last executing test programs: 1m13.873744744s ago: executing program 3 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) io_uring_setup(0x799c, &(0x7f0000000100)={0x0, 0x2a10, 0x0, 0x0, 0x97}) creat(&(0x7f0000000040)='./file0\x00', 0x51) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x136, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000001003afffe880000000000000000000000400001ff3c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x18010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000540000"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x4007) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4b, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) 1m12.037546134s ago: executing program 3 (id=626): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff830000580065159385e7"], 0x0}, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1m8.41299358s ago: executing program 2 (id=639): shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r1, 0x0, 0x0) 1m8.264589511s ago: executing program 3 (id=640): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00004cb000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008edbb56ce3ff0fa4c1fd009ba216fc838d6de43a471e5220fc9b44cfac53e521f9901da8cb3ae052c6f00d3ec3bfcd4ec4338a2f"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) 1m8.262000109s ago: executing program 4 (id=641): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0xec, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0xd8, 0x1, [@m_ife={0xd4, 0x2, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100, 0x7, 0x7, 0x80000000}, 0x1}}, @TCA_IFE_METALST={0x0, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @val=0x3}, @IFE_META_TCINDEX, @IFE_META_TCINDEX={0x0, 0x5, @val=0x7a4}, @IFE_META_SKBMARK, @IFE_META_PRIO={0x0, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x0, 0x5, @void}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x1}]}]}, {0x82, 0x6, "9bff3a54f3b1469b6ce47ca85448020000002920a281624f4ec1f7b95e77e9a4e3d115707839a04a89d0b848476260fa10aabf7d7baacc1e3a8a9d6355f2ef932ca17beb8399d834e6b811781c71156b7e8c5df63fbfc04b49082df278b3af8f7dc16cec9ab91117bb5db644ba062c7e96059f6296367968bed63901c022"}, {0xfffffda6, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmc_request_done\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000001c0)='sys_exit\x00', r1}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x12, &(0x7f0000000340)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x18000000}, @alu={0x4, 0x1, 0xa, 0x1, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ringbuf_query], &(0x7f0000000580)='GPL\x00', 0x64, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r2, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x10, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x206, 0x2b4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x0, 0x4, 0x1) (async) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 1m7.474174927s ago: executing program 4 (id=642): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f00000003c0)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f00000004c0)='-1\x00', 0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) 1m6.972516354s ago: executing program 0 (id=645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x80, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r3 = socket$inet_sctp(0x2, 0x0, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, r4, 0x701, 0x8, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x24}}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000000c0)={0x60001}, 0x8) shutdown(r6, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000780)={{r6}, "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"}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000780)={{r6}, "f44dc11e08b469e1a9d91ef59e940cbef1c5f8e8aa0be0b58747a18db0ef33458c054223c0d5616c000015df3ac67c8754171cba46595cd388dfd6e8312a73aa349eeff173b87a32eb23c7c1dd4d50cd1be631fdec5531156f4cc67ace763ba901041aec771e5fd49cde92608cc4ca33fb8ca64e993b9c9a404f67b5a5a6f837df286f785eb421a5739458890d33fba5d0878eded3198fc034d3e95967eed4d1baa026d75244a941458af09bc3f15c48ad7c924ff7f16084cb5028593d309cf26301b2208f311348888aa76242fa215ab1429d6cc6afa63184d4481c70a8d170749f406ae1cd5ec7775e1030621e49027a4bb066f2970cf4ff1477f9c526731902209d02a5fe337ed664621c8ead34d9452d47dfec66b4b4a0f5b0a4d74dcd2babd86ec6548a22b89c66dea53c89539e4d06000000000000002b68e954742b6b336c75604694167c4b90fc35292383960f80ce4b9376f8200293a89959b8684d6b520488033965055a5efded9a0db36b74154b5b907264cc2f396060e4b8cbaadc7cc7960eff7bae4a579fd534ddb0f4753523acd85c9f92838a0d0ef6dc14fea25095e3aef45ba19a1641691a1050accea8063b17c61f2a6033b74800695d66ce53c3d3a29cbabd2fb6988bf66c9fbb873ba9b0261952e81834620b0a261f8290a7282937a8690136bda18d261be55b70053795be38d0ea4ea696b453a30509762996e087a64aca1e2e828eb1ce904314fe19dfdcf0875c835a92da37981a9683cf03db1cd67686cc4ab5febd73e640d11c5bc2f9eeb7e5427b374673a1b98de1844cf2f0896286d40bf560d1eab57d4c5e0f7b0352c762c68433ef11d24e77e3d09fd7fffc57a1fa2188462e65765a12643baf93e4efec4cfcebaddccd523f71b6380c31f1de64cc44199b2761401fc1f9370def6bd2038e2040d0ffa888e49365279664538f8ab54a4bea5c46a930e5d34d8138df0acbee619110e056b952b0e8957e5a769abb08f394430dcb9d59f374a25c0e3e36fb0c966c3e32eea47ee3f7b4076447bfc67c71be703f06ccef0a1e86fb43c6689dd52016087cfaeda0fc96dd8ada687a16743e4259a6b0ebb28509788dd1e72b161a4788c0bf4dc0f444c71fa911ef380fe62bbcd4d559f3cbd8203bc98bc207fb5a146626a68ee45adf11873d8f58b62f4452ab9964bca434d992ea3f8afc7d629a4b04bb864504b89ee960b57936d09ec728a0c19c46ac93a52bb08c3eb4b0f897abc56094fb912232812a8f39b69c8b532ba12837306c9f607fa1e24771127690352e6d0f52cc738c37597da205e71d948a566af4833e976562b0bb0d5d74911d5de4a5a2c4941483e95c51ba9de56429eb4e2b1d93c22e68fc4426f0bf43c9f5695379fcd8757ad6ba0bb15b89ed8152ac6ba01ce2e31ab406a38c6304da42508a7fb44c54046e3f9f0234f09f6802b3168a3119cca7bb4803d2f450f992da492c8743c30417ba0648dd1a298ca45acdb3d27f2c5e09482fee7745c263d85c444937c7fbf4db8373004a7372f4c43eb8fba28c428cea555f17a74575604205d6da07ff3c69c61b5d6f7271e5d5c69c901ddab589168819b6b7c93ca5019354f95902d85ab7dc3063a806cc62b43b7d424ca982d47a3c623f8e43247ef19bde068a7115caf1be4d24ac71916caaf8e78186950058c5d018d19cb25dcf6a68ada1c779683d43fb21680539b0b765fe6fb3a6a4120b191ea779be98ef35a98a316015992bf970d333e5a1087517ce240f0e0e057ada3cf837730dc8fa1c2d8d7ba2937d6b48a4c7767fdc9d08e0f28e8f8d9c74dbfbf684e9428d203a14fa6a576444276a87d31f57a3de812c6bebb59acddd70940e615d0b2ea9a5ec596087b1f139f1056ed1dded3fe4f5dc8d812a55c202b977cdc7e4e6a2f9fe8d3ada91995ecf041e872f2ce6ec3ca181aeef76b7441833aeaf281c4c25d6fd445911ece1e319dd9a024a0acde0d660da2cde117a7fb52ed7314d83b4509f71928f69b09591a8735011b9d41b74c6cbd37c3420e031b124d6d26e2597e00fecfc8dea0c923386411b455d7d6e0231522c94a0092fd6428916aeead6a04c18917764685d951a7807390e9c3c5129a34ed2a6d234dd5d013dd05b661033b386844fe72a45b4453c7c14cda7af856fcd8a6b00044b2105f8fe72ef873b2dd82f97aa655484aced724117a0900b07d29fdedbd8f95e9442b27045fe49018754e80471ecaeb5aa0421566c6c84db33c6395a007546e1da5d5dda0de751eb91f4e37158e067c47adf42b606cbd1362385a42eec2ca2dd45b0e8011deb2eea75e9be31f27a40cabfe3cb5cf7b2c6e2229502f126d0fd6bb994b6980af80c923abb581b233e043055c3b67d29cc0dd1f6b59a12e38654a769913435b5dcfb0e34331b0c4034bf39f7ba39b16040988a83075280d1d154879db00e3bcb32ce763426cc6ef82e27f40289d81ae3cd8b1a394953e5f32ca0e5a0e2c3fbdbb34bff7bdf6cc8ccc442b13b68cf1608c11ab434e02417f0f9df12c63ada3dd4da9dc08122212b5ad569b2ede87f613bb5eba8a43212df4f0f64c3375392854c31bf3884c66b8e1485632bbfa9dbdd6ab5d27de7285c5d1b4010bec3b8099b31a865bc4f408e34772e02c2836ddbc923b2afc86b6d91eb514b6ff65217541db2fc50ba78b1a6df43e697fa418ad85388f00b868e536beb9ddd2fdb989d535f6b580fd111cc3aee4b8757af5df386bb07dbd6f9d11eb035a9a4695af2577c2d4af0b0f374f0b1284dbe18ee05389552bce408e2fa71d49cba30aa767d0feee760895ce4af5a0496d9e3bd356bb68da83e153c9b560a86a79bd73fa173b8b7b04c3150406ad8bbe6745cdc35774956130c9588667342aa404500e422e3ed8ca5e876e6b19443cc21a5db0572454d7cf58231570cc2b3744ebffadf98883071950f258b8cf5bdc38a44b86df9ddb05bcb93e96d106128143e35e6b94188c1e7ac39d0c606306dacab454685c40300341e68d858eb2b1dcafa357c7a24c87c6c4db8aaeedca19b053c51a6cf1ce4c4586bbe4208578d179082b83d452b3cf4fb1d51d2f292da7657ddd74c92d9dfb9f4bfccef3442984a263b649269320dbace94a359c768edb49009161069e439340e83f91b26d479181f9d55f09c5e9fed39b23eeacf7dccb9a3c717fbfb6a5a486ce599276b7f79b24b2b66d74e77ca214f97a14aa77757af26a9e6a00795652a35e07c5a0346f505eb9f6cc90345c7ab7e0bf008a3bd998e4feb74043adbdc1c9eece581016ab8e6c49ef2f962a3225388472750a88c328e216d7ce7eee122614b55629a40c5d549a2b6b7e49d0ddca1ac377fdee8e9f0cef0e0027798f4a958d8ef6d5384fae655859da525584cffdd3d09f80698d90d4d4825d09e2e680c47dda702a353920fb47b544bb56a06707649a59c7d7a8c1ef9a6a5071b6805d518d265d3244fd9bb36d4731de70a5692e955256832ab8383267f9e6a6754eda0e883f246522133d67fa0e2558507bbfb8e52c08049d69f861ff86284eceadde87741c2a349705ed137a440a546d69308ada7d73ea9f97c4bb4a196b2be87ac6a50dd57737744799608e4cf4e4ffafaede2587fd12d4d7737a72d385d85b7097e5cfe3af0f8ea9e2e6e2b0a1c1f7ab7ebca04fe754266b0c4bd7d9e81b02fcd5ab0fbc75d64ecff97b835bd44bc886299d9119787b3dbaa9e902f1713931a155732b5b8cc08455b2b9b0e36e1e7997be135fdc1665405183eb3762a78ab979e997bd3c03b4f125b8c829b081faf37b7987edcedcd8e304850d23ebf0cb8af48b7cb42dbb53237dc8cc15cf1c6bcc40c36992a7f4667e219baa2ac0e57c707bdfec01dd7a14d21b41ae48b1c690c363c9c352fc3cedbbbf18824a2eb8054f9110288a164b716a1b09fc91826d2e495929495dc4ad528147c8c3820b64cfc6d74c672ec91c772ef06281bf1946739e581b03bdf322e2611fae0b733342efb65519bf801c78f56458228fae357f6b80f3d25c076b657d13642051789d40058b09e26e1c1df6310e8e476d027f9efaa489d1204db43aebe621b5d4b52ed9dcfba8df18afad0b08a309ce116d9e2c1d53ea5c170c5dfea7a87833a1cc276978022e34267bfbeff03516824db4ebaf121c3fb11e3dc44eaaeef18ef0e905918e3d33f880e540592f289f6a4aac68be96302c1bc76f37faaa613395324b606499eac3260bb9411d5cc04873e13eeabeb95d1ffc3979a2b24e97339e3494d986447b439e0f0c73e77492f07a6f22b1262caf9968f7d15bf5d5ebba9cc08ceed3fa44969b7e46e9781a99c3264968eb39fa122d6a672f66fb84610596e7d08917dea2b2cd4d16fb6b1ce086780e7732ec281bce59a729887e788b8c96f12d8cbce377ab287961e47edfc12db89dcab9282a82fee471f5d0d9405a69aa2fd7c924acd01bb14567e724b928db16b57453fcfe54e8cbb3f013178ddc28d21981f583ec0102e9eab0ef44e1585a3a2b5d3ae419c7e9825a818837b7ca1d31953a9a86aede9205ffde274fd1f6b34d5777129332a7b5af263b8f396c10a9c89bfbf1dbe9f1cceca02d21f1ab8dcf520ed9f973b4760128765d4d3c44bf77d33d6b18827bf560c4fd6f226aec0f292a08900e517413581c710381711b6093bc0553be3dea4a887a01d58caf1953a476a29f995aa04b18003e164b5fe63c356d510a5e67ba75f2197c34997bdd9fb2b3efa9a729db327c86103943d916dc0918b22d3f482bc92bf6d3cd64f9e893958938739aab064ca0e4863e0f37002789e13aa92f88ff01cf66033b0257f830ccfb69391e3cb304eb1f7f489ac985d8c6e689e8c743a3537ea84bc069187bd5feb8804f016104efd36ee146166c584588abb2c8ad406f13aa479e6887b93636017a3404d9952b28bfb253b419132603bc97f2765fef8edb86ce4ed34697dc65debb363a181f3fc44dd3f8fe1bc9aa23c1611e36337185d2aa2794624d3d615b41b598190a3a9ebba67f02c1bdcd59ed8e1a030e319c9ea81bd8f1c16ca0a9bacaee686e12446e06664fe949d037004ce8d6b202f43345637113b98f3398103eb0269c3bc917c4ca623b831ef6d8130ca4e748b92feba51ec08b829420c87c0746684b73535be7b52213c82fb34ad593205606275794ff9cd82f3b6fa619d0c35dc35a25e329ab1c6c26856a2686c90dd7a4dbf250ecef75c238366aa3b7aa1c40c55dccc4ef6f71ad25c0244ee193f86cefe60d0be4e8a0184cc0d5c4f62d75fe16666be0d7c36df81c4d7f41c813afe031420d39866536ea052a3ae8c23c011a621c56635e4477973ace61eac4640547e84d2bbe041042be2884d832fd21f45decce592a4d396f64f4b92c99f5078e9cd6f032afb91930c1a65d3a019fc41d2ad59125a164344457421480fac8c1537366da6a49fc362af3066d0b3b7bb4cf9ef7a0ab86b8a9469be760f6bb78479811ed91b4be450d258f6faab589d2d73c26ad87571a940efd3b418f14154c290fc34bcbf9a13da6603f33f954cedc9e8a19c2f5af71f7d007ad164576cf9c561620aedda88d9d9f9d35e86b2ee604267bb1b74e731c2c1f6bfbd2618a43ca83a33502f29d04f0b88b6880e326ce37752981a56380a8023199949e7ac01cc52db76738cf95e4efd992c40b574fc73a08d09b497a5049ec8b5056694db5047e9b02e7a45ad3aa16b1b32fe2fb377a569a62cdc8275e9cb2e3e3a19f7eab449b42aa9010b56b9999600"}) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000140)=""/11) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffffffb}, 0x8) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x604000000000000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1m6.855719603s ago: executing program 0 (id=647): openat$autofs(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%/,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 1m5.930329604s ago: executing program 0 (id=648): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3", "ff782c"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10000120}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m4.839298803s ago: executing program 0 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203030902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x40000000015, 0x805, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000", 0x24) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r13, 0x21eae}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00004600", @ANYRES16=r1, @ANYBLOB="070004000000000000000500000060000380080004000000200008000200200000004c0003803c0001800c00020073797a5f74756e00130002002f6465762f76686f73742d6e6574000005000200000000000800010005000000070002003a2700000c0001800500020000000000180001801400020073797a5f74756e000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1m4.832817767s