6258] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 107.485160][ T6258] ? fput+0x79/0x100 [ 107.485183][ T6258] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 107.485201][ T6258] __sys_bpf+0x2a12/0x4e80 [ 107.485223][ T6258] ? __pfx___sys_bpf+0x10/0x10 [ 107.485239][ T6258] ? find_held_lock+0x2b/0x80 [ 107.485253][ T6258] ? get_pid_task+0xfc/0x250 [ 107.485267][ T6258] ? get_pid_task+0xfc/0x250 [ 107.485290][ T6258] ? find_held_lock+0x2b/0x80 [ 107.485310][ T6258] ? rcu_read_lock_any_held+0x6a/0xa0 [ 107.485328][ T6258] ? find_held_lock+0x2b/0x80 [ 107.485343][ T6258] ? ksys_write+0x190/0x250 [ 107.485358][ T6258] ? ksys_write+0x190/0x250 [ 107.485389][ T6258] ? fput+0x79/0x100 [ 107.485412][ T6258] ? __x64_sys_bpf+0xce/0x140 [ 107.485428][ T6258] __x64_sys_bpf+0xce/0x140 [ 107.485445][ T6258] ? do_syscall_64+0x90/0x870 [ 107.485469][ T6258] do_syscall_64+0x115/0x870 [ 107.485488][ T6258] ? clear_bhb_loop+0x70/0xc0 [ 107.485508][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.485529][ T6258] RIP: 0033:0x7f80f999e0d9 [ 107.485543][ T6258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.485559][ T6258] RSP: 002b:00007f80fa7f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.485577][ T6258] RAX: ffffffffffffffda RBX: 00007f80f9c25fa0 RCX: 00007f80f999e0d9 [ 107.485588][ T6258] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 107.485597][ T6258] RBP: 00007f80fa7f4090 R08: 0000000000000000 R09: 0000000000000000 [ 107.485607][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.485616][ T6258] R13: 00007f80f9c26038 R14: 00007f80f9c25fa0 R15: 00007ffd93b11dd8 [ 107.485645][ T6258] [ 107.546633][ T5732] usb 2-1: USB disconnect, device number 3 [ 108.408032][ T6274] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 108.463987][ T30] audit: type=1400 audit(1786460092.132:351): avc: denied { write } for pid=6272 comm="syz.1.111" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.507576][ T6274] team0: Port device dummy0 added [ 108.690118][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 109.394330][ T30] audit: type=1400 audit(1786460093.182:352): avc: denied { write } for pid=6271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.489950][ T6295] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 111.932756][ T30] audit: type=1400 audit(1786460095.692:353): avc: denied { read } for pid=6299 comm="syz.1.120" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 112.013995][ T6309] capability: warning: `syz.2.121' uses deprecated v2 capabilities in a way that may be insecure [ 112.083488][ T30] audit: type=1400 audit(1786460095.712:354): avc: denied { open } for pid=6299 comm="syz.1.120" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 112.085226][ T6309] fuse: Unknown parameter '000000000000000000060x0000000000000006' [ 112.111371][ T30] audit: type=1400 audit(1786460095.772:355): avc: denied { ioctl } for pid=6299 comm="syz.1.120" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 112.154792][ T30] audit: type=1400 audit(1786460095.802:356): avc: denied { connect } for pid=6308 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.244093][ T30] audit: type=1400 audit(1786460095.802:357): avc: denied { ioctl } for pid=6308 comm="syz.2.121" path="socket:[10575]" dev="sockfs" ino=10575 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.282852][ T6321] gadgetfs: bound to dummy_udc driver [ 112.371280][ T30] audit: type=1400 audit(1786460096.162:358): avc: denied { write } for pid=6289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.508323][ T6332] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 112.545438][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 112.563982][ T30] audit: type=1400 audit(1786460096.352:359): avc: denied { bind } for pid=6331 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.644812][ T190] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 112.736926][ C0] gadgetfs: connected [ 112.752111][ T190] gadgetfs: disconnected [ 112.991116][ T30] audit: type=1400 audit(1786460096.352:360): avc: denied { listen } for pid=6331 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.070217][ T30] audit: type=1400 audit(1786460096.352:361): avc: denied { accept } for pid=6331 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.075027][ T6310] gadgetfs: suspended from state 2 [ 113.117508][ T6345] device-mapper: table: 248:1: too large device [ 113.144923][ T6345] device-mapper: ioctl: error adding target to table [ 113.183129][ T30] audit: type=1400 audit(1786460096.812:362): avc: denied { write } for pid=6334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.334197][ T190] usb 1-1: device not accepting address 5, error -71 [ 113.913039][ T6373] gadgetfs: bound to dummy_udc driver [ 114.323597][ T6382] syzkaller0: entered promiscuous mode [ 114.387727][ T6382] syzkaller0: entered allmulticast mode [ 114.394386][ T190] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.414991][ C0] gadgetfs: connected [ 114.419154][ T190] gadgetfs: disconnected [ 114.563792][ T6400] xt_time: unknown flags 0xc [ 114.605264][ C0] gadgetfs: connected [ 114.622558][ T190] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 114.659719][ T190] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 114.687832][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.731406][ C0] gadgetfs: configuration #1 [ 115.782655][ T6368] gadgetfs: suspended from state 3 [ 115.798223][ T6419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.926505][ T6368] gadgetfs: disconnected [ 115.961666][ T190] usb 1-1: can't set config #1, error -71 [ 116.565308][ T190] usb 1-1: USB disconnect, device number 6 [ 116.720710][ T6425] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.066197][ T6442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.145'. [ 117.075385][ T190] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.246606][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 117.252488][ T190] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 117.280024][ T190] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.298504][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 117.298515][ T30] audit: type=1400 audit(1786460101.092:373): avc: denied { write } for pid=6432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.351505][ T190] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 117.381231][ T190] usb 4-1: Product: syz [ 117.395263][ T190] usb 4-1: Manufacturer: syz [ 117.418186][ T190] usb 4-1: config 0 descriptor?? [ 117.437951][ T190] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 117.523955][ T30] audit: type=1400 audit(1786460101.312:374): avc: denied { write } for pid=6460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.637917][ T30] audit: type=1400 audit(1786460101.432:375): avc: denied { create } for pid=6430 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.669534][ T30] audit: type=1400 audit(1786460101.462:376): avc: denied { create } for pid=6430 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.705549][ T30] audit: type=1400 audit(1786460101.462:377): avc: denied { write } for pid=6430 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.965157][ T190] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 117.979948][ T190] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 118.622232][ T6411] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 118.638404][ T6442] virt_wifi0: entered promiscuous mode [ 118.644029][ T6442] virt_wifi0: entered allmulticast mode [ 118.716089][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.722270][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.730092][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.736977][ T6431] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.751280][ T6431] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.768184][ T6431] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.780262][ T6431] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.791673][ T6431] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 118.810928][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.817955][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.824744][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.831856][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.839816][ T6431] wlan0 speed is unknown, defaulting to 1000 [ 118.853313][ T190] usb 4-1: USB disconnect, device number 4 [ 118.950559][ T30] audit: type=1400 audit(1786460102.742:378): avc: denied { setopt } for pid=6497 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.958392][ T6496] 9p: Bad value for 'rfdno' [ 119.068886][ T6495] wlan0 speed is unknown, defaulting to 1000 [ 119.224276][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.983607][ T30] audit: type=1400 audit(1786460103.692:379): avc: denied { read write } for pid=6504 comm="syz.3.149" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.545410][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 120.548454][ T30] audit: type=1400 audit(1786460103.692:380): avc: denied { open } for pid=6504 comm="syz.3.149" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 120.554228][ T9] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 120.618648][ T9] usb 3-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 120.626263][ T30] audit: type=1400 audit(1786460104.292:381): avc: denied { wake_alarm } for pid=6510 comm="syz.4.150" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.657786][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.693883][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.705919][ T9] usb 3-1: Product: syz [ 120.720308][ T9] usb 3-1: Manufacturer: syz [ 120.736462][ T9] usb 3-1: SerialNumber: syz [ 120.898012][ T30] audit: type=1400 audit(1786460104.692:382): avc: denied { create } for pid=6519 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.153073][ T6526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.170161][ T6498] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 121.204255][ T190] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 121.223201][ T6498] ref_ctr increment failed for inode: 0xb8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e655940 [ 121.761902][ T6527] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 121.828975][ T6527] ref_ctr decrement failed for inode: 0xb8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e655940 [ 121.887410][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 121.895938][ T6527] uprobe: syz.2.147:6527 failed to unregister, leaking uprobe [ 121.975046][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.995168][ T9] usb 3-1: USB disconnect, device number 7 [ 122.011066][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.073161][ T190] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.085829][ T190] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.102200][ T190] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.114276][ T190] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.129650][ T190] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.140002][ T190] usb 1-1: Product: syz [ 122.154636][ T190] usb 1-1: Manufacturer: syz [ 122.168239][ T190] usb 1-1: SerialNumber: syz [ 122.188919][ T190] usb 1-1: config 0 descriptor?? [ 122.219924][ T190] usb 1-1: selecting invalid altsetting 0 [ 122.512011][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 122.512033][ T30] audit: type=1400 audit(1786460106.202:385): avc: denied { read } for pid=6519 comm="syz.0.153" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 122.819922][ T30] audit: type=1400 audit(1786460106.202:386): avc: denied { open } for pid=6519 comm="syz.0.153" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.264584][ T6520] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 124.303515][ T30] audit: type=1400 audit(1786460108.092:387): avc: denied { getattr } for pid=6550 comm="syz.2.159" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.345684][ T29] usb 1-1: USB disconnect, device number 7 [ 124.473635][ T30] audit: type=1400 audit(1786460108.262:388): avc: denied { bind } for pid=6553 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.547741][ T30] audit: type=1400 audit(1786460108.292:389): avc: denied { setopt } for pid=6553 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.677888][ T6557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.780547][ T30] audit: type=1400 audit(1786460108.302:390): avc: denied { accept } for pid=6553 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.091444][ T30] audit: type=1400 audit(1786460108.882:391): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.410083][ T30] audit: type=1400 audit(1786460109.182:392): avc: denied { ioctl } for pid=6558 comm="syz.2.162" path="/dev/video0" dev="devtmpfs" ino=931 ioctlcmd=0x560a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 125.744819][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 125.777921][ T6570] ip6gre1: entered promiscuous mode [ 125.783300][ T6570] ip6gre1: entered allmulticast mode [ 126.214336][ T30] audit: type=1400 audit(1786460109.612:393): avc: denied { map } for pid=6565 comm="syz.1.165" path="socket:[11343]" dev="sockfs" ino=11343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.355930][ T30] audit: type=1400 audit(1786460110.142:394): avc: denied { create } for pid=6575 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.496750][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 127.348940][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.359285][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.622908][ T6593] netlink: 'syz.1.170': attribute type 5 has an invalid length. [ 128.656200][ T6595] netlink: 'syz.0.173': attribute type 5 has an invalid length. [ 128.824303][ T29] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 128.886401][ T6607] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.135257][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.603416][ T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.622449][ T29] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 129.632435][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.643179][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.651547][ T29] usb 5-1: Product: syz [ 129.655921][ T29] usb 5-1: Manufacturer: syz [ 129.660510][ T29] usb 5-1: SerialNumber: syz [ 129.677700][ T29] usb 5-1: config 0 descriptor?? [ 129.695511][ T6610] FAULT_INJECTION: forcing a failure. [ 129.695511][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.728958][ T29] usb 5-1: selecting invalid altsetting 0 [ 129.759904][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.2.175 Not tainted syzkaller #0 PREEMPT(full) [ 129.759930][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.759941][ T6610] Call Trace: [ 129.759947][ T6610] [ 129.759953][ T6610] dump_stack_lvl+0x100/0x190 [ 129.759981][ T6610] should_fail_ex.cold+0x5/0xa [ 129.760003][ T6610] _copy_from_iter+0x1f4/0x1690 [ 129.760034][ T6610] ? __pfx__copy_from_iter+0x10/0x10 [ 129.760059][ T6610] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 129.760092][ T6610] copy_page_from_iter+0x238/0x300 [ 129.760119][ T6610] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 129.760148][ T6610] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 129.760165][ T6610] ? unwind_get_return_address+0x59/0xa0 [ 129.760183][ T6610] ? arch_stack_walk+0xa6/0xf0 [ 129.760214][ T6610] ? _kstrtoull+0x13c/0x1f0 [ 129.760229][ T6610] ? __pfx__kstrtoull+0x10/0x10 [ 129.760248][ T6610] tun_get_user+0x16d6/0x3c20 [ 129.760274][ T6610] ? __pfx_tun_get_user+0x10/0x10 [ 129.760292][ T6610] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.760323][ T6610] ? find_held_lock+0x2b/0x80 [ 129.760339][ T6610] ? tun_get+0x191/0x370 [ 129.760353][ T6610] ? tun_get+0x191/0x370 [ 129.760374][ T6610] tun_chr_write_iter+0xdc/0x200 [ 129.760393][ T6610] vfs_write+0x6ac/0x1050 [ 129.760410][ T6610] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 129.760430][ T6610] ? __pfx_vfs_write+0x10/0x10 [ 129.760444][ T6610] ? find_held_lock+0x2b/0x80 [ 129.760475][ T6610] ksys_write+0x12a/0x250 [ 129.760492][ T6610] ? __pfx_ksys_write+0x10/0x10 [ 129.760514][ T6610] do_syscall_64+0x115/0x870 [ 129.760537][ T6610] ? clear_bhb_loop+0x70/0xc0 [ 129.760560][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.760577][ T6610] RIP: 0033:0x7f1504f5e90e [ 129.760593][ T6610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 129.760609][ T6610] RSP: 002b:00007f1505d92fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.760627][ T6610] RAX: ffffffffffffffda RBX: 00007f1505d936c0 RCX: 00007f1504f5e90e [ 129.760638][ T6610] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 00000000000000c8 [ 129.760649][ T6610] RBP: 00007f1505d93090 R08: 0000000000000000 R09: 0000000000000000 [ 129.760659][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.760669][ T6610] R13: 00007f1505226038 R14: 00007f1505225fa0 R15: 00007ffd80fdf518 [ 129.760699][ T6610] [ 130.426190][ T6616] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 130.732425][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 130.732442][ T30] audit: type=1400 audit(1786460114.522:397): avc: denied { name_connect } for pid=6614 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 130.810770][ T30] audit: type=1400 audit(1786460114.522:398): avc: denied { listen } for pid=6614 comm="syz.2.176" lport=57921 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.852565][ T30] audit: type=1400 audit(1786460114.522:399): avc: denied { accept } for pid=6614 comm="syz.2.176" lport=57921 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.011552][ T30] audit: type=1400 audit(1786460114.802:400): avc: denied { read } for pid=6624 comm="syz.3.181" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.130921][ T30] audit: type=1400 audit(1786460114.802:401): avc: denied { open } for pid=6624 comm="syz.3.181" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.374269][ T5723] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.607766][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 131.735534][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.763364][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.797860][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.843184][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.864236][ T190] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 131.892747][ T5695] usb 5-1: USB disconnect, device number 5 [ 131.902946][ T5723] usb 4-1: config 0 descriptor?? [ 132.018790][ T5723] hub 4-1:0.0: USB hub found [ 132.124750][ T981] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.148597][ T190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.173877][ T190] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 132.206718][ T5723] hub 4-1:0.0: 1 port detected [ 132.218044][ T190] usb 1-1: config 100 has an invalid interface number: 173 but max is 0 [ 132.242917][ T190] usb 1-1: config 100 has no interface number 0 [ 132.267044][ T190] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 132.304705][ T190] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 132.305702][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 132.339701][ T190] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 26368, setting to 8 [ 132.347652][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.379327][ T981] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 132.379499][ T190] usb 1-1: config 100 interface 173 has no altsetting 0 [ 132.420011][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.432107][ T981] usb 3-1: Product: syz [ 132.451076][ T981] usb 3-1: Manufacturer: syz [ 132.469823][ T981] usb 3-1: SerialNumber: syz [ 132.576240][ T6645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.883230][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 