ago: executing program 3 (id=651): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff830000580065159385e7"], 0x0}, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1m4.783595794s ago: executing program 2 (id=652): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0xffffffff, 0xe635, 0x32314d4e, 0x0, 0x0, [{}, {0xffffffff, 0x1}, {0x4}, {}, {0x0, 0x4}, {}, {0x10, 0xffffffff}, {0x0, 0x3fffd}], 0x4e}}) 1m4.361193488s ago: executing program 2 (id=653): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', r6, @fallback=0x35, r0, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0xb4256a1, 0x4}, 0x10, 0x0, r2, 0x0, &(0x7f0000000400)=[r2, r0, r2], 0x0, 0x10, 0x7fffffff}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r1, 0x0) 1m4.037272971s ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getrlimit(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0xa02a9823b9e5a4a0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m3.512802574s ago: executing program 2 (id=656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf251400000038000780090003"], 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x48890) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x3000, 0x4) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @local}], 0x3c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f000000b308405af30b000000000b6f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)) 1m3.044815725s ago: executing program 4 (id=659): syz_emit_ethernet(0xffffffffffffff37, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x0, 0x4, 0x2, 0x10, 0x0, 0x64, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_addr={0x44, 0x0, 0x2c, 0x1, 0x1, [{@private=0xa010101, 0x7}, {@private, 0x1}, {@broadcast, 0xb}, {@loopback, 0x6}, {@empty, 0xfffffff7}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [], "b33b836b68787c48"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "cc2ddb097b74bf8f9126774fd1f498b2b8a1baadca3e438e3ce7e00a8347fd486504c1350ff27f0faf843c3b90c47c8abe4665a0f8382020b63d7a2578c31dff8e80d47f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x67, 0x0, 0x6], "94306575ab55ebaca7a1a68afaf47a39240bc6edb4c5c7b2f8a93e1419082f858bc2004bc53c36e9f60c9460cededc254860470b3210f7f4a5a811741c0428e7d590b8b6f25e4efaee8362d109051931709a4a3a770c7f70d6249043391762bcf6f1e248d8993c2bf8367146671f98e9f1314cbc626d18894dd2d0c5f9b734a1e4bb76d9cdd3cd50528dc38ca01c7cc1dcf6c890060faa2c"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x7}, 0x1, {0xff}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x25, 0x2, 0x0, 0x3, 0x0, 0x7}, 0x2, {0x3, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "0b25d47bf3365c6c0c7107d76b1029b93cdcc175fbbfab41efe9e2f3b1b79d062c87e00134e92d9521262d812f26ba9731b2aa39775117aa2383fa80951b4c2904acb290e12426d44005c24f157232dd98cf810476a0acb7b0c786e0f9a765f57df6362b1b2dc12e287ffedbe0ef2aaa71e6a09c49d6714d6771242827f2b4df37a21e955af57e8878599d7a59b7314fde8ed22dba7a6c13f50fd619dd12cc2b04025392e7b1af6b3c90407d83ae5db4393a2ad8dc74c5732dd795ac3bcdbab13d8c04c7c705c0d5d435ee326732ed8821d5a762fe79cf617e8c"}}}}}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 1m2.323669667s ago: executing program 1 (id=660): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3", "ff782c"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10000120}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m1.728200565s ago: executing program 4 (id=661): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3", "ff782c"}}}}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x10000120}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m1.246657576s ago: executing program 0 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) sendto$packet(r0, 0x0, 0xfffffe2f, 0x24048001, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x2, 0x6, @random="639f5f73686c"}, 0x14) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) 1m1.243748925s ago: executing program 1 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, 0x0) sendto$packet(r0, 0x0, 0xfffffe2f, 0x24048001, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x2, 0x6, @random="639f5f73686c"}, 0x14) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fdatasync(0xffffffffffffffff) getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) 1m0.420914132s ago: executing program 1 (id=664): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000080)=0xfffffffffffffdab) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@local, 0x91a}) r2 = bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fallocate(r2, 0x15, 0x0, 0x4) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchmodat(r5, &(0x7f0000000000)='.\x00', 0xe0) openat2(r4, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/231, 0xe7}], 0x1) 1m0.344052861s ago: executing program 2 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089be, 0x1, 0x5, 0x248}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 59.621822448s ago: executing program 1 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000000)=ANY=[@ANYRES64=r6], 0x119) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2, 0x0, 0x9b}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syncfs(r4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) getsockopt$MRT6(r2, 0x29, 0xd0, &(0x7f0000000080), &(0x7f0000000340)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0xfffc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 59.575980126s ago: executing program 3 (id=667): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010011010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 59.542154471s ago: executing program 0 (id=668): socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000080)=0x8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00890016", @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 59.491773767s ago: executing program 1 (id=669): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000202020014000200776732000000000000000000000000000900010073"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 59.337125693s ago: executing program 4 (id=670): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20041, 0x101) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0xf, 0x4, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfc, 0x2, 0x5, 0xfe, 0x0, 0x0, 0x9, 0x0, [0x0, 0x3ff]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = dup(r0) listen(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x200008, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) 59.326372179s ago: executing program 1 (id=671): openat$autofs(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%/,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 59.224559877s ago: executing program 3 (id=672): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000001340)=ANY=[@ANYBLOB="0200000000000000030000000300000001000000000000000600df0d01113cdd0c06000000000000000000000000000000e800000000000082000000020000000100000000000000f1af00000000ffffffff0000000000008602000000000000001000000100008036dd56b961bf25a0f93fe44c406f8212794e68e2353c1535e1f168cadbed14559593b2e8ca801516f438f9442132e2f442a2b3fdf5cb5ea5"]) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) fcntl$dupfd(r2, 0x0, r2) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x92}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000012c0)=@newtaction={0x7c, 0x30, 0x25, 0x0, 0x0, {}, [{0x68, 0x1, [@m_xt={0x64, 0x10, 0x0, 0x0, {{0x7}, {0x4}, {0x3b, 0x6, "e667644fefb9602f946267a47be0b84a22fccd9a5ff65d17816001d9af21811c64214c175d428d164687c046955698bc85216670e574ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r6 = msgget(0x0, 0x40) msgctl$MSG_INFO(r6, 0xc, &(0x7f00000000c0)=""/173) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000200)=ANY=[], 0x118) 58.252499704s ago: executing program 4 (id=673): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8805) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) waitid(0x0, r0, &(0x7f0000000140), 0x4, &(0x7f00000003c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x400000000}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "cf3ea0", 0x8, 0x3c, 0x0, @private2, @mcast2, {[@routing={0x2f, 0x0, 0x1, 0x3}]}}}}}, 0x0) 0s ago: executing program 32 (id=668): socket$netlink(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000080)=0x8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00890016", @ANYRES16=r7, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): ot:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.422080][ T30] audit: type=1400 audit(2000000054.040:354): avc: denied { link } for pid=6704 comm="syz.2.191" name="#13" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.447485][ T30] audit: type=1400 audit(2000000054.040:355): avc: denied { rename } for pid=6704 comm="syz.2.191" name="#14" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.565410][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 127.573565][ T5170] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.712782][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 127.721677][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 128.142032][ T30] audit: type=1400 audit(2000000054.860:356): avc: denied { bind } for pid=6715 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 128.271157][ T6717] delete_channel: no stack [ 128.515429][ T5908] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 128.663280][ T5908] usb 2-1: device descriptor read/64, error -71 [ 129.073230][ T5908] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 129.693256][ T5908] usb 2-1: device descriptor read/64, error -71 [ 129.843969][ T5908] usb usb2-port1: attempt power cycle [ 130.593288][ T5908] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 130.624241][ T5908] usb 2-1: device descriptor read/8, error -71 [ 130.640389][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 130.640403][ T30] audit: type=1400 audit(2000000057.360:361): avc: denied { rename } for pid=6741 comm="syz.2.203" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 130.669276][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.924702][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 130.933571][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 130.948317][ T5908] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 130.985031][ T5908] usb 2-1: device descriptor read/8, error -71 [ 131.095527][ T5908] usb usb2-port1: unable to enumerate USB device [ 131.235815][ T30] audit: type=1400 audit(2000000057.950:362): avc: denied { read write } for pid=6748 comm="syz.0.205" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.290135][ T1012] Bluetooth: Error in BCSP hdr checksum [ 131.410584][ T30] audit: type=1400 audit(2000000057.950:363): avc: denied { open } for pid=6748 comm="syz.0.205" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.433606][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.593891][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 131.626377][ T30] audit: type=1400 audit(2000000057.950:364): avc: denied { ioctl } for pid=6748 comm="syz.0.205" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.833426][ T6762] bond0: (slave bond_slave_1): Releasing backup interface [ 131.880851][ T6767] FAULT_INJECTION: forcing a failure. [ 131.880851][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 132.316563][ T30] audit: type=1400 audit(2000000058.680:365): avc: denied { read append } for pid=6763 comm="syz.2.209" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.344682][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.4.210 Not tainted syzkaller #0 PREEMPT(full) [ 132.344706][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.344716][ T6767] Call Trace: [ 132.344721][ T6767] [ 132.344728][ T6767] dump_stack_lvl+0x16c/0x1f0 [ 132.344756][ T6767] should_fail_ex+0x512/0x640 [ 132.344777][ T6767] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 132.344797][ T6767] should_failslab+0xc2/0x120 [ 132.344816][ T6767] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 132.344833][ T6767] ? getname_flags.part.0+0x4c/0x550 [ 132.344863][ T6767] getname_flags.part.0+0x4c/0x550 [ 132.344890][ T6767] getname_flags+0x93/0xf0 [ 132.344908][ T6767] path_setxattrat+0x27a/0x2a0 [ 132.344928][ T6767] ? __pfx_path_setxattrat+0x10/0x10 [ 132.344972][ T6767] ? __might_fault+0xe3/0x190 [ 132.344988][ T6767] ? __might_fault+0x13b/0x190 [ 132.345005][ T6767] ? find_held_lock+0x2b/0x80 [ 132.345033][ T6767] ? syscall_trace_enter+0x1cb/0x240 [ 132.345055][ T6767] __x64_sys_lsetxattr+0xc9/0x140 [ 132.345074][ T6767] ? syscall_trace_enter+0xee/0x240 [ 132.345094][ T6767] do_syscall_64+0xcd/0x4e0 [ 132.345118][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.345135][ T6767] RIP: 0033:0x7fa7a818eec9 [ 132.345150][ T6767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.345165][ T6767] RSP: 002b:00007fa7a903a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 132.345182][ T6767] RAX: ffffffffffffffda RBX: 00007fa7a83e5fa0 RCX: 00007fa7a818eec9 [ 132.345192][ T6767] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 132.345202][ T6767] RBP: 00007fa7a903a090 R08: 0000000000000000 R09: 