132.952455][ T6633] openvswitch: netlink: Flow key attr not present in new flow. [ 133.288813][ T981] usb 3-1: selecting invalid altsetting 1 [ 133.479293][ T190] usb 1-1: string descriptor 0 read error: -22 [ 133.493529][ T981] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.521257][ T5723] usb 4-1: USB disconnect, device number 5 [ 133.522790][ T6650] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 133.527310][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.569505][ T981] usb 3-1: USB disconnect, device number 8 [ 133.575674][ T6629] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.616883][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.670838][ T6629] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.744675][ T190] metro_usb 1-1:100.173: Metrologic USB to Serial converter detected [ 133.777258][ T6653] process 'syz.1.187' launched './file0' with NULL argv: empty string added [ 133.794332][ T190] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 133.825263][ T30] audit: type=1400 audit(1786460117.612:402): avc: denied { setopt } for pid=6654 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.847042][ T6658] FAULT_INJECTION: forcing a failure. [ 133.847042][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 133.860633][ T6658] CPU: 1 UID: 0 PID: 6658 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 133.860650][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.860657][ T6658] Call Trace: [ 133.860661][ T6658] [ 133.860666][ T6658] dump_stack_lvl+0x100/0x190 [ 133.860686][ T6658] should_fail_ex.cold+0x5/0xa [ 133.860702][ T6658] should_failslab+0xc2/0x120 [ 133.860717][ T6658] kmem_cache_alloc_noprof+0x91/0x6a0 [ 133.860731][ T6658] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 133.860744][ T6658] ? inet_bind2_bucket_create+0x36/0x5f0 [ 133.860765][ T6658] inet_bind2_bucket_create+0x36/0x5f0 [ 133.860785][ T6658] inet_csk_get_port+0x15b4/0x28e0 [ 133.860804][ T6658] ? __pfx_inet_csk_get_port+0x10/0x10 [ 133.860818][ T6658] inet_csk_listen_start+0x205/0x450 [ 133.860832][ T6658] __inet_listen_sk+0x20f/0x510 [ 133.860849][ T6658] ? __pfx___inet_listen_sk+0x10/0x10 [ 133.860865][ T6658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.860885][ T6658] ? __local_bh_enable_ip+0x9e/0x120 [ 133.860903][ T6658] inet_listen+0x93/0xd0 [ 133.860918][ T6658] __sys_listen_socket+0x108/0x150 [ 133.860932][ T6658] __sys_listen+0xa7/0x130 [ 133.860944][ T6658] __x64_sys_listen+0x53/0x80 [ 133.860956][ T6658] do_syscall_64+0x115/0x870 [ 133.860971][ T6658] ? clear_bhb_loop+0x70/0xc0 [ 133.860985][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.860997][ T6658] RIP: 0033:0x7f80f999e0d9 [ 133.861007][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.861018][ T6658] RSP: 002b:00007f80fa7d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 133.861029][ T6658] RAX: ffffffffffffffda RBX: 00007f80f9c26090 RCX: 00007f80f999e0d9 [ 133.861036][ T6658] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 133.861042][ T6658] RBP: 00007f80fa7d3090 R08: 0000000000000000 R09: 0000000000000000 [ 133.861049][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.861055][ T6658] R13: 00007f80f9c26128 R14: 00007f80f9c26090 R15: 00007ffd93b11dd8 [ 133.861068][ T6658] [ 134.106996][ T30] audit: type=1400 audit(1786460117.872:403): avc: denied { execute_no_trans } for pid=6652 comm="syz.1.187" path="/46/file0" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.157114][ T190] usb 1-1: USB disconnect, device number 8 [ 134.167759][ T6662] tipc: Started in network mode [ 134.191399][ T30] audit: type=1400 audit(1786460117.972:404): avc: denied { accept } for pid=6659 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.195627][ T6661] netlink: 'syz.4.189': attribute type 5 has an invalid length. [ 134.232560][ T190] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 134.280507][ T6662] tipc: Node identity 4, cluster identity 4711 [ 134.306095][ T190] metro_usb 1-1:100.173: device disconnected [ 134.325711][ T6662] tipc: Node number set to 4 [ 134.605376][ T30] audit: type=1400 audit(1786460118.402:405): avc: denied { watch } for pid=6675 comm="syz.1.193" path="/48/net_prio.prioidx" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.639289][ T6679] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 134.656876][ T30] audit: type=1400 audit(1786460118.422:406): avc: denied { watch_sb } for pid=6675 comm="syz.1.193" path="/48/net_prio.prioidx" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.934252][ T190] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 134.965610][ T5710] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.085314][ T190] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.095586][ T190] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.109582][ T190] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.127770][ T190] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.136419][ T5710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.161594][ T190] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.173833][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.186548][ T190] usb 4-1: Product: syz [ 135.195861][ T190] usb 4-1: Manufacturer: syz [ 135.202191][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.221408][ T190] usb 4-1: SerialNumber: syz [ 135.231738][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.245115][ T190] usb 4-1: config 0 descriptor?? [ 135.261823][ T190] usb 4-1: selecting invalid altsetting 0 [ 135.280736][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.293988][ T5710] usb 2-1: Product: syz [ 135.308637][ T5710] usb 2-1: Manufacturer: syz [ 135.319558][ T5710] usb 2-1: SerialNumber: syz [ 135.340932][ T5710] hub 2-1:1.0: bad descriptor, ignoring hub [ 135.350909][ T5710] hub 2-1:1.0: probe with driver hub failed with error -5 [ 135.533137][ T6687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.150350][ T5710] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.209568][ T5710] usb 2-1: USB disconnect, device number 4 [ 136.232545][ T5710] usblp0: removed [ 136.495172][ T190] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 136.664881][ T190] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 136.676297][ T190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.699510][ T190] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.727123][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.761692][ T190] usb 5-1: config 0 descriptor?? [ 136.779811][ T190] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 136.801832][ T190] dvb-usb: bulk message failed: -22 (3/0) [ 136.846445][ T190] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 136.868005][ T6700] FAULT_INJECTION: forcing a failure. [ 136.868005][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 136.868431][ T190] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 136.889893][ T190] usb 5-1: media controller created [ 136.892735][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) [ 136.892757][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.892766][ T6700] Call Trace: [ 136.892771][ T6700] [ 136.892777][ T6700] dump_stack_lvl+0x100/0x190 [ 136.892803][ T6700] should_fail_ex.cold+0x5/0xa [ 136.892823][ T6700] should_failslab+0xc2/0x120 [ 136.892845][ T6700] __kmalloc_cache_noprof+0x91/0x6c0 [ 136.892862][ T6700] ? io_uring_setup.cold+0x6c/0x1cae [ 136.892890][ T6700] io_uring_setup.cold+0x6c/0x1cae [ 136.892919][ T6700] ? __pfx_io_uring_setup+0x10/0x10 [ 136.892942][ T6700] ? find_held_lock+0x2b/0x80 [ 136.892957][ T6700] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.892975][ T6700] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 136.893006][ T6700] ? ksys_write+0x1ac/0x250 [ 136.893020][ T6700] ? __pfx_ksys_write+0x10/0x10 [ 136.893039][ T6700] __x64_sys_io_uring_setup+0xc2/0x170 [ 136.893063][ T6700] do_syscall_64+0x115/0x870 [ 136.893083][ T6700] ? clear_bhb_loop+0x70/0xc0 [ 136.893103][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.893119][ T6700] RIP: 0033:0x7f80f999e0d9 [ 136.893132][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.893147][ T6700] RSP: 002b:00007f80fa7b1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 136.893163][ T6700] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f80f999e0d9 [ 136.893173][ T6700] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 136.893182][ T6700] RBP: 00007f80fa7b2090 R08: 0000000000000000 R09: 0000000000000101 [ 136.893191][ T6700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.893200][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd93b11dd8 [ 136.893221][ T6700] [ 137.091238][ T6692] dvb-usb: bulk message failed: -22 (2/0) [ 137.108908][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.152384][ T190] dvb-usb: bulk message failed: -22 (6/0) [ 137.162300][ T190] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.178247][ T190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 137.201180][ T190] dvb-usb: schedule remote query interval to 150 msecs. [ 137.211128][ T190] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 137.439559][ T5710] dvb-usb: bulk message failed: -22 (1/0) [ 137.446856][ T5710] dvb-usb: error while querying for an remote control event. [ 137.599677][ T6710] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 137.938638][ T5710] dvb-usb: bulk message failed: -22 (1/0) [ 137.944525][ T5710] dvb-usb: error while querying for an remote control event. [ 137.994218][ T190] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 138.021049][ T5732] usb 4-1: USB disconnect, device number 6 [ 138.093074][ T30] audit: type=1400 audit(1786460121.882:407): avc: denied { create } for pid=6714 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.113712][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 138.119514][ T5695] dvb-usb: error while querying for an remote control event. [ 138.127963][ T30] audit: type=1400 audit(1786460121.882:408): avc: denied { accept } for pid=6714 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.164801][ T190] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 138.182963][ T190] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 138.209768][ T190] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.292439][ T6718] gadgetfs: bound to dummy_udc driver [ 138.304746][ T5723] dvb-usb: bulk message failed: -22 (1/0) [ 138.326075][ T5723] dvb-usb: error while querying for an remote control event. [ 138.494365][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 138.502878][ T5695] dvb-usb: error while querying for an remote control event. [ 138.537015][ T6725] netlink: 'syz.2.206': attribute type 5 has an invalid length. [ 138.545390][ T29] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 138.558682][ C1] gadgetfs: connected [ 138.563095][ T29] gadgetfs: disconnected [ 138.674423][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 138.696106][ T5695] dvb-usb: error while querying for an remote control event. [ 138.735052][ C1] gadgetfs: connected [ 138.739927][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 138.756264][ T29] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 138.777859][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.806325][ C1] gadgetfs: configuration #1 [ 138.884255][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 138.896315][ T5695] dvb-usb: error while querying for an remote control event. [ 138.993539][ T6714] gadgetfs: suspended from state 3 [ 138.998666][ T29] usb 2-1: can't set config #1, error -71 [ 139.006101][ T6714] gadgetfs: disconnected [ 139.028649][ T29] usb 2-1: USB disconnect, device number 5 [ 139.066146][ T5695] dvb-usb: bulk message failed: -22 (1/0) [ 139.080591][ T5695] dvb-usb: error while querying for an remote control event. [ 139.118099][ T30] audit: type=1326 audit(1786460122.912:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6688 comm="syz.4.196" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875d39e0d9 code=0x7fc00000 [ 139.156596][ T981] usb 5-1: USB disconnect, device number 6 [ 139.289339][ T981] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.509614][ T6732] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.363486][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.401283][ T190] usb 1-1: can't set config #1, error -71 [ 140.427270][ T190] usb 1-1: USB disconnect, device number 9 [ 140.645462][ T5695] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.665813][ T30] audit: type=1400 audit(1786460124.452:410): avc: denied { bind } for pid=6739 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.715012][ T6741] netlink: 8776 bytes leftover after parsing attributes in process `syz.0.210'. [ 140.844794][ T5695] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 140.924311][ T5695] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 140.936038][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.945522][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.956513][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.964499][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.973971][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.985540][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.993189][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.004456][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.016122][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.023916][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.032950][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.043935][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.051628][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.060813][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.072139][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.079693][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.088805][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.099850][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.121787][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.140285][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.162577][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.178984][ T5695] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.200643][ T5695] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.233782][ T5695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.242604][ T5695] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 141.252896][ T30] audit: type=1400 audit(1786460125.042:411): avc: denied { append } for pid=6747 comm="syz.4.213" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.276004][ T5695] usb 3-1: Product: syz [ 141.276024][ T5695] usb 3-1: Manufacturer: syz [ 141.285749][ T5695] usb 3-1: SerialNumber: syz [ 141.292998][ T5695] usb 3-1: config 0 descriptor?? [ 141.309401][ T5695] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 141.350177][ T30] audit: type=1400 audit(1786460125.082:412): avc: denied { map } for pid=6747 comm="syz.4.213" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.375152][ T30] audit: type=1400 audit(1786460125.082:413): avc: denied { write execute } for pid=6747 comm="syz.4.213" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.464505][ T5710] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 141.482371][ T6759] netlink: 'syz.3.217': attribute type 4 has an invalid length. [ 141.503554][ T6759] lo speed is unknown, defaulting to 1000 [ 141.511421][ T6759] lo speed is unknown, defaulting to 1000 [ 141.518103][ T6759] lo speed is unknown, defaulting to 1000 [ 141.625862][ T5710] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.637595][ T6763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.681107][ T5710] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.749628][ T5710] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 141.804364][ T5710] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.851492][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.896855][ T5710] usb 1-1: Product: syz [ 141.937350][ T5710] usb 1-1: Manufacturer: syz [ 141.977810][ T5710] usb 1-1: SerialNumber: syz [ 142.147451][ T5710] usb 1-1: config 0 descriptor?? [ 142.391719][ T5710] usb 1-1: selecting invalid altsetting 0 [ 142.435422][ T5695] usb 3-1: USB disconnect, device number 9 [ 142.451948][ T5695] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 142.715920][ T30] audit: type=1400 audit(1786460126.502:414): avc: denied { ioctl } for pid=6768 comm="syz.4.221" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.772040][ T6769] nvmet: adding nsid 1 to subsystem testnqn [ 142.796817][ T5688] lo speed is unknown, defaulting to 1000 [ 142.804610][ T30] audit: type=1400 audit(1786460126.532:415): avc: denied { set_context_mgr } for pid=6768 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 142.827870][ T6759] infiniband syz1: set down [ 142.835955][ T6759] infiniband syz1: added lo [ 142.845341][ T6759] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 142.849485][ T6759] infiniband syz1: Couldn't open port 1 [ 142.863857][ T30] audit: type=1400 audit(1786460126.552:416): avc: denied { mounton } for pid=6768 comm="syz.4.221" path="/41/config" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.886676][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.894955][ T6759] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 142.911931][ T6759] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 142.929395][ T6759] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 143.064260][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 143.070064][ T29] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 143.180471][ T6759] RDS/IB: syz1: added [ 143.185125][ T6759] smc: adding ib device syz1 with port count 1 [ 143.191611][ T6759] smc: ib device syz1 port 1 has no pnetid [ 143.202028][ T5688] lo speed is unknown, defaulting to 1000 [ 143.208213][ T29] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 143.227976][ T29] usb 2-1: config 0 has no interface number 0 [ 143.247191][ T6759] lo speed is unknown, defaulting to 1000 [ 143.386073][ T6777] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 143.672865][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.689637][ T29] usb 2-1: Product: syz [ 143.694554][ T29] usb 2-1: Manufacturer: syz [ 143.699217][ T29] usb 2-1: SerialNumber: syz [ 143.706556][ T29] usb 2-1: config 0 descriptor?? [ 143.712310][ T6772] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.713952][ T29] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 143.884277][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 143.884294][ T30] audit: type=1400 audit(1786460127.672:427): avc: denied { associate } for pid=6778 comm="syz.2.224" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 143.983074][ T29] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.014246][ T30] audit: type=1400 audit(1786460127.792:428): avc: denied { name_bind } for pid=6778 comm="syz.2.224" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 144.109438][ T30] audit: type=1400 audit(1786460127.792:429): avc: denied { node_bind } for pid=6778 comm="syz.2.224" saddr=172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 144.187449][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 144.214387][ T5710] usb 1-1: USB disconnect, device number 10 [ 144.225442][ T29] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.328588][ T6759] lo speed is unknown, defaulting to 1000 [ 144.350012][ T30] audit: type=1400 audit(1786460128.142:430): avc: denied { mount } for pid=6785 comm="syz.2.226" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 144.397294][ T6765] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 144.446623][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.447017][ T5695] usb 2-1: USB disconnect, device number 6 [ 144.504012][ T5695] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.532993][ T5695] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.555845][ T5695] quatech2 2-1:0.51: device disconnected [ 144.566256][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 144.591325][ T6792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28784 sclass=netlink_route_socket pid=6792 comm=syz.0.228 [ 144.607820][ T30] audit: type=1400 audit(1786460128.402:431): avc: denied { getopt } for pid=6791 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.851150][ T6759] lo speed is unknown, defaulting to 1000 [ 144.925472][ T30] audit: type=1400 audit(1786460128.712:432): avc: denied { create } for pid=6804 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 144.971758][ T30] audit: type=1400 audit(1786460128.742:433): avc: denied { map } for pid=6804 comm="syz.0.233" path="socket:[11689]" dev="sockfs" ino=11689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.029587][ T30] audit: type=1400 audit(1786460128.742:434): avc: denied { read } for pid=6804 comm="syz.0.233" path="socket:[11689]" dev="sockfs" ino=11689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.068028][ T30] audit: type=1400 audit(1786460128.812:435): avc: denied { read write } for pid=6806 comm="syz.4.234" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.112476][ T5695] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 145.144955][ T30] audit: type=1400 audit(1786460128.812:436): avc: denied { open } for pid=6806 comm="syz.4.234" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.307334][ T5695] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.318946][ T6759] lo speed is unknown, defaulting to 1000 [ 145.508859][ T6814] wlan0 speed is unknown, defaulting to 1000 [ 146.669790][ T6817] fido_id[6817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.882579][ T6814] lo speed is unknown, defaulting to 1000 [ 146.974817][ T981] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 147.068557][ T6759] lo speed is unknown, defaulting to 1000 [ 147.244918][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.257887][ T981] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.270298][ T981] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 147.282162][ T981] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.292477][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.506457][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.530853][ T981] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.551058][ T981] usb 2-1: Product: syz [ 147.558097][ T981] usb 2-1: Manufacturer: syz [ 147.571224][ T981] usb 2-1: SerialNumber: syz [ 147.584271][ T5695] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 147.588162][ T981] usb 2-1: config 0 descriptor?? [ 147.611741][ T981] usb 2-1: selecting invalid altsetting 0 [ 147.717522][ T29] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 147.736332][ T29] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 147.750480][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.769997][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.784827][ T5695] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 147.801555][ T29] usb 1-1: Product: syz [ 147.816318][ T5695] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.834958][ T5695] usb 3-1: config 0 has no interface number 0 [ 147.856789][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.857444][ T6841] jffs2: notice: (6841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.882660][ T5695] usb 3-1: Product: syz [ 147.887429][ T6842] FAULT_INJECTION: forcing a failure. [ 147.887429][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.897564][ T29] usb 1-1: Manufacturer: syz [ 147.908650][ T5695] usb 3-1: Manufacturer: syz [ 147.919545][ T29] usb 1-1: SerialNumber: syz [ 147.939580][ T5695] usb 3-1: SerialNumber: syz [ 147.946425][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.4.245 Not tainted syzkaller #0 PREEMPT(full) [ 147.946449][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 147.946459][ T6842] Call Trace: [ 147.946465][ T6842] [ 147.946471][ T6842] dump_stack_lvl+0x100/0x190 [ 147.946497][ T6842] should_fail_ex.cold+0x5/0xa [ 147.946519][ T6842] strncpy_from_user+0x3b/0x2d0 [ 147.946546][ T6842] do_getname+0x78/0x390 [ 147.946574][ T6842] __x64_sys_symlink+0x57/0xb0 [ 147.946596][ T6842] do_syscall_64+0x115/0x870 [ 147.946620][ T6842] ? clear_bhb_loop+0x70/0xc0 [ 147.946642][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.946659][ T6842] RIP: 0033:0x7f875d39e0d9 [ 147.946674][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.946691][ T6842] RSP: 002b:00007f875e1a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 147.946709][ T6842] RAX: ffffffffffffffda RBX: 00007f875d626090 RCX: 00007f875d39e0d9 [ 147.946721][ T6842] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 147.946732][ T6842] RBP: 00007f875e1a3090 R08: 0000000000000000 R09: 0000000000000000 [ 147.946743][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.946753][ T6842] R13: 00007f875d626128 R14: 00007f875d626090 R15: 00007ffdfd5c5da8 [ 147.946778][ T6842] [ 148.101168][ T29] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 148.110297][ T5695] usb 3-1: config 0 descriptor?? [ 148.166704][ T29] usb 1-1: USB disconnect, device number 11 [ 148.319308][ T5695] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 148.356409][ T5695] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.385732][ T5695] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 148.413945][ T5695] usb 3-1: media controller created [ 148.447436][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.450112][ T6847] input: syz1 as /devices/virtual/input/input9 [ 148.523398][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.535756][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.601502][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.611279][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.676641][ T5732] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 148.834700][ T5732] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 148.846863][ T5695] usb 3-1: USB disconnect, device number 10 [ 148.849381][ T5732] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.869658][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.891396][ T5732] usb 4-1: config 0 has no interface number 0 [ 148.907607][ T5732] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 148.919112][ T6858] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 148.926002][ T5732] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.945113][ T5732] usb 4-1: config 0 interface 2 has no altsetting 0 [ 148.949386][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 148.964616][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.974366][ T5732] usb 4-1: Product: syz [ 148.979735][ T5732] usb 4-1: Manufacturer: syz [ 148.984924][ T5732] usb 4-1: SerialNumber: syz [ 148.996086][ T5732] usb 4-1: config 0 descriptor?? [ 149.006866][ T6849] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 149.021132][ T5732] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.036733][ T5732] usb 4-1: invalid MIDI in EP 0 [ 149.170625][ T5732] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 149.230688][ T5695] usb 4-1: USB disconnect, device number 7 [ 149.268411][ T6689] udevd[6689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 149.377674][ T5723] usb 2-1: USB disconnect, device number 7 [ 149.405999][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 149.454939][ T6860] bond0: entered promiscuous mode [ 149.463864][ T6860] bond_slave_0: entered promiscuous mode [ 149.474046][ T6860] bond_slave_1: entered promiscuous mode [ 149.503722][ T6860] batadv0: entered promiscuous mode [ 149.518878][ T6860] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 150.081041][ T6878] 9p: Bad value for 'rfdno' [ 150.184230][ T5710] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 150.204427][ T6874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.263428][ T6875] wlan0 speed is unknown, defaulting to 1000 [ 150.276412][ T6875] lo speed is unknown, defaulting to 1000 [ 150.348887][ T5710] usb 3-1: not running at top speed; connect to a high speed hub [ 150.364386][ T5710] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 150.375547][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.401909][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.416928][ T5710] usb 3-1: Product: syz [ 150.430958][ T5710] usb 3-1: Manufacturer: syz [ 150.444176][ T5710] usb 3-1: SerialNumber: syz [ 150.466551][ T5710] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 150.483485][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 150.503156][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 150.519107][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 150.535868][ T5710] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 150.549808][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 150.565879][ T5710] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 150.582556][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 150.584203][ T6882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6882 comm=syz.0.257 [ 150.596291][ T5710] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 150.637211][ T5710] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 150.680944][ T5710] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 150.953805][ T5710] usb 3-1: USB disconnect, device number 11 [ 151.006210][ T5710] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 151.037786][ T5710] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 151.093079][ T5710] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 151.191182][ T5710] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 151.244475][ T5710] keyspan 3-1:1.0: device disconnected [ 151.626133][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 151.626147][ T30] audit: type=1400 audit(1786460135.422:443): avc: denied { write } for