0000000000000000 [ 132.345212][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.345220][ T6767] R13: 00007fa7a83e6038 R14: 00007fa7a83e5fa0 R15: 00007ffcad78bf18 [ 132.345242][ T6767] [ 132.360064][ T30] audit: type=1400 audit(2000000058.680:366): avc: denied { open } for pid=6763 comm="syz.2.209" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.574530][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.620335][ T30] audit: type=1400 audit(2000000058.680:367): avc: denied { ioctl } for pid=6763 comm="syz.2.209" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.987526][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 133.005240][ T5170] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.113265][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.687405][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 133.695604][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.711060][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.789590][ T5908] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 133.833654][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.854414][ T5908] usb 3-1: config 0 descriptor?? [ 134.604829][ T5908] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 134.678502][ T6241] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.736389][ T5908] ft260 0003:0403:6030.0004: chip code: 6424 8100 [ 134.893822][ T6241] usb 5-1: Using ep0 maxpacket: 16 [ 134.900784][ T6241] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 134.910286][ T6241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.920776][ T5908] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 134.949753][ T6241] usb 5-1: config 0 descriptor?? [ 134.995696][ T6241] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 135.133606][ T5908] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 135.195074][ T6241] usb 5-1: Detected FT232B [ 135.213620][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.405467][ T5834] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 135.419895][ T6803] ft260 0003:0403:6030.0004: ft260_i2c_read: failed with -38 [ 135.427560][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.427585][ T5834] usb 1-1: Product: syz [ 135.427598][ T5834] usb 1-1: Manufacturer: syz [ 135.445004][ T5834] usb 1-1: SerialNumber: syz [ 135.452635][ T5834] usb 1-1: config 0 descriptor?? [ 135.605338][ T6241] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.679201][ T30] audit: type=1400 audit(2000000062.390:368): avc: denied { ioctl } for pid=6795 comm="syz.0.218" path="socket:[12774]" dev="sockfs" ino=12774 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.763244][ T6241] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 135.805578][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.833451][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.859658][ T92] usb 5-1: USB disconnect, device number 6 [ 135.874457][ T92] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.892308][ T92] ftdi_sio 5-1:0.0: device disconnected [ 136.039848][ T30] audit: type=1400 audit(2000000062.760:369): avc: denied { write } for pid=6817 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 136.168350][ T6821] netlink: 'syz.1.224': attribute type 11 has an invalid length. [ 137.513050][ T9] usb 3-1: USB disconnect, device number 9 [ 138.261965][ T5834] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 138.279338][ T5834] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 138.462966][ T30] audit: type=1400 audit(2000000065.170:370): avc: denied { getopt } for pid=6848 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.803401][ T30] audit: type=1400 audit(2000000065.170:371): avc: denied { name_connect } for pid=6848 comm="syz.0.231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 138.824876][ T30] audit: type=1400 audit(2000000065.180:372): avc: denied { listen } for pid=6848 comm="syz.0.231" lport=55693 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.942176][ T30] audit: type=1400 audit(2000000065.440:373): avc: denied { accept } for pid=6848 comm="syz.0.231" lport=55693 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.987529][ T5834] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 139.017491][ T5834] usb 1-1: USB disconnect, device number 3 [ 139.428596][ T5170] Bluetooth: hci0: command 0x0406 tx timeout [ 139.438080][ T30] audit: type=1400 audit(2000000066.140:374): avc: denied { firmware_load } for pid=6853 comm="syz.1.232" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 139.506131][ T6849] sctp: failed to load transform for md5: -2 [ 139.747636][ T6860] syz.1.232 (6860) used greatest stack depth: 19752 bytes left [ 139.777729][ T6867] syz.4.234 (6867): /proc/6865/oom_adj is deprecated, please use /proc/6865/oom_score_adj instead. [ 139.943262][ T6241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.523563][ T6241] usb 3-1: device descriptor read/64, error -71 [ 140.863262][ T6241] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.905873][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 141.184188][ T6241] usb 3-1: device descriptor read/64, error -71 [ 141.293656][ T6241] usb usb3-port1: attempt power cycle [ 141.501694][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.653326][ T6241] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.703290][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 141.974713][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 141.988027][ T6241] usb 3-1: device descriptor read/8, error -71 [ 142.004435][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.044655][ T9] usb 1-1: config 0 descriptor?? [ 142.092755][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 142.253203][ T6241] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.298949][ T6241] usb 3-1: device descriptor read/8, error -71 [ 142.463244][ T6241] usb usb3-port1: unable to enumerate USB device [ 143.081795][ T6886] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 143.238189][ T6241] usb 1-1: USB disconnect, device number 4 [ 144.263426][ T30] audit: type=1400 audit(2000000070.230:375): avc: denied { connect } for pid=6909 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.325168][ T6919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.247'. [ 144.350221][ T30] audit: type=1400 audit(2000000071.070:376): avc: denied { ioctl } for pid=6913 comm="syz.3.249" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 144.382237][ T6917] netlink: 27 bytes leftover after parsing attributes in process `syz.2.246'. [ 144.516571][ T6919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.247'. [ 144.983405][ T30] audit: type=1400 audit(2000000071.630:377): avc: denied { ioctl } for pid=6929 comm="syz.3.251" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.153588][ T30] audit: type=1400 audit(2000000071.780:378): avc: denied { relabelfrom } for pid=6927 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.201717][ T30] audit: type=1400 audit(2000000071.780:379): avc: denied { relabelto } for pid=6927 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.220580][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 146.444553][ T30] audit: type=1400 audit(2000000073.170:380): avc: denied { ioctl } for pid=6937 comm="syz.4.255" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13103 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.535630][ T30] audit: type=1400 audit(2000000073.250:381): avc: denied { create } for pid=6937 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 146.644753][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.665382][ T30] audit: type=1400 audit(2000000073.370:382): avc: denied { remount } for pid=6937 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.693268][ T9] usb 4-1: no configurations [ 146.697929][ T9] usb 4-1: can't read configurations, error -22 [ 146.721301][ T30] audit: type=1400 audit(2000000073.380:383): avc: denied { sys_admin } for pid=6937 comm="syz.4.255" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 146.773687][ T5834] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.943443][ T5834] usb 1-1: device descriptor read/64, error -71 [ 147.193292][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.475525][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 147.484503][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 147.771954][ T1012] Bluetooth: Error in BCSP hdr checksum [ 147.823450][ T5834] usb 1-1: device descriptor read/64, error -71 [ 147.833965][ T1012] Bluetooth: Error in BCSP hdr checksum [ 147.852714][ T30] audit: type=1400 audit(2000000074.570:384): avc: denied { append } for pid=6966 comm="syz.2.263" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.959246][ T5834] usb usb1-port1: attempt power cycle [ 148.506905][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 148.515786][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 148.936814][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.964732][ T5834] usb 1-1: device descriptor read/8, error -71 [ 149.238445][ T6974] tipc: Started in network mode [ 149.243559][ T6974] tipc: Node identity 0ecd41df4688, cluster identity 4711 [ 149.253949][ T6974] tipc: Enabled bearer , priority 0 [ 149.287421][ T6974] syzkaller0: entered promiscuous mode [ 149.292913][ T6974] syzkaller0: entered allmulticast mode [ 149.330512][ T30] audit: type=1400 audit(2000000076.050:385): avc: denied { bind } for pid=6973 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.351232][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.367055][ T30] audit: type=1400 audit(2000000076.070:386): avc: denied { listen } for pid=6973 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.389827][ T5834] usb 1-1: device descriptor read/8, error -71 [ 149.400071][ T30] audit: type=1400 audit(2000000076.090:387): avc: denied { accept } for pid=6973 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.403946][ T6973] tipc: Resetting bearer [ 149.421392][ T30] audit: type=1400 audit(2000000076.110:388): avc: denied { write } for pid=6973 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.459686][ T6973] tipc: Disabling bearer [ 149.504844][ T5834] usb usb1-port1: unable to enumerate USB device [ 149.563984][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.057761][ T2108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.117020][ T6241] libceph: connect (1)[c::]:6789 error -101 [ 150.152235][ T6241] libceph: mon0 (1)[c::]:6789 connect error [ 150.179404][ T6241] libceph: connect (1)[c::]:6789 error -101 [ 150.223951][ T6241] libceph: mon0 (1)[c::]:6789 connect error [ 150.266192][ T2108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.295726][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.304993][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.318260][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.327941][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.337172][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.381213][ T30] audit: type=1400 audit(2000000077.090:389): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 150.406393][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.424833][ T2108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.494738][ T841] libceph: connect (1)[c::]:6789 error -101 [ 150.500816][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 150.595853][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 150.612857][ T5170] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.743883][ T5834] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 150.754030][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.768618][ T5834] usb 1-1: config 0 descriptor?? [ 150.784874][ T5834] gspca_main: sq930x-2.14.0 probing 041e:403c [ 150.899555][ T6985] ceph: No mds server is up or the cluster is laggy [ 150.900247][ T2108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.948927][ T7001] IPv6: addrconf: prefix option has invalid lifetime [ 151.085956][ T6992] chnl_net:caif_netlink_parms(): no params data found [ 151.094123][ T841] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.107701][ T7005] netlink: 68 bytes leftover after parsing attributes in process `syz.2.272'. [ 151.217574][ T2108] bridge_slave_1: left allmulticast mode [ 151.225806][ T2108] bridge_slave_1: left promiscuous mode [ 151.232972][ T2108] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.344593][ T841] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.366986][ T2108] bridge_slave_0: left allmulticast mode [ 151.372651][ T2108] bridge_slave_0: left promiscuous mode [ 151.396143][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.407599][ T2108] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.420677][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.436409][ T841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.460105][ T841] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.500913][ T841] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.514184][ T841] usb 4-1: Manufacturer: syz [ 151.529822][ T841] usb 4-1: config 0 descriptor?? [ 151.852608][ T30] audit: type=1400 audit(2000000078.570:390): avc: denied { write } for pid=7009 comm="syz.2.274" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.877646][ T30] audit: type=1400 audit(2000000078.570:391): avc: denied { open } for pid=7009 comm="syz.2.274" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.883509][ T5834] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 151.927644][ T5834] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 151.989175][ T2108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.017178][ T2108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.028905][ T2108] bond0 (unregistering): Released all slaves [ 152.232748][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.240510][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.252706][ T6992] bridge_slave_0: entered allmulticast mode [ 152.260535][ T6992] bridge_slave_0: entered promiscuous mode [ 152.281663][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.291294][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.309622][ T6992] bridge_slave_1: entered allmulticast mode [ 152.319380][ T6992] bridge_slave_1: entered promiscuous mode [ 152.363537][ T5849] Bluetooth: hci5: command tx timeout [ 152.859577][ T2108] hsr_slave_0: left promiscuous mode [ 152.894156][ T2108] hsr_slave_1: left promiscuous mode [ 152.914962][ T2108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.928244][ T30] audit: type=1400 audit(2000000079.650:392): avc: denied { setopt } for pid=7032 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.976002][ T2108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.184129][ T2108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.294813][ T2108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.324923][ T5908] usb 1-1: USB disconnect, device number 9 [ 153.359997][ T2108] veth1_macvtap: left promiscuous mode [ 153.378223][ T2108] veth0_macvtap: left promiscuous mode [ 153.387592][ T2108] veth1_vlan: left promiscuous mode [ 153.393747][ T2108] veth0_vlan: left promiscuous mode [ 153.434827][ T5834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.593846][ T5834] usb 3-1: device descriptor read/64, error -71 [ 153.863310][ T5834] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 153.969906][ T841] usbhid 4-1:0.0: can't add hid device: -71 [ 153.995128][ T841] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.057422][ T841] usb 4-1: USB disconnect, device number 9 [ 154.063499][ T5834] usb 3-1: device descriptor read/64, error -71 [ 154.086044][ T7049] netlink: 'syz.1.280': attribute type 10 has an invalid length. [ 154.173812][ T5834] usb usb3-port1: attempt power cycle [ 154.373488][ T30] audit: type=1326 audit(2000000081.070:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.402769][ T30] audit: type=1326 audit(2000000081.070:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.443546][ T5849] Bluetooth: hci5: command tx timeout [ 154.524046][ T5834] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.558520][ T30] audit: type=1326 audit(2000000081.070:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.563867][ T5834] usb 3-1: device descriptor read/8, error -71 [ 154.690116][ T30] audit: type=1326 audit(2000000081.070:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.768578][ T30] audit: type=1326 audit(2000000081.070:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.830071][ T30] audit: type=1326 audit(2000000081.070:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.886459][ T5834] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 154.896619][ T30] audit: type=1326 audit(2000000081.070:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.928297][ T5834] usb 3-1: device descriptor read/8, error -71 [ 154.928295][ T30] audit: type=1326 audit(2000000081.070:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.928335][ T30] audit: type=1326 audit(2000000081.070:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7053 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e2a78eec9 code=0x7ffc0000 [ 154.982502][ T30] audit: type=1400 audit(2000000081.220:402): avc: denied { map } for pid=7053 comm="syz.0.282" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.163755][ T5834] usb usb3-port1: unable to enumerate USB device [ 155.201651][ T2108] team0 (unregistering): Port device team_slave_1 removed [ 155.245818][ T2108] team0 (unregistering): Port device team_slave_0 removed [ 155.743634][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.755771][ T7049] macvlan0: entered promiscuous mode [ 155.766486][ T7049] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 155.824418][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.086711][ T6992] team0: Port device team_slave_0 added [ 156.192434][ T6992] team0: Port device team_slave_1 added [ 156.523425][ T5849] Bluetooth: hci5: command tx timeout [ 156.534203][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.285'. [ 157.072172][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.079703][ T841] IPVS: starting estimator thread 0... [ 157.088047][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.060343][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.228581][ T6992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.241010][ T6992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.248035][ T6992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.265871][ T7086] IPVS: using max 44 ests per chain, 105600 per kthread [ 158.274129][ T6992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.515283][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 158.530964][ T5834] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 158.605264][ T5849] Bluetooth: hci5: command tx timeout [ 158.629030][ T5834] usb 1-1: config 0 has no interface number 0 [ 158.637810][ T5834] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.659987][ T5834] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 158.676505][ T5834] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 158.691697][ T5834] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.708763][ T7100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.292'. [ 158.718150][ T5834] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.736397][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 158.758384][ T5834] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 158.768518][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.778440][ T5834] usb 1-1: Product: syz [ 158.787839][ T5834] usb 1-1: Manufacturer: syz [ 158.798789][ T5834] usb 1-1: SerialNumber: syz [ 158.806119][ T6992] hsr_slave_0: entered promiscuous mode [ 158.818810][ T6992] hsr_slave_1: entered promiscuous mode [ 158.830429][ T5834] usb 1-1: config 0 descriptor?? [ 158.840279][ T6992] debugfs: 'hsr0' already exists in 'hsr' [ 158.864898][ T6992] Cannot create hsr debugfs directory [ 159.488834][ T7080] trusted_key: syz.0.287 sent an empty control message without MSG_MORE. [ 159.718957][ T5834] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 159.760186][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 159.760206][ T30] audit: type=1400 audit(2000000086.380:404): avc: denied { mounton } for pid=7079 comm="syz.0.287" path="/61/file0" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.343613][ T30] audit: type=1400 audit(2000000087.020:405): avc: denied { mount } for pid=7079 comm="syz.0.287" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 160.690433][ T5834] usb 1-1: USB disconnect, device number 10 [ 161.441198][ T5908] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.610081][ T30] audit: type=1400 audit(2000000088.330:406): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 161.713330][ T5908] usb 2-1: device descriptor read/64, error -71 [ 162.262478][ T6992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.284239][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.326773][ T6992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.360492][ T6992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.443724][ T5908] usb 2-1: device descriptor read/64, error -71 [ 163.699570][ T6992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.784000][ T5908] usb usb2-port1: attempt power cycle [ 163.812484][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.839145][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.855490][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.863604][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.947670][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.954826][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.969330][ T30] audit: type=1400 audit(2000000090.690:407): avc: denied { bind } for pid=7153 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 163.990163][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 164.163289][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 164.243528][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 164.340872][ T30] audit: type=1400 audit(2000000091.060:408): avc: denied { sys_module } for pid=6992 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.396063][ T5908] usb 2-1: device not accepting address 11, error -71 [ 164.903411][ T30] audit: type=1400 audit(2000000091.600:409): avc: denied { getopt } for pid=7190 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.945738][ T7191] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.280144][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.301173][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 165.510582][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 165.519540][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 165.553865][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 165.596902][ T24] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.738365][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.823892][ T36] Bluetooth: Error in BCSP hdr checksum [ 165.831922][ T36] Bluetooth: Error in BCSP hdr checksum [ 165.856585][ T24] usb 3-1: Product: syz [ 165.871330][ T24] usb 3-1: Manufacturer: syz [ 165.898026][ T24] usb 3-1: SerialNumber: syz [ 165.925694][ T24] usb 3-1: config 0 descriptor?? [ 166.213181][ T6241] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.349203][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.376043][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.395897][ T6241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.404698][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 166.431708][ T24] usb 3-1: media controller created [ 166.433028][ T6241] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 166.470630][ T6241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.472235][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.506310][ T6992] veth0_vlan: entered promiscuous mode [ 166.512094][ T6241] usb 1-1: Product: syz [ 166.522031][ T6241] usb 1-1: Manufacturer: syz [ 166.537030][ T6992] veth1_vlan: entered promiscuous mode [ 166.547887][ T6241] usb 1-1: SerialNumber: syz [ 166.549486][ T7191] dtv5100: wlen = 0, aborting. [ 166.564756][ T6241] usb 1-1: config 0 descriptor?? [ 166.569766][ T7191] FAULT_INJECTION: forcing a failure. [ 166.569766][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.580961][ T6241] usb 1-1: ucan: probing device on interface #0 [ 166.599378][ T6241] usb 1-1: ucan: invalid EP count (0) [ 166.621187][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) [ 166.621216][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.621226][ T7191] Call Trace: [ 166.621232][ T7191] [ 166.621238][ T7191] dump_stack_lvl+0x16c/0x1f0 [ 166.621266][ T7191] should_fail_ex+0x512/0x640 [ 166.621292][ T7191] _copy_to_user+0x32/0xd0 [ 166.621317][ T7191] i2cdev_read+0x13e/0x280 [ 166.621335][ T7191] ? __pfx_i2cdev_read+0x10/0x10 [ 166.621353][ T7191] vfs_read+0x1e4/0xcf0 [ 166.621375][ T7191] ? __pfx_vfs_read+0x10/0x10 [ 166.621388][ T7191] ? find_held_lock+0x2b/0x80 [ 166.621409][ T7191] ? __fget_files+0x204/0x3c0 [ 166.621431][ T7191] ? __fget_files+0x20e/0x3c0 [ 166.621455][ T7191] ksys_read+0x12a/0x250 [ 166.621471][ T7191] ? __pfx_ksys_read+0x10/0x10 [ 166.621494][ T7191] do_syscall_64+0xcd/0x4e0 [ 166.621518][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.621535][ T7191] RIP: 0033:0x7f9e0a18eec9 [ 166.621548][ T7191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.621563][ T7191] RSP: 002b:00007f9e0afea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.621580][ T7191] RAX: ffffffffffffffda RBX: 00007f9e0a3e5fa0 RCX: 00007f9e0a18eec9 [ 166.621590][ T7191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 166.621600][ T7191] RBP: 00007f9e0afea090 R08: 0000000000000000 R09: 0000000000000000 [ 166.621609][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.621619][ T7191] R13: 00007f9e0a3e6038 R14: 00007f9e0a3e5fa0 R15: 00007ffcfb3386c8 [ 166.621641][ T7191] [ 166.625053][ T6241] usb 1-1: ucan: probe failed; try to update the device firmware [ 166.646466][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.646512][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 166.658781][ T6992] veth0_macvtap: entered promiscuous mode [ 166.685589][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 166.768271][ T6992] veth1_macvtap: entered promiscuous mode [ 166.847327][ T24] usb 3-1: USB disconnect, device number 18 [ 166.885090][ T6241] usb 1-1: USB disconnect, device number 11 [ 166.961054][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 166.969402][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.010567][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.028633][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.048131][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.057449][ T30] audit: type=1400 audit(2000000093.770:410): avc: denied { create } for pid=7230 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.081287][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.105197][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.157838][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.182763][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.258446][ T2108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.297874][ T2108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.337017][ T30] audit: type=1400 audit(2000000094.060:411): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/root/syzkaller.YhZGNJ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 167.379872][ T30] audit: type=1400 audit(2000000094.090:412): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/root/syzkaller.YhZGNJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 167.427660][ T30] audit: type=1400 audit(2000000094.090:413): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/root/syzkaller.YhZGNJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 167.526475][ T30] audit: type=1400 audit(2000000094.130:414): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 167.577312][ T5170] Bluetooth: hci4: command 0x1003 tx timeout [ 167.584933][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 167.593023][ T30] audit: type=1400 audit(2000000094.130:415): avc: denied { mount } for pid=6992 comm="syz-executor" name="/" dev="gadgetfs" ino=7281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 167.658967][ T7265] pimreg: entered allmulticast mode [ 167.667346][ T7260] Illegal XDP return value 123993712 on prog (id 41) dev N/A, expect packet loss! [ 167.691854][ T5962] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.700322][ T30] audit: type=1400 audit(2000000094.130:416): avc: denied { mounton } for pid=6992 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 167.735980][ T7265] binder: 7257:7265 unknown command 0 [ 167.741384][ T7265] binder: 7257:7265 ioctl c0306201 200000000080 returned -22 [ 167.760607][ T7264] loop2: detected capacity change from 0 to 7 [ 167.773218][ T30] audit: type=1400 audit(2000000094.290:417): avc: denied { write } for pid=7259 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.773368][ T7264] Dev loop2: unable to read RDB block 7 [ 167.806261][ T7264] loop2: AHDI p1 p2 p3 [ 167.811276][ T7264] loop2: partition table partially beyond EOD, truncated [ 167.853385][ T5962] usb 3-1: device descriptor read/64, error -71 [ 167.886853][ T7264] loop2: p1 start 1601398130 is beyond EOD, truncated [ 167.930031][ T7264] loop2: p2 start 1702059890 is beyond EOD, truncated [ 168.093199][ T5962] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.223224][ T5962] usb 3-1: device descriptor read/64, error -71 [ 168.287661][ T7273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 168.294307][ T7273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.315945][ T7273] vhci_hcd vhci_hcd.0: Device attached [ 168.333486][ T5962] usb usb3-port1: attempt power cycle [ 168.530500][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 168.553448][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 168.564309][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 168.735803][ T5962] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.763822][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 168.781018][ T5962] usb 3-1: device descriptor read/8, error -71 [ 168.821040][ T92] usb 2-1: config 0 has no interfaces? [ 168.833588][ T92] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 168.842644][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.878005][ T92] usb 2-1: config 0 descriptor?? [ 168.910071][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 168.954566][ T30] audit: type=1400 audit(2000000095.680:418): avc: denied { getopt } for pid=7289 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.071617][ T2108] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 169.080179][ T5962] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 169.097001][ T7274] vhci_hcd: connection closed [ 169.101855][ T2108] vhci_hcd: stop threads [ 169.101883][ T92] usb 2-1: USB disconnect, device number 13 [ 169.115175][ T2108] vhci_hcd: release socket [ 169.118054][ T5962] usb 3-1: device descriptor read/8, error -71 [ 169.132382][ T2108] vhci_hcd: disconnect device [ 169.148486][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 169.163530][ T24] vhci_hcd: vhci_device speed not set [ 169.233761][ T5962] usb usb3-port1: unable to enumerate USB device [ 169.317565][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 169.337716][ T9] usb 1-1: config 0 has no interface number 0 [ 169.346469][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 169.367453][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.378410][ T9] usb 1-1: Product: syz [ 169.382669][ T9] usb 1-1: Manufacturer: syz [ 169.388348][ T9] usb 1-1: SerialNumber: syz [ 169.399290][ T9] usb 1-1: config 0 descriptor?? [ 169.830025][ T9] usb 1-1: Firmware: major: 161, minor: 75, hardware type: UNKNOWN (248) [ 170.097238][ T9] usb 1-1: Read permanent extended address 00:00:08:00:00:00:00:00 from device [ 170.113463][ T9] usb 1-1: atusb_probe: initialization failed, error = -524 [ 170.132486][ T9] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 170.180509][ T30] audit: type=1400 audit(2000000096.900:419): avc: denied { setopt } for pid=7303 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.180555][ T7304] dns_resolver: Unsupported server list version (0) [ 170.322864][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.348682][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.503512][ T7312] vcan0: tx drop: invalid da for name 0x0000000000ee0000 [ 170.565275][ T6241] usb 1-1: USB disconnect, device number 12 [ 171.083501][ T5170] Bluetooth: hci4: command 0x1003 tx timeout [ 171.089879][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.752421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805724a800: rx timeout, send abort [ 171.763132][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805724a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.639896][ T30] audit: type=1400 audit(2000000098.530:420): avc: denied { read } for pid=5201 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 172.710447][ T30] audit: type=1400 audit(2000000098.530:421): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.733728][ T30] audit: type=1400 audit(2000000098.530:422): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.755309][ T30] audit: type=1400 audit(2000000098.530:423): avc: denied { add_name } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.004590][ T30] audit: type=1400 audit(2000000098.530:424): avc: denied { create } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.048316][ T30] audit: type=1400 audit(2000000098.530:425): avc: denied { append open } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.091274][ T30] audit: type=1400 audit(2000000098.530:426): avc: denied { getattr } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 173.283511][ T30] audit: type=1400 audit(2000000099.800:427): avc: denied { execute } for pid=7328 comm="syz.4.337" path="/5/freezer.parent_freezing" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.201332][ T30] audit: type=1400 audit(2000000100.920:428): avc: denied { write } for pid=7351 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.157845][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 177.166799][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 177.922382][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 177.922397][ T30] audit: type=1400 audit(2000000104.640:432): avc: denied { watch watch_reads } for pid=7402 comm="syz.4.355" path="/9" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.032310][ T5962] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.399366][ T5962] usb 4-1: Using ep0 maxpacket: 8 [ 178.420778][ T5962] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.433845][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.457276][ T5962] usb 4-1: config 9 has an invalid interface number: 5 but max is 0 [ 178.466073][ T5962] usb 4-1: config 9 has no interface number 0 [ 178.472176][ T5962] usb 4-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 178.534879][ T5962] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 178.537162][ T30] audit: type=1400 audit(2000000105.250:433): avc: denied { setopt } for pid=7416 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.555407][ T5962] usb 4-1: config 9 interface 5 has no altsetting 0 [ 178.706295][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 178.718127][ T5962] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 178.718157][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.718175][ T5962] usb 4-1: Product: syz [ 178.718190][ T5962] usb 4-1: Manufacturer: syz [ 178.718204][ T5962] usb 4-1: SerialNumber: syz [ 178.840134][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 178.854535][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.873948][ T30] audit: type=1400 audit(2000000105.280:434): avc: denied { watch_mount } for pid=7414 comm="syz.4.362" path="/11" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.923578][ T9] usb 2-1: Product: syz [ 178.923600][ T9] usb 2-1: Manufacturer: syz [ 178.923614][ T9] usb 2-1: SerialNumber: syz [ 179.074597][ T5962] usb 4-1: USB disconnect, device number 10 [ 179.227927][ T30] audit: type=1400 audit(2000000105.950:435): avc: denied { create } for pid=7416 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.321352][ T9] usb 2-1: config 0 descriptor?? [ 179.324499][ T9] gspca_main: 2770:9120 too many config [ 179.716027][ T7404] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 179.751578][ T7404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.843187][ T30] audit: type=1400 audit(2000000106.560:436): avc: denied { write } for pid=7403 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.168830][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 180.177777][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 180.616797][ T7436] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 181.211466][ T5962] usb 2-1: USB disconnect, device number 14 [ 181.294593][ T30] audit: type=1326 audit(2000000108.020:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.2.371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e0a18eec9 code=0x0 [ 181.321992][ T7450] syzkaller0: entered promiscuous mode [ 181.328001][ T7450] syzkaller0: entered allmulticast mode [ 181.351538][ T30] audit: type=1400 audit(2000000108.070:438): avc: denied { read } for pid=7451 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.397365][ T7457] FAULT_INJECTION: forcing a failure. [ 181.397365][ T7457] name failslab, interval 1, probability 0, space 0, times 0 [ 181.418763][ T7457] CPU: 0 UID: 0 PID: 7457 Comm: syz.3.373 Not tainted syzkaller #0 PREEMPT(full) [ 181.418791][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.418802][ T7457] Call Trace: [ 181.418807][ T7457] [ 181.418814][ T7457] dump_stack_lvl+0x16c/0x1f0 [ 181.418843][ T7457] should_fail_ex+0x512/0x640 [ 181.418865][ T7457] ? fs_reclaim_acquire+0xae/0x150 [ 181.418890][ T7457] should_failslab+0xc2/0x120 [ 181.418911][ T7457] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 181.418930][ T7457] ? simple_xattr_get+0x179/0x1d0 [ 181.418953][ T7457] ? vfs_getxattr_alloc+0x23b/0x340 [ 181.418976][ T7457] krealloc_noprof+0x1ff/0x3a0 [ 181.418998][ T7457] vfs_getxattr_alloc+0x23b/0x340 [ 181.419021][ T7457] ? __pfx_vfs_getxattr_alloc+0x10/0x10 [ 181.419043][ T7457] ? do_raw_spin_unlock+0x172/0x230 [ 181.419068][ T7457] cap_inode_getsecurity+0xe9/0x850 [ 181.419094][ T7457] ? __pfx_cap_inode_getsecurity+0x10/0x10 [ 181.419123][ T7457] security_inode_getsecurity+0xe8/0x2f0 [ 181.419153][ T7457] vfs_getxattr+0x23e/0x290 [ 181.419172][ T7457] ? __pfx_vfs_getxattr+0x10/0x10 [ 181.419192][ T7457] ? __might_fault+0xe3/0x190 [ 181.419209][ T7457] ? __might_fault+0xe3/0x190 [ 181.419228][ T7457] do_getxattr+0x254/0x360 [ 181.419249][ T7457] filename_getxattr+0xe9/0x1a0 [ 181.419269][ T7457] ? __pfx_filename_getxattr+0x10/0x10 [ 181.419290][ T7457] ? getname_flags.part.0+0x1c5/0x550 [ 181.419322][ T7457] path_getxattrat+0x203/0x2d0 [ 181.419344][ T7457] ? __pfx_path_getxattrat+0x10/0x10 [ 181.419370][ T7457] ? lock_acquire+0x179/0x350 [ 181.419404][ T7457] ? syscall_trace_enter+0x1cb/0x240 [ 181.419427][ T7457] ? rcu_is_watching+0x12/0xc0 [ 181.419452][ T7457] do_syscall_64+0xcd/0x4e0 [ 181.419478][ T7457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.419495][ T7457] RIP: 0033:0x7fba1a18eec9 [ 181.419510][ T7457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.419526][ T7457] RSP: 002b:00007fba1af86038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 