pid=6898 comm="syz.2.262" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.724256][ T30] audit: type=1400 audit(1786460135.422:444): avc: denied { ioctl } for pid=6898 comm="syz.2.262" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 151.795018][ T30] audit: type=1400 audit(1786460135.552:445): avc: denied { create } for pid=6893 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.820926][ T30] audit: type=1400 audit(1786460135.552:446): avc: denied { setopt } for pid=6893 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.181021][ T30] audit: type=1400 audit(1786460135.972:447): avc: denied { getopt } for pid=6908 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.221462][ T6917] 9p: Bad value for 'rfdno' [ 152.334542][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.362569][ T6914] wlan0 speed is unknown, defaulting to 1000 [ 152.384232][ T981] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 152.393585][ T6914] lo speed is unknown, defaulting to 1000 [ 152.518357][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.533664][ T29] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 152.554807][ T981] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.566195][ T981] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.589779][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.599458][ T29] usb 5-1: Product: syz [ 152.603773][ T981] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 152.623064][ T29] usb 5-1: Manufacturer: syz [ 152.631126][ T29] usb 5-1: SerialNumber: syz [ 152.640093][ T981] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 152.658835][ T981] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.672899][ T981] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.691515][ T981] usb 1-1: Product: syz [ 152.702946][ T981] usb 1-1: Manufacturer: syz [ 152.717273][ T981] usb 1-1: SerialNumber: syz [ 152.750761][ T981] usb 1-1: config 0 descriptor?? [ 152.777597][ T981] usb 1-1: selecting invalid altsetting 0 [ 152.800832][ T30] audit: type=1400 audit(1786460136.592:448): avc: denied { ioctl } for pid=6924 comm="syz.3.270" path="socket:[12792]" dev="sockfs" ino=12792 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.866520][ T29] option 5-1:4.0: GSM modem (1-port) converter detected [ 152.876548][ T30] audit: type=1400 audit(1786460136.622:449): avc: denied { connect } for pid=6924 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.001630][ T30] audit: type=1400 audit(1786460136.622:450): avc: denied { write } for pid=6924 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.091654][ T29] usb 5-1: USB disconnect, device number 7 [ 153.188747][ T30] audit: type=1400 audit(1786460136.632:451): avc: denied { node_bind } for pid=6924 comm="syz.3.270" saddr=2001::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 153.291261][ T29] option 5-1:4.0: device disconnected [ 153.636391][ T30] audit: type=1400 audit(1786460136.722:452): avc: denied { connect } for pid=6924 comm="syz.3.270" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.464272][ T5782] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.615119][ T6941] o2cb: This node has not been configured. [ 154.622761][ T6941] o2cb: Cluster check failed. Fix errors before retrying. [ 154.628696][ T29] usb 1-1: USB disconnect, device number 12 [ 154.632380][ T6941] (syz.2.276,6941,0):user_dlm_register:674 ERROR: status = -22 [ 154.643624][ T6941] (syz.2.276,6941,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 154.656976][ T5782] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 154.692017][ T5782] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.733919][ T5782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.767393][ T5782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.791042][ T5782] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.813446][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.142554][ T6955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.271198][ T6956] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 155.320968][ T6958] FAULT_INJECTION: forcing a failure. [ 155.320968][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 155.433197][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz.1.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.433230][ T6958] Tainted: [L]=SOFTLOCKUP [ 155.433237][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.433247][ T6958] Call Trace: [ 155.433254][ T6958] [ 155.433261][ T6958] dump_stack_lvl+0x100/0x190 [ 155.433290][ T6958] should_fail_ex.cold+0x5/0xa [ 155.433314][ T6958] should_failslab+0xc2/0x120 [ 155.433338][ T6958] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 155.433362][ T6958] ? __alloc_skb+0x5b7/0x710 [ 155.433383][ T6958] ? __alloc_skb+0x140/0x710 [ 155.433407][ T6958] __alloc_skb+0x140/0x710 [ 155.433427][ T6958] ? __alloc_skb+0x5b7/0x710 [ 155.433447][ T6958] ? __pfx___alloc_skb+0x10/0x10 [ 155.433475][ T6958] netlink_alloc_large_skb+0x69/0x150 [ 155.433497][ T6958] netlink_sendmsg+0x680/0xda0 [ 155.433521][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.433542][ T6958] ? selinux_socket_sendmsg+0x198/0x2f0 [ 155.433574][ T6958] ____sys_sendmsg+0xa4d/0xbe0 [ 155.433600][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.433621][ T6958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.433656][ T6958] ? rcu_is_watching+0x12/0xc0 [ 155.433687][ T6958] ___sys_sendmsg+0x190/0x1e0 [ 155.433707][ T6958] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.433723][ T6958] ? find_held_lock+0x2b/0x80 [ 155.433739][ T6958] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 155.433773][ T6958] ? __rcu_read_unlock+0x26a/0x5e0 [ 155.433812][ T6958] __sys_sendmsg+0x160/0x210 [ 155.433836][ T6958] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.433872][ T6958] do_syscall_64+0x115/0x870 [ 155.433896][ T6958] ? clear_bhb_loop+0x70/0xc0 [ 155.433924][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.433942][ T6958] RIP: 0033:0x7f80f999e0d9 [ 155.433958][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.433974][ T6958] RSP: 002b:00007f80fa7f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.433993][ T6958] RAX: ffffffffffffffda RBX: 00007f80f9c25fa0 RCX: 00007f80f999e0d9 [ 155.434004][ T6958] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 155.434015][ T6958] RBP: 00007f80fa7f4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.434026][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.434036][ T6958] R13: 00007f80f9c26038 R14: 00007f80f9c25fa0 R15: 00007ffd93b11dd8 [ 155.434061][ T6958] [ 155.835072][ T5782] gud 5-1:1.0: Unexpected status OK for failed transfer [ 155.843538][ T5782] gud 5-1:1.0: probe with driver gud failed with error -32 [ 155.867345][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 155.987675][ T6967] gadgetfs: bound to dummy_udc driver [ 156.050783][ T6937] PKCS8: Unsupported PKCS#8 version [ 156.061949][ T5723] usb 5-1: USB disconnect, device number 8 [ 156.114483][ T29] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.154778][ T6967] wlan0 speed is unknown, defaulting to 1000 [ 156.178924][ T6967] lo speed is unknown, defaulting to 1000 [ 156.254255][ T5782] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 156.261987][ C1] gadgetfs: connected [ 156.266369][ T5782] gadgetfs: disconnected [ 156.274340][ T29] usb 1-1: device descriptor read/64, error -71 [ 156.434682][ C1] gadgetfs: connected [ 156.439957][ T5782] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 156.456834][ T5782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 156.485745][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.499541][ C1] gadgetfs: configuration #1 [ 156.534893][ T29] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.674525][ T29] usb 1-1: device descriptor read/64, error -71 [ 156.815153][ T29] usb usb1-port1: attempt power cycle [ 156.984564][ T6981] wlan0 speed is unknown, defaulting to 1000 [ 157.078446][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 157.078462][ T30] audit: type=1400 audit(1786460140.872:457): avc: denied { create } for pid=6976 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.113350][ T30] audit: type=1400 audit(1786460140.902:458): avc: denied { write } for pid=6976 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.155804][ T6981] lo speed is unknown, defaulting to 1000 [ 157.174263][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 157.195877][ T29] usb 1-1: device descriptor read/8, error -71 [ 157.199597][ T6959] gadgetfs: suspended from state 3 [ 157.203345][ T5782] usb 2-1: can't set config #1, error -71 [ 157.215209][ T6959] gadgetfs: disconnected [ 157.255972][ T5782] usb 2-1: USB disconnect, device number 8 [ 157.319698][ T30] audit: type=1400 audit(1786460141.112:459): avc: denied { listen } for pid=6984 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.384879][ T30] audit: type=1400 audit(1786460141.112:460): avc: denied { accept } for pid=6984 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.454828][ T29] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.492509][ T29] usb 1-1: device descriptor read/8, error -71 [ 157.614466][ T29] usb usb1-port1: unable to enumerate USB device [ 157.896830][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 157.982679][ T30] audit: type=1400 audit(1786460141.772:461): avc: denied { read } for pid=6990 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 158.120291][ T6994] FAULT_INJECTION: forcing a failure. [ 158.120291][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 158.137896][ T6994] CPU: 1 UID: 0 PID: 6994 Comm: syz.3.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.137926][ T6994] Tainted: [L]=SOFTLOCKUP [ 158.137932][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.137942][ T6994] Call Trace: [ 158.137948][ T6994] [ 158.137954][ T6994] dump_stack_lvl+0x100/0x190 [ 158.137977][ T6994] should_fail_ex.cold+0x5/0xa [ 158.137993][ T6994] should_failslab+0xc2/0x120 [ 158.138009][ T6994] __kmalloc_noprof+0xfc/0x820 [ 158.138026][ T6994] ? __pfx_dynamic_dname+0x10/0x10 [ 158.138043][ T6994] ? tomoyo_encode2+0xfb/0x3c0 [ 158.138057][ T6994] tomoyo_encode2+0xfb/0x3c0 [ 158.138069][ T6994] tomoyo_encode+0x29/0x50 [ 158.138079][ T6994] tomoyo_realpath_from_path+0x18c/0x690 [ 158.138094][ T6994] tomoyo_path_number_perm+0x23c/0x580 [ 158.138110][ T6994] ? tomoyo_path_number_perm+0x22e/0x580 [ 158.138127][ T6994] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.138157][ T6994] ? find_held_lock+0x2b/0x80 [ 158.138168][ T6994] ? __fget_files+0x215/0x3d0 [ 158.138179][ T6994] ? hook_file_ioctl_common+0x140/0x440 [ 158.138191][ T6994] ? __fget_files+0x215/0x3d0 [ 158.138205][ T6994] ? __fget_files+0x21f/0x3d0 [ 158.138219][ T6994] security_file_ioctl+0xd3/0x230 [ 158.138237][ T6994] __x64_sys_ioctl+0xb7/0x210 [ 158.138256][ T6994] do_syscall_64+0x115/0x870 [ 158.138271][ T6994] ? clear_bhb_loop+0x70/0xc0 [ 158.138285][ T6994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.138297][ T6994] RIP: 0033:0x7fdb9279e0d9 [ 158.138306][ T6994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.138318][ T6994] RSP: 002b:00007fdb93601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.138330][ T6994] RAX: ffffffffffffffda RBX: 00007fdb92a25fa0 RCX: 00007fdb9279e0d9 [ 158.138337][ T6994] RDX: 0000200000001040 RSI: 0000000000008916 RDI: 0000000000000003 [ 158.138343][ T6994] RBP: 00007fdb93601090 R08: 0000000000000000 R09: 0000000000000000 [ 158.138350][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.138356][ T6994] R13: 00007fdb92a26038 R14: 00007fdb92a25fa0 R15: 00007ffc7ef93438 [ 158.138370][ T6994] [ 158.138380][ T6994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.511904][ T7002] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 158.521338][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 158.649943][ T7006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.024712][ T30] audit: type=1400 audit(1786460142.812:462): avc: denied { read } for pid=7010 comm="syz.3.295" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.249662][ T30] audit: type=1400 audit(1786460142.812:463): avc: denied { open } for pid=7010 comm="syz.3.295" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.751160][ T30] audit: type=1400 audit(1786460142.842:464): avc: denied { ioctl } for pid=7010 comm="syz.3.295" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.399710][ T7035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.208283][ T7040] FAULT_INJECTION: forcing a failure. [ 161.208283][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.221720][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.4.305 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.221747][ T7040] Tainted: [L]=SOFTLOCKUP [ 161.221754][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.221764][ T7040] Call Trace: [ 161.221770][ T7040] [ 161.221776][ T7040] dump_stack_lvl+0x100/0x190 [ 161.221803][ T7040] should_fail_ex.cold+0x5/0xa [ 161.221824][ T7040] _copy_from_iter+0x1f4/0x1690 [ 161.221853][ T7040] ? __pfx__copy_from_iter+0x10/0x10 [ 161.221876][ T7040] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 161.221906][ T7040] copy_page_from_iter+0x238/0x300 [ 161.221932][ T7040] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 161.221960][ T7040] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 161.221978][ T7040] ? unwind_get_return_address+0x59/0xa0 [ 161.221997][ T7040] ? arch_stack_walk+0xa6/0xf0 [ 161.222028][ T7040] ? _kstrtoull+0x13c/0x1f0 [ 161.222045][ T7040] ? __pfx__kstrtoull+0x10/0x10 [ 161.222064][ T7040] tun_get_user+0x16d6/0x3c20 [ 161.222093][ T7040] ? __pfx_tun_get_user+0x10/0x10 [ 161.222113][ T7040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 161.222146][ T7040] ? find_held_lock+0x2b/0x80 [ 161.222163][ T7040] ? tun_get+0x191/0x370 [ 161.222178][ T7040] ? tun_get+0x191/0x370 [ 161.222200][ T7040] tun_chr_write_iter+0xdc/0x200 [ 161.222221][ T7040] vfs_write+0x6ac/0x1050 [ 161.222239][ T7040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 161.222260][ T7040] ? __pfx_vfs_write+0x10/0x10 [ 161.222274][ T7040] ? find_held_lock+0x2b/0x80 [ 161.222306][ T7040] ksys_write+0x12a/0x250 [ 161.222375][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 161.222399][ T7040] do_syscall_64+0x115/0x870 [ 161.222423][ T7040] ? clear_bhb_loop+0x70/0xc0 [ 161.222444][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.222461][ T7040] RIP: 0033:0x7f875d35e90e [ 161.222476][ T7040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.222492][ T7040] RSP: 002b:00007f875e1c3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.222510][ T7040] RAX: ffffffffffffffda RBX: 00007f875e1c46c0 RCX: 00007f875d35e90e [ 161.222521][ T7040] RDX: 000000000000002a RSI: 0000200000000bc0 RDI: 00000000000000c8 [ 161.222532][ T7040] RBP: 00007f875e1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.222542][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.222552][ T7040] R13: 00007f875d626038 R14: 00007f875d625fa0 R15: 00007ffdfd5c5da8 [ 161.222576][ T7040] [ 161.516357][ T7042] Illegal XDP return value 7042 on prog (id 63) dev syz_tun, expect packet loss! [ 161.550855][ T7044] syz.4.307 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.874795][ T30] audit: type=1400 audit(1786460145.662:465): avc: denied { read } for pid=7047 comm="syz.2.308" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 161.960605][ T7053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 162.053017][ T30] audit: type=1400 audit(1786460145.702:466): avc: denied { open } for pid=7047 comm="syz.2.308" path="/70/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 162.785380][ T7059] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 162.886114][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 163.008668][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.307'. [ 163.237410][ T7064] gadgetfs: bound to dummy_udc driver [ 163.284195][ T5782] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.441318][ T5782] usb 4-1: Using ep0 maxpacket: 8 [ 163.454934][ T7064] wlan0 speed is unknown, defaulting to 1000 [ 163.473158][ T5782] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 163.484213][ T5710] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 163.492125][ C0] gadgetfs: connected [ 163.496317][ T5710] gadgetfs: disconnected [ 163.519479][ T7064] lo speed is unknown, defaulting to 1000 [ 163.527107][ T5782] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 163.544263][ T5782] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 163.606714][ T5782] usb 4-1: config 3 has no interface number 0 [ 163.654803][ C0] gadgetfs: connected [ 163.659692][ T5710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 163.669996][ T5782] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.696684][ T5710] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 163.724275][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.765953][ C0] gadgetfs: configuration #1 [ 163.786714][ T5782] usb 4-1: config 3 interface 45 has no altsetting 0 [ 163.817918][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.862177][ T5782] usb 4-1: Product: syz [ 163.882774][ T5782] usb 4-1: Manufacturer: syz [ 163.896410][ T5782] usb 4-1: SerialNumber: syz [ 163.962523][ T30] audit: type=1400 audit(1786460147.752:467): avc: denied { write } for pid=7068 comm="syz.4.314" name="functions" dev="configfs" ino=8985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.446364][ T7072] ================================================================== [ 164.454452][ T7072] BUG: KASAN: slab-use-after-free in netdev_nl_queue_fill_one+0xf97/0x11f0 [ 164.463050][ T7072] Read of size 4 at addr ffff88802661f18c by task syz.0.315/7072 [ 164.470744][ T7072] [ 164.473062][ T7072] CPU: 0 UID: 60928 PID: 7072 Comm: syz.0.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.473080][ T7072] Tainted: [L]=SOFTLOCKUP [ 164.473084][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.473093][ T7072] Call Trace: [ 164.473097][ T7072] [ 164.473102][ T7072] dump_stack_lvl+0x100/0x190 [ 164.473120][ T7072] print_report+0x13d/0x4b0 [ 164.473138][ T7072] ? __virt_addr_valid+0x239/0x430 [ 164.473154][ T7072] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 164.473170][ T7072] kasan_report+0xdf/0x1c0 [ 164.473186][ T7072] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 164.473204][ T7072] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 164.473222][ T7072] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 164.473238][ T7072] ? find_held_lock+0x2b/0x80 [ 164.473250][ T7072] netdev_nl_queue_dump_one+0x189/0x380 [ 164.473267][ T7072] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 164.473287][ T7072] genl_dumpit+0x125/0x230 [ 164.473300][ T7072] netlink_dump+0x532/0xd00 [ 164.473311][ T7072] ? __pfx_netlink_dump+0x10/0x10 [ 164.473320][ T7072] ? kasan_quarantine_put+0x104/0x240 [ 164.473336][ T7072] ? kfree_skbmem+0x19f/0x210 [ 164.473347][ T7072] netlink_recvmsg+0x7dc/0xa90 [ 164.473357][ T7072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 164.473367][ T7072] ? __fget_files+0x215/0x3d0 [ 164.473380][ T7072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 164.473390][ T7072] sock_recvmsg+0x1d5/0x220 [ 164.473408][ T7072] __sys_recvfrom+0x1f2/0x2f0 [ 164.473420][ T7072] ? __pfx___sys_recvfrom+0x10/0x10 [ 164.473435][ T7072] ? __do_sys_request_key+0x310/0x3c0 [ 164.473451][ T7072] ? xfd_validate_state+0x129/0x190 [ 164.473467][ T7072] __x64_sys_recvfrom+0xe0/0x1c0 [ 164.473480][ T7072] ? do_syscall_64+0x90/0x870 [ 164.473496][ T7072] ? lockdep_hardirqs_on+0x78/0x100 [ 164.473510][ T7072] do_syscall_64+0x115/0x870 [ 164.473525][ T7072] ? clear_bhb_loop+0x70/0xc0 [ 164.473538][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.473549][ T7072] RIP: 0033:0x7fd03295e90e [ 164.473561][ T7072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.473572][ T7072] RSP: 002b:00007fd03382ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 164.473583][ T7072] RAX: ffffffffffffffda RBX: 00007fd0338306c0 RCX: 00007fd03295e90e [ 164.473590][ T7072] RDX: 0000000000001000 RSI: 00007fd03382f000 RDI: 0000000000000004 [ 164.473597][ T7072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.473603][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 164.473609][ T7072] R13: 00007fd03382ef58 R14: 00007fd03382f000 R15: 0000000000000000 [ 164.473619][ T7072] [ 164.473623][ T7072] [ 164.738349][ T7072] Allocated by task 6763: [ 164.742653][ T7072] kasan_save_stack+0x30/0x50 [ 164.747315][ T7072] kasan_save_track+0x14/0x30 [ 164.751980][ T7072] __kasan_kmalloc+0xaa/0xb0 [ 164.756551][ T7072] __kvmalloc_node_noprof+0x34f/0x970 [ 164.761910][ T7072] compute_subprog_args.constprop.0+0x4cc/0x6eb0 [ 164.768218][ T7072] analyze_subprog+0x406/0x31d0 [ 164.773044][ T7072] bpf_compute_subprog_arg_access+0x278/0x14e0 [ 164.779178][ T7072] bpf_compute_live_registers+0x59c/0x1310 [ 164.784962][ T7072] bpf_check+0x697f/0xb7d0 [ 164.789370][ T7072] bpf_prog_load+0x244d/0x2fa0 [ 164.794108][ T7072] __sys_bpf+0x18dc/0x4e80 [ 164.798502][ T7072] __x64_sys_bpf+0xce/0x140 [ 164.802981][ T7072] do_syscall_64+0x115/0x870 [ 164.807567][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.813437][ T7072] [ 164.815747][ T7072] Freed by task 6763: [ 164.819705][ T7072] kasan_save_stack+0x30/0x50 [ 164.824371][ T7072] kasan_save_track+0x14/0x30 [ 164.829034][ T7072] kasan_save_free_info+0x3b/0x70 [ 164.834039][ T7072] __kasan_slab_free+0x5f/0x80 [ 164.838783][ T7072] kfree+0x22b/0x6c0 [ 164.842660][ T7072] compute_subprog_args.constprop.0+0x409d/0x6eb0 [ 164.849053][ T7072] analyze_subprog+0x406/0x31d0 [ 164.853885][ T7072] bpf_compute_subprog_arg_access+0x278/0x14e0 [ 164.860021][ T7072] bpf_compute_live_registers+0x59c/0x1310 [ 164.865813][ T7072] bpf_check+0x697f/0xb7d0 [ 164.870208][ T7072] bpf_prog_load+0x244d/0x2fa0 [ 164.874948][ T7072] __sys_bpf+0x18dc/0x4e80 [ 164.879341][ T7072] __x64_sys_bpf+0xce/0x140 [ 164.883819][ T7072] do_syscall_64+0x115/0x870 [ 164.888392][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.894264][ T7072] [ 164.896565][ T7072] The buggy address belongs to the object at ffff88802661f000 [ 164.896565][ T7072] which belongs to the cache kmalloc-cg-1k of size 1024 [ 164.910869][ T7072] The buggy address is located 396 bytes inside of [ 164.910869][ T7072] freed 1024-byte region [ffff88802661f000, ffff88802661f400) [ 164.924726][ T7072] [ 164.927047][ T7072] The buggy address belongs to the physical page: [ 164.933430][ T7072] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802661e800 pfn:0x26618 [ 164.943467][ T7072] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.951950][ T7072] memcg:ffff8880773b1c01 [ 164.956165][ T7072] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 164.964641][ T7072] page_type: f5(slab) [ 164.968601][ T7072] raw: 00fff00000000240 ffff88813fe2b280 ffffea00012cb210 ffffea0001e7f810 [ 164.977162][ T7072] raw: ffff88802661e800 000000080010000c 00000000f5000000 ffff8880773b1c01 [ 164.985732][ T7072] head: 00fff00000000240 ffff88813fe2b280 ffffea00012cb210 ffffea0001e7f810 [ 164.994381][ T7072] head: ffff88802661e800 000000080010000c 00000000f5000000 ffff8880773b1c01 [ 165.003028][ T7072] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 165.012109][ T7072] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 165.020756][ T7072] page dumped because: kasan: bad access detected [ 165.027143][ T7072] page_owner tracks the page as allocated [ 165.032832][ T7072] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5594, tgid 5594 (syz-executor), ts 66547607559, free_ts 66535648121 [ 165.054169][ T7072] post_alloc_hook+0xfd/0x120 [ 165.058826][ T7072] get_page_from_freelist+0xf48/0x3530 [ 165.064271][ T7072] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 165.070147][ T7072] new_slab+0xa2/0x640 [ 165.074195][ T7072] refill_objects+0xe3/0x410 [ 165.078768][ T7072] __pcs_replace_empty_main+0x376/0x680 [ 165.084289][ T7072] __kmalloc_noprof+0x66d/0x820 [ 165.089132][ T7072] __register_sysctl_table+0xac/0x1650 [ 165.094587][ T7072] neigh_sysctl_register+0x326/0x660 [ 165.100035][ T7072] devinet_sysctl_register+0xb6/0x210 [ 165.105388][ T7072] inetdev_event+0xefb/0x17f0 [ 165.110069][ T7072] notifier_call_chain+0x99/0x3f0 [ 165.115073][ T7072] call_netdevice_notifiers_info+0xbe/0x110 [ 165.120951][ T7072] netif_change_name+0x4d9/0x830 [ 165.125869][ T7072] do_setlink.isra.0+0x31e4/0x3e60 [ 165.130963][ T7072] rtnl_newlink+0x11c2/0x2380 [ 165.135627][ T7072] page last free pid 5594 tgid 5594 stack trace: [ 165.142370][ T7072] __free_frozen_pages+0x79f/0x1090 [ 165.147656][ T7072] qlist_free_all+0x47/0xf0 [ 165.152229][ T7072] kasan_quarantine_reduce+0x1a0/0x1f0 [ 165.157670][ T7072] __kasan_slab_alloc+0x69/0x90 [ 165.162503][ T7072] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 165.168394][ T7072] __alloc_skb+0x140/0x710 [ 165.172800][ T7072] netlink_alloc_large_skb+0x69/0x150 [ 165.178152][ T7072] netlink_sendmsg+0x680/0xda0 [ 165.182908][ T7072] __sys_sendto+0x48b/0x4e0 [ 165.187627][ T7072] __x64_sys_sendto+0xe0/0x1c0 [ 165.192380][ T7072] do_syscall_64+0x115/0x870 [ 165.196957][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.202838][ T7072] [ 165.205163][ T7072] Memory state around the buggy address: [ 165.211157][ T7072] ffff88802661f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.219227][ T7072] ffff88802661f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.227275][ T7072] >ffff88802661f180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.235757][ T7072] ^ [ 165.240272][ T7072] ffff88802661f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.248684][ T7072] ffff88802661f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.256769][ T7072] ================================================================== [ 165.439987][ T30] audit: type=1400 audit(1786460149.182:468): avc: denied { read } for pid=4945 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 165.548009][ T30] audit: type=1400 audit(1786460149.182:469): avc: denied { search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.589071][ T7061] gadgetfs: suspended from state 3 [ 165.607710][ T7061] gadgetfs: disconnected [ 165.617026][ T5710] usb 1-1: can't set config #1, error -71 [ 166.161260][ T5782] usb 4-1: USB disconnect, device number 8 [ 166.166381][ T5710] usb 1-1: USB disconnect, device number 17 [ 166.173385][ T30] audit: type=1400 audit(1786460149.192:470): avc: denied { write search } for pid=4945 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.207166][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.259102][ T7073] netlink: 88 bytes leftover after parsing attributes in process `syz.0.315'. [ 166.268166][ T7072] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.275349][ T7072] CPU: 0 UID: 60928 PID: 7072 Comm: syz.0.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.286471][ T7072] Tainted: [L]=SOFTLOCKUP [ 166.290798][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.300837][ T7072] Call Trace: [ 166.304093][ T7072] [ 166.307001][ T7072] dump_stack_lvl+0x100/0x190 [ 166.311658][ T7072] vpanic+0x552/0x970 [ 166.315625][ T7072] ? __pfx_vpanic+0x10/0x10 [ 166.320102][ T7072] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 166.325921][ T7072] panic+0xd1/0xe0 [ 166.329639][ T7072] ? __pfx_panic+0x10/0x10 [ 166.334054][ T7072] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 166.339843][ T7072] ? preempt_schedule_common+0x42/0xc0 [ 166.345282][ T7072] check_panic_on_warn.cold+0x19/0x34 [ 166.350641][ T7072] end_report.part.0+0x3a/0x90 [ 166.355383][ T7072] kasan_report.cold+0xe/0x18 [ 166.360046][ T7072] ? netdev_nl_queue_fill_one+0xf97/0x11f0 [ 166.365838][ T7072] netdev_nl_queue_fill_one+0xf97/0x11f0 [ 166.371448][ T7072] ? __pfx_netdev_nl_queue_fill_one+0x10/0x10 [ 166.377504][ T7072] ? find_held_lock+0x2b/0x80 [ 166.382168][ T7072] netdev_nl_queue_dump_one+0x189/0x380 [ 166.387699][ T7072] netdev_nl_queue_get_dumpit+0x16c/0x510 [ 166.393409][ T7072] genl_dumpit+0x125/0x230 [ 166.397810][ T7072] netlink_dump+0x532/0xd00 [ 166.402285][ T7072] ? __pfx_netlink_dump+0x10/0x10 [ 166.407289][ T7072] ? kasan_quarantine_put+0x104/0x240 [ 166.412645][ T7072] ? kfree_skbmem+0x19f/0x210 [ 166.417315][ T7072] netlink_recvmsg+0x7dc/0xa90 [ 166.422056][ T7072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 166.427312][ T7072] ? __fget_files+0x215/0x3d0 [ 166.431974][ T7072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 166.437232][ T7072] sock_recvmsg+0x1d5/0x220 [ 166.441720][ T7072] __sys_recvfrom+0x1f2/0x2f0 [ 166.446381][ T7072] ? __pfx___sys_recvfrom+0x10/0x10 [ 166.451555][ T7072] ? __do_sys_request_key+0x310/0x3c0 [ 166.456916][ T7072] ? xfd_validate_state+0x129/0x190 [ 166.462097][ T7072] __x64_sys_recvfrom+0xe0/0x1c0 [ 166.467024][ T7072] ? do_syscall_64+0x90/0x870 [ 166.471698][ T7072] ? lockdep_hardirqs_on+0x78/0x100 [ 166.476881][ T7072] do_syscall_64+0x115/0x870 [ 166.481497][ T7072] ? clear_bhb_loop+0x70/0xc0 [ 166.486178][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.492063][ T7072] RIP: 0033:0x7fd03295e90e [ 166.496467][ T7072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.516053][ T7072] RSP: 002b:00007fd03382ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 166.524447][ T7072] RAX: ffffffffffffffda RBX: 00007fd0338306c0 RCX: 00007fd03295e90e [ 166.532406][ T7072] RDX: 0000000000001000 RSI: 00007fd03382f000 RDI: 0000000000000004 [ 166.540364][ T7072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.548312][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 166.556262][ T7072] R13: 00007fd03382ef58 R14: 00007fd03382f000 R15: 0000000000000000 [ 166.564219][ T7072] [ 166.567443][ T7072] Kernel Offset: disabled [ 166.571739][ T7072] Rebooting in 86400 seconds..