181.419544][ T7457] RAX: ffffffffffffffda RBX: 00007fba1a3e5fa0 RCX: 00007fba1a18eec9 [ 181.419555][ T7457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 181.419566][ T7457] RBP: 00007fba1af86090 R08: 0000000000000000 R09: 0000000000000000 [ 181.419575][ T7457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.419585][ T7457] R13: 00007fba1a3e6038 R14: 00007fba1a3e5fa0 R15: 00007ffc824b5ab8 [ 181.419609][ T7457] [ 182.673193][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.073307][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 183.102952][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.162471][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 183.163562][ T30] audit: type=1400 audit(2000000109.880:439): avc: denied { bind } for pid=7468 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.203258][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.261002][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.283202][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.304934][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.329491][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.343173][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.355874][ T24] usb 4-1: Manufacturer: syz [ 183.373710][ T24] usb 4-1: config 0 descriptor?? [ 183.704598][ T7465] fuse: Bad value for 'fd' [ 183.720617][ T30] audit: type=1400 audit(2000000110.440:440): avc: denied { getopt } for pid=7463 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.765641][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 184.165464][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.174373][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.183735][ T6241] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 184.378895][ T6241] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 184.511907][ T6241] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 184.568311][ T6241] usb 2-1: Product: syz [ 184.582814][ T6241] usb 2-1: Manufacturer: syz [ 184.608625][ T6241] usb 2-1: SerialNumber: syz [ 184.623472][ T24] rc_core: IR keymap rc-hauppauge not found [ 184.632709][ T24] Registered IR keymap rc-empty [ 184.633704][ T6241] usb 2-1: config 0 descriptor?? [ 184.649575][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.747063][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.057092][ T30] audit: type=1400 audit(2000000111.710:441): avc: denied { listen } for pid=7497 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.109248][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 185.109511][ T6241] ch341 2-1:0.0: ch341-uart converter detected [ 185.236527][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 185.368261][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.388303][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.411429][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.447368][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.467485][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.493616][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.502526][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.514614][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.525970][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.541359][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.662191][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.671670][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.688147][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.725221][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 185.731319][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 185.737556][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 185.766655][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.787308][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.809090][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.816856][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.913816][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.933461][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 185.957666][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 186.122225][ T24] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 186.154066][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 186.171112][ T24] usb 4-1: USB disconnect, device number 11 [ 186.208937][ T6241] usb 2-1: failed to receive control message: -71 [ 186.247099][ T6241] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 186.296074][ T6241] usb 2-1: USB disconnect, device number 15 [ 186.345420][ T30] audit: type=1400 audit(2000000113.060:442): avc: denied { getattr } for pid=7514 comm="syz.2.387" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 186.351683][ T7521] netlink: 'syz.0.389': attribute type 16 has an invalid length. [ 186.674288][ T7521] netlink: 'syz.0.389': attribute type 17 has an invalid length. [ 186.818104][ T6241] ch341 2-1:0.0: device disconnected [ 186.856480][ T7521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.753764][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 189.493220][ T7558] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 189.684227][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.962292][ T7562] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 190.280126][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.401'. [ 190.679577][ T7581] process 'syz.3.403' launched './file0' with NULL argv: empty string added [ 190.730106][ T5908] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 190.764864][ T30] audit: type=1400 audit(2000000117.410:443): avc: denied { execute_no_trans } for pid=7569 comm="syz.3.403" path="/85/file0" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.133482][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 191.272862][ T5908] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 191.290516][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.309792][ T5908] usb 3-1: Product: syz [ 191.314329][ T5908] usb 3-1: Manufacturer: syz [ 191.319014][ T5908] usb 3-1: SerialNumber: syz [ 191.335233][ T5908] usb 3-1: config 0 descriptor?? [ 191.357022][ T5908] gspca_main: 2770:9120 too many config [ 191.570783][ T30] audit: type=1400 audit(2000000118.290:444): avc: denied { ioctl } for pid=7572 comm="syz.2.404" path="socket:[17103]" dev="sockfs" ino=17103 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 191.649215][ T7590] trusted_key: encrypted_key: insufficient parameters specified [ 191.659181][ T7590] netlink: 132 bytes leftover after parsing attributes in process `syz.1.406'. [ 191.682247][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.684329][ T5858] Bluetooth: hci4: command 0x1003 tx timeout [ 191.735519][ T7573] netlink: 'syz.2.404': attribute type 10 has an invalid length. [ 191.759041][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 191.789584][ T7573] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.953541][ T7592] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 191.980208][ T6241] usb 3-1: USB disconnect, device number 23 [ 192.273220][ T92] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.352281][ T30] audit: type=1400 audit(2000000119.070:445): avc: denied { read } for pid=7597 comm="syz.1.410" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.389962][ T30] audit: type=1400 audit(2000000119.070:446): avc: denied { open } for pid=7597 comm="syz.1.410" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.433655][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 192.471253][ T92] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 192.481266][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.784139][ T92] usb 5-1: Product: syz [ 192.789691][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.411'. [ 192.803474][ T92] usb 5-1: Manufacturer: syz [ 192.816077][ T92] usb 5-1: SerialNumber: syz [ 192.824896][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.411'. [ 193.902241][ T92] usb 5-1: config 0 descriptor?? [ 193.910090][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.928641][ T92] gspca_main: 2770:9120 too many config [ 194.213277][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.229235][ T7595] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 194.248727][ T7595] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 194.343744][ T24] usb 1-1: device descriptor read/64, error -71 [ 194.816031][ T7595] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 194.863295][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 194.880920][ T92] usb 5-1: USB disconnect, device number 7 [ 194.959984][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'. [ 195.013234][ T24] usb 1-1: device descriptor read/64, error -71 [ 195.172173][ T24] usb usb1-port1: attempt power cycle [ 196.035299][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.157646][ T7637] FAULT_INJECTION: forcing a failure. [ 196.157646][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.171260][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT(full) [ 196.171283][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.171290][ T7637] Call Trace: [ 196.171294][ T7637] [ 196.171298][ T7637] dump_stack_lvl+0x16c/0x1f0 [ 196.171317][ T7637] should_fail_ex+0x512/0x640 [ 196.171334][ T7637] _copy_to_user+0x32/0xd0 [ 196.171354][ T7637] simple_read_from_buffer+0xcb/0x170 [ 196.171367][ T7637] proc_fail_nth_read+0x197/0x240 [ 196.171385][ T7637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.171398][ T7637] ? rw_verify_area+0xcf/0x6c0 [ 196.171415][ T7637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.171427][ T7637] vfs_read+0x1e4/0xcf0 [ 196.171438][ T7637] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 196.171452][ T7637] ? __pfx___mutex_lock+0x10/0x10 [ 196.171466][ T7637] ? __pfx_vfs_read+0x10/0x10 [ 196.171478][ T7637] ? __rcu_read_unlock+0x2bc/0x550 [ 196.171490][ T7637] ? __fget_files+0x20e/0x3c0 [ 196.171506][ T7637] ksys_read+0x12a/0x250 [ 196.171517][ T7637] ? __pfx_ksys_read+0x10/0x10 [ 196.171532][ T7637] do_syscall_64+0xcd/0x4e0 [ 196.171547][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.171557][ T7637] RIP: 0033:0x7f9e0a18d8dc [ 196.171567][ T7637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.171581][ T7637] RSP: 002b:00007f9e0afc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.171591][ T7637] RAX: ffffffffffffffda RBX: 00007f9e0a3e6090 RCX: 00007f9e0a18d8dc [ 196.171598][ T7637] RDX: 000000000000000f RSI: 00007f9e0afc90a0 RDI: 0000000000000009 [ 196.171604][ T7637] RBP: 00007f9e0afc9090 R08: 0000000000000000 R09: 0000000000000001 [ 196.171610][ T7637] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 196.171616][ T7637] R13: 00007f9e0a3e6128 R14: 00007f9e0a3e6090 R15: 00007ffcfb3386c8 [ 196.171629][ T7637] [ 196.176039][ T24] usb 1-1: device descriptor read/8, error -71 [ 196.985054][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 197.431401][ T24] usb 1-1: device descriptor read/8, error -71 [ 197.483372][ T30] audit: type=1400 audit(2000000124.190:447): avc: denied { mount } for pid=7645 comm="syz.3.425" name="/" dev="autofs" ino=18481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 197.559257][ T24] usb usb1-port1: unable to enumerate USB device [ 197.929532][ T7650] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.941509][ T59] Bluetooth: Error in BCSP hdr checksum [ 200.967976][ T30] audit: type=1400 audit(2000000127.680:448): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.366515][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.436'. [ 201.606640][ T30] audit: type=1400 audit(2000000128.270:449): avc: denied { read } for pid=7687 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.024733][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 202.059267][ T7684] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 202.841094][ T5170] Bluetooth: hci4: command 0x1003 tx timeout [ 202.847581][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.736836][ T7712] siw: device registration error -23 [ 203.893580][ T30] audit: type=1400 audit(2000000130.620:450): avc: denied { open } for pid=7718 comm="syz.2.445" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 204.050963][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 204.057842][ T5170] Bluetooth: hci6: command 0x1003 tx timeout [ 204.561378][ T30] audit: type=1400 audit(2000000130.810:451): avc: denied { ioctl } for pid=7718 comm="syz.2.445" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 204.625715][ T30] audit: type=1400 audit(2000000131.350:452): avc: denied { append } for pid=7724 comm="syz.3.447" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 204.708068][ T30] audit: type=1400 audit(2000000131.370:453): avc: denied { open } for pid=7724 comm="syz.3.447" path="/96/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 205.331937][ T7742] comedi: valid board names for 8255 driver are: [ 205.366393][ T7742] 8255 [ 205.369314][ T7742] comedi: valid board names for vmk80xx driver are: [ 205.378410][ T7742] vmk80xx [ 205.381678][ T7742] comedi: valid board names for usbduxsigma driver are: [ 205.389820][ T7742] usbduxsigma [ 205.395341][ T7742] comedi: valid board names for usbduxfast driver are: [ 205.560479][ T7742] usbduxfast [ 205.568103][ T7742] comedi: valid board names for usbdux driver are: [ 205.586122][ T7742] usbdux [ 205.653203][ T7742] comedi: valid board names for ni6501 driver are: [ 205.666386][ T7742] ni6501 [ 205.728625][ T7742] comedi: valid board names for dt9812 driver are: [ 205.762802][ T7742] dt9812 [ 205.781310][ T7742] comedi: valid board names for ni_labpc_cs driver are: [ 205.791100][ T7742] ni_labpc_cs [ 205.800457][ T7742] comedi: valid board names for ni_daq_700 driver are: [ 205.846204][ T7742] ni_daq_700 [ 205.849579][ T7742] comedi: valid board names for labpc_pci driver are: [ 205.862260][ T7742] labpc_pci [ 205.870314][ T7742] comedi: valid board names for adl_pci9118 driver are: [ 205.907638][ T7742] pci9118dg [ 205.918232][ T7742] pci9118hg [ 205.921824][ T7742] pci9118hr [ 205.926387][ T7742] comedi: valid board names for 8255_pci driver are: [ 205.933541][ T7742] 8255_pci [ 205.937915][ T7742] comedi: valid board names for s526 driver are: [ 205.953810][ T7742] s526 [ 205.958885][ T7742] comedi: valid board names for multiq3 driver are: [ 205.972452][ T7742] multiq3 [ 205.980192][ T7742] comedi: valid board names for pcmuio driver are: [ 206.021412][ T7742] pcmuio48 [ 206.069878][ T7742] pcmuio96 [ 206.081113][ T7742] comedi: valid board names for pcmmio driver are: [ 206.099979][ T7742] pcmmio [ 206.107951][ T7742] comedi: valid board names for pcmda12 driver are: [ 206.122206][ T7742] pcmda12 [ 206.126480][ T7742] comedi: valid board names for pcmad driver are: [ 206.218764][ T7742] pcmad12 [ 206.221801][ T7742] pcmad16 [ 206.233422][ T7742] comedi: valid board names for ni_labpc driver are: [ 206.251188][ T7742] lab-pc-1200 [ 206.344236][ T7742] lab-pc-1200ai [ 206.413013][ T7742] lab-pc+ [ 206.513064][ T7742] comedi: valid board names for atmio16 driver are: [ 206.548099][ T7742] atmio16 [ 206.568351][ T7742] atmio16d [ 206.624735][ T7742] comedi: valid board names for ni_at_ao driver are: [ 206.704543][ T7742] at-ao-6 [ 206.707688][ T7742] at-ao-10 [ 206.713523][ T7742] comedi: valid board names for ni_at_a2150 driver are: [ 206.853714][ T7742] ni_at_a2150 [ 206.857114][ T7742] comedi: valid board names for adq12b driver are: [ 206.867820][ T7742] adq12b [ 206.870986][ T7742] comedi: valid board names for mpc624 driver are: [ 206.887204][ T7742] mpc624 [ 206.890433][ T7742] comedi: valid board names for c6xdigio driver are: [ 206.905260][ T7742] c6xdigio [ 206.935571][ T7742] comedi: valid board names for aio_iiro_16 driver are: [ 206.959968][ T7742] aio_iiro_16 [ 206.979554][ T7742] comedi: valid board names for aio_aio12_8 driver are: [ 207.003845][ T7742] aio_aio12_8 [ 207.007247][ T7742] aio_ai12_8 [ 207.010529][ T7742] aio_ao12_4 [ 207.134453][ T7742] comedi: valid board names for fl512 driver are: [ 207.343230][ T7742] fl512 [ 207.346122][ T7742] comedi: valid board names for dmm32at driver are: [ 207.352709][ T7742] dmm32at [ 207.365369][ T7742] comedi: valid board names for dt282x driver are: [ 207.383192][ T7742] dt2821 [ 207.386156][ T7742] dt2821-f [ 207.405946][ T7742] dt2821-g [ 207.494017][ T7742] dt2823 [ 207.496981][ T7742] dt2824-pgh [ 207.500332][ T7742] dt2824-pgl [ 207.507234][ T7742] dt2825 [ 207.516211][ T7742] dt2827 [ 207.520467][ T7742] dt2828 [ 207.533206][ T7742] dt2829 [ 207.536159][ T7742] dt21-ez [ 207.539156][ T7742] dt23-ez [ 207.550521][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.638569][ T7742] dt24-ez [ 207.677364][ T7742] dt24-ez-pgl [ 207.968767][ T7742] comedi: valid board names for dt2817 driver are: [ 207.976567][ T7742] dt2817 [ 207.979612][ T7742] comedi: valid board names for dt2815 driver are: [ 207.988279][ T7742] dt2815 [ 207.991888][ T7742] comedi: valid board names for dt2814 driver are: [ 207.998655][ T7742] dt2814 [ 208.001663][ T7742] comedi: valid board names for dt2811 driver are: [ 208.017397][ T7742] dt2811-pgh [ 208.024877][ T7742] dt2811-pgl [ 208.032462][ T7742] comedi: valid board names for dt2801 driver are: [ 208.042179][ T7742] dt2801 [ 208.046175][ T7742] comedi: valid board names for das6402 driver are: [ 208.054346][ T7742] das6402-12 [ 208.057682][ T7742] das6402-16 [ 208.061111][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 208.070310][ T7742] comedi: valid board names for das1800 driver are: [ 208.079888][ T7742] das-1701st [ 208.087394][ T7742] das-1701st-da [ 208.097205][ T7742] das-1702st [ 208.103633][ T7742] das-1702st-da [ 208.110301][ T7742] das-1702hr [ 208.117441][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.132571][ T7742] das-1702hr-da [ 208.140678][ T7742] das-1701ao [ 208.151423][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.164592][ T7742] das-1702ao [ 208.171636][ T7742] das-1801st [ 208.181706][ T7742] das-1801st-da [ 208.185768][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.200114][ T7742] das-1802st [ 208.204066][ T7742] das-1802st-da [ 208.207654][ T7742] das-1802hr [ 208.210989][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.302661][ T7742] das-1802hr-da [ 208.306307][ T7742] das-1801hc [ 208.309595][ T7742] das-1802hc [ 208.312871][ T7742] das-1801ao [ 208.316485][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.325143][ T7742] das-1802ao [ 208.328432][ T7742] comedi: valid board names for das800 driver are: [ 208.337166][ T24] usb 5-1: config 0 descriptor?? [ 208.342288][ T7742] das-800 [ 208.348587][ T7742] cio-das800 [ 208.354285][ T7742] das-801 [ 208.357361][ T7742] cio-das801 [ 208.360667][ T7742] das-802 [ 208.363913][ T7742] cio-das802 [ 208.367253][ T7742] cio-das802/16 [ 208.371197][ T7742] comedi: valid board names for isa-das08 driver are: [ 208.380341][ T7742] isa-das08 [ 208.383745][ T7742] das08-pgm [ 208.387302][ T7742] das08-pgh [ 208.390841][ T7742] das08-pgl [ 208.394153][ T7742] das08-aoh [ 208.398264][ T7742] das08-aol [ 208.402223][ T7742] das08-aom [ 208.403632][ T5908] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 208.470145][ T7742] das08/jr-ao [ 208.490144][ T7742] das08jr-16-ao [ 208.495006][ T7778] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 208.501514][ T7778] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.509772][ T7778] vhci_hcd vhci_hcd.0: Device attached [ 208.547446][ T7742] pc104-das08 [ 208.564967][ T7742] das08jr/16 [ 208.578816][ T7742] comedi: valid board names for das16m1 driver are: [ 208.589028][ T7779] vhci_hcd: connection closed [ 208.610232][ T49] vhci_hcd: stop threads [ 208.649106][ T7742] das16m1 [ 208.652379][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 208.676987][ T7742] comedi: valid board names for dac02 driver are: [ 208.694640][ T49] vhci_hcd: release socket [ 208.732262][ T5908] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 208.749483][ T49] vhci_hcd: disconnect device [ 208.765294][ T10] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 208.775508][ T7742] dac02 [ 208.788413][ T7742] comedi: valid board names for rti802 driver are: [ 208.804034][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.816970][ T10] usb 39-1: enqueue for inactive port 0 [ 208.834302][ T7742] rti802 [ 208.847956][ T7742] comedi: valid board names for rti800 driver are: [ 208.860345][ T5908] usb 1-1: Product: syz [ 208.888859][ T5908] usb 1-1: Manufacturer: syz [ 208.901908][ T7742] rti800 [ 208.915545][ T10] vhci_hcd: vhci_device speed not set [ 208.930304][ T7742] rti815 [ 208.937556][ T5908] usb 1-1: SerialNumber: syz [ 208.952945][ T7742] comedi: valid board names for pcm3724 driver are: [ 209.023059][ T7742] pcm3724 [ 209.049727][ T5908] usb 1-1: config 0 descriptor?? [ 209.069751][ T7742] comedi: valid board names for pcl818 driver are: [ 209.154082][ T7742] pcl818l [ 209.174459][ T5908] gspca_main: sq930x-2.14.0 probing 2770:930c [ 209.210629][ T7742] pcl818h [ 209.235550][ T7742] pcl818hd [ 209.282905][ T7742] pcl818hg [ 209.314733][ T7742] pcl818 [ 209.341994][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.374701][ T7742] pcl718 [ 209.404663][ T7742] pcm3718 [ 209.431646][ T7742] comedi: valid board names for pcl816 driver are: [ 209.456926][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.504160][ T7742] pcl816 [ 209.522320][ T7742] pcl814b [ 209.552820][ T7742] comedi: valid board names for pcl812 driver are: [ 209.597155][ T7742] pcl812 [ 209.625051][ T7742] pcl812pg [ 209.648297][ T7742] acl8112pg [ 209.674700][ T7742] acl8112dg [ 209.711396][ T7742] acl8112hg [ 209.751451][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 209.766332][ T7742] a821pgl [ 209.769370][ T7742] a821pglnda [ 209.772751][ T7742] a821pgh [ 209.776158][ T7742] a822pgl [ 209.779185][ T7742] a822pgh [ 209.782197][ T7742] a823pgl [ 209.785337][ T7742] a823pgh [ 209.788351][ T7742] pcl813 [ 209.791272][ T7742] pcl813b [ 209.794338][ T7742] acl8113 [ 209.797346][ T7742] iso813 [ 209.800266][ T7742] acl8216 [ 209.803598][ T7742] a826pg [ 209.806525][ T7742] comedi: valid board names for pcl730 driver are: [ 209.813012][ T7742] pcl730 [ 209.815999][ T7742] iso730 [ 209.818930][ T7742] acl7130 [ 209.821936][ T7742] pcm3730 [ 209.827110][ T7742] pcl725 [ 209.830045][ T7742] p8r8dio [ 209.833055][ T7742] acl7225b [ 209.837099][ T7742] p16r16dio [ 209.843179][ T7742] pcl733 [ 209.846128][ T7742] pcl734 [ 209.849060][ T7742] opmm-1616-xt [ 209.852505][ T7742] pearl-mm-p [ 209.865658][ T7742] ir104-pbf [ 209.868900][ T7742] comedi: valid board names for pcl726 driver are: [ 209.892454][ T7742] pcl726 [ 209.895812][ T7742] pcl727 [ 209.898745][ T7742] pcl728 [ 209.901673][ T7742] acl6126 [ 209.904745][ T7742] acl6128 [ 209.907763][ T7742] comedi: valid board names for pcl724 driver are: [ 209.918075][ T7742] pcl724 [ 209.921015][ T7742] pcl722 [ 209.924291][ T7742] pcl731 [ 209.927220][ T7742] acl7122 [ 209.930230][ T7742] acl7124 [ 209.933754][ C0] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (ksoftirqd/0) [ 209.946978][ T7742] pet48dio [ 209.950099][ T7742] pcmio48 [ 209.963252][ T7742] onyx-mm-dio [ 209.966689][ T7742] comedi: valid board names for pcl711 driver are: [ 209.977503][ T7742] pcl711 [ 209.980446][ T7742] pcl711b [ 209.984068][ T7742] acl8112hg [ 209.987307][ T7742] acl8112dg [ 209.990499][ T7742] comedi: valid board names for amplc_pc263 driver are: [ 210.013454][ T7742] pc263 [ 210.016325][ T7742] comedi: valid board names for amplc_pc236 driver are: [ 210.024848][ T7742] pc36at [ 210.027790][ T7742] comedi: valid board names for amplc_dio200 driver are: [ 210.034906][ T7742] pc212e [ 210.041657][ T7742] pc214e [ 210.046696][ T7742] pc215e [ 210.049766][ T7742] pc218e [ 210.052785][ T7742] pc272e [ 210.061519][ T7742] comedi: valid board names for comedi_parport driver are: [ 210.074514][ T7742] comedi_parport [ 210.078267][ T7742] comedi: valid board names for comedi_test driver are: [ 210.085308][ T7742] comedi_test [ 210.088673][ T7742] comedi: valid board names for comedi_bond driver are: [ 210.095844][ T7742] comedi_bond [ 210.142361][ T10] usb 5-1: USB disconnect, device number 8 [ 210.295165][ T92] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 210.421908][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.873215][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 210.906169][ T5908] gspca_sq930x: reg_w 0105 0c00 failed -110 [ 211.846516][ T92] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 212.235350][ T30] audit: type=1400 audit(2000000138.680:454): avc: denied { call } for pid=7788 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 212.286350][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.307310][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.367614][ T92] usb 4-1: Product: syz [ 212.415680][ T92] usb 4-1: Manufacturer: syz [ 212.431640][ T30] audit: type=1400 audit(2000000138.690:455): avc: denied { transfer } for pid=7788 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 212.479403][ T92] usb 4-1: SerialNumber: syz [ 212.562344][ T92] usb 4-1: config 0 descriptor?? [ 212.685246][ T92] gspca_main: 2770:9120 too many config [ 213.210506][ T5908] gspca_sq930x: Sensor ov9630 not yet treated [ 213.348337][ T5908] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 213.387868][ T5908] usb 1-1: USB disconnect, device number 17 [ 213.445603][ T7787] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 213.763533][ T7787] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.802096][ T7787] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 213.816629][ T5908] usb 4-1: USB disconnect, device number 12 [ 214.099781][ T7814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 214.233689][ T6241] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 214.296258][ T7818] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7818 comm=syz.1.472 [ 214.365443][ T5834] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 214.454829][ T6241] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.565062][ T6241] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 214.663240][ T7825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.996344][ T5834] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 215.014156][ T6241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.023646][ T6241] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.037266][ T5834] usb 1-1: config 0 has no interface number 0 [ 215.038231][ T6241] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.066229][ T5834] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 215.078505][ T5834] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 215.082443][ T6241] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.098500][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.114511][ T5834] usb 1-1: config 0 descriptor?? [ 215.118166][ T6241] usb 5-1: Product: syz [ 215.142565][ T6241] usb 5-1: Manufacturer: syz [ 215.165291][ T6241] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 215.338962][ T5834] usb 1-1: USB disconnect, device number 18 [ 215.493225][ T7833] overlayfs: failed to resolve './file1': -2 [ 216.105695][ T30] audit: type=1400 audit(2000000142.820:456): avc: denied { kexec_image_load } for pid=7838 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.379159][ T7847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.478'. [ 216.393260][ T6241] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 216.918869][ T30] audit: type=1400 audit(2000000143.210:457): avc: denied { mount } for pid=7848 comm="syz.2.481" name="/" dev="ramfs" ino=18891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 216.972623][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 216.996384][ T10] usb 5-1: USB disconnect, device number 9 [ 217.003614][ T6241] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 217.034640][ T6241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.059133][ T6241] usb 1-1: config 0 has no interfaces? [ 217.065215][ T30] audit: type=1400 audit(2000000143.790:458): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 217.085354][ T6241] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 217.098726][ T6241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.174910][ T6241] usb 1-1: config 0 descriptor?? [ 217.411686][ T10] usb 1-1: USB disconnect, device number 19 [ 219.683482][ T5962] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 219.804641][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 220.021062][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 220.593988][ T5962] usb 3-1: Using ep0 maxpacket: 8 [ 220.617602][ T5962] usb 3-1: device descriptor read/all, error -71 [ 220.795705][ T10] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 220.804028][ T10] usb 1-1: config 0 has no interface number 0 [ 220.831030][ T10] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.872256][ T10] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 220.892064][ T10] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.001131][ T10] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 221.010783][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.467271][ T10] usb 1-1: config 0 descriptor?? [ 221.485987][ T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input10 [ 221.690226][ T5834] usb 1-1: USB disconnect, device number 20 [ 221.733331][ T92] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.005880][ T92] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.015070][ T92] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 222.026328][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.035576][ T92] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.055073][ T92] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.064960][ T92] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.498922][ T92] usb 2-1: Product: syz [ 222.503721][ T92] usb 2-1: Manufacturer: syz [ 222.516653][ T92] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.869909][ T30] audit: type=1400 audit(2000000149.580:459): avc: denied { read } for pid=7900 comm="syz.4.486" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.910371][ T30] audit: type=1400 audit(2000000149.580:460): avc: denied { ioctl } for pid=7900 comm="syz.4.486" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 222.935235][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.881965][ T7925] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 223.917506][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'. [ 223.972518][ T7925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.263228][ T841] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 224.533205][ T841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.574258][ T5834] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 224.575061][ T841] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 224.633006][ T10] usb 2-1: USB disconnect, device number 16 [ 224.639841][ T5908] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.754039][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.872196][ T841] usb 5-1: config 0 descriptor?? [ 224.920744][ T5834] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 224.933271][ T5834] usb 1-1: config 0 has no interface number 0 [ 224.939561][ T5834] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.953415][ T5834] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.965148][ T5834] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.976618][ T5834] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 224.987092][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.089710][ T5834] usb 1-1: config 0 descriptor?? [ 225.306658][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 225.316151][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.339587][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 225.376687][ T5908] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.379382][ T5834] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input11 [ 225.406588][ T5834] usb 1-1: USB disconnect, device number 21 [ 225.422152][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.321267][ T5908] usb 4-1: config 0 descriptor?? [ 226.360315][ T5908] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 226.756092][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 226.777090][ T5834] usb 5-1: USB disconnect, device number 10 [ 226.868767][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 226.899588][ T7954] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 227.402603][ T30] audit: type=1400 audit(2000000154.120:461): avc: denied { block_suspend } for pid=7967 comm="syz.0.511" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.431486][ T30] audit: type=1400 audit(2000000155.150:462): avc: denied { shutdown } for pid=7978 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.459343][ T30] audit: type=1400 audit(2000000155.180:463): avc: denied { bind } for pid=7978 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.683296][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 228.703709][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.883169][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 228.916687][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.927948][ T5170] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 228.934641][ T5858] Bluetooth: hci6: command 0x1003 tx timeout [ 228.943915][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.954982][ T5834] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.965755][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 228.972620][ T5834] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 228.982887][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.997340][ T5834] usb 5-1: config 0 descriptor?? [ 229.156830][ T10] usb 4-1: USB disconnect, device number 13 [ 229.303419][ T5908] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 229.400405][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 229.464935][ T5908] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.502035][ T5908] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 229.518091][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.540928][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.559193][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 229.579366][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.616540][ T5834] usb 5-1: USB disconnect, device number 11 [ 229.692671][ T5908] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.706953][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.718556][ T5908] usb 3-1: Product: syz [ 229.722746][ T5908] usb 3-1: Manufacturer: syz [ 229.740199][ T5908] cdc_wdm 3-1:1.0: skipping garbage [ 229.747210][ T5908] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 230.629518][ T5908] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 231.675635][ T5908] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 231.685243][ T5908] usb 2-1: config 0 has no interface number 0 [ 231.697895][ T5908] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.774985][ T8014] netlink: 165 bytes leftover after parsing attributes in process `syz.4.522'. [ 232.166976][ T5908] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 232.185114][ T5908] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.195919][ T5908] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 232.209375][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.230216][ T5908] usb 2-1: config 0 descriptor?? [ 232.250511][ T5908] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input12 [ 232.283882][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.451321][ T5908] usb 2-1: USB disconnect, device number 17 [ 232.468240][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.515814][ T841] usb 3-1: USB disconnect, device number 26 [ 232.534701][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.553438][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 232.563962][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.588770][ T10] usb 5-1: config 0 descriptor?? [ 233.087609][ T841] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 233.273155][ T841] usb 3-1: Using ep0 maxpacket: 8 [ 233.328539][ T841] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 233.339795][ T841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.354867][ T841] usb 3-1: Product: syz [ 233.363868][ T841] usb 3-1: Manufacturer: syz [ 233.432479][ T841] usb 3-1: SerialNumber: syz [ 233.661897][ T841] usb 3-1: config 0 descriptor?? [ 233.741091][ T841] gspca_main: 2770:9120 too many config [ 234.601854][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 234.614540][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 234.627387][ T10] usb 5-1: USB disconnect, device number 12 [ 235.034840][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 235.043818][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 235.548096][ T8021] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 235.723763][ T30] audit: type=1400 audit(2000000162.450:464): avc: denied { write } for pid=8034 comm="syz.1.530" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 235.725852][ T8021] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 236.198227][ T30] audit: type=1400 audit(2000000162.480:465): avc: denied { open } for pid=8034 comm="syz.1.530" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 236.864279][ T8036] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 237.083239][ T5170] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 237.565163][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 238.361526][ T5834] usb 3-1: USB disconnect, device number 27 [ 238.498508][ T8076] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 238.503151][ T30] audit: type=1400 audit(2000000165.220:466): avc: denied { ioctl } for pid=8075 comm="syz.1.538" path="socket:[18320]" dev="sockfs" ino=18320 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.540000][ T8076] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 238.652203][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 238.675434][ T30] audit: type=1400 audit(2000000165.260:467): avc: denied { firmware_load } for pid=8075 comm="syz.1.538" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 239.570010][ T8083] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 240.693286][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 240.699650][ T5170] Bluetooth: hci4: command 0x1003 tx timeout [ 242.083320][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 242.169675][ T30] audit: type=1400 audit(2000000168.890:468): avc: denied { create } for pid=8116 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.223416][ T30] audit: type=1400 audit(2000000168.910:469): avc: denied { ioctl } for pid=8116 comm="syz.3.550" path="socket:[19461]" dev="sockfs" ino=19461 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.278238][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.292417][ T10] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 242.301902][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.328096][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.390254][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.400611][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.410114][ T10] usb 2-1: Product: syz [ 242.414764][ T10] usb 2-1: Manufacturer: syz [ 242.426415][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 242.443254][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 242.540720][ T8133] siw: device registration error -23 [ 244.649002][ T30] audit: type=1400 audit(2000000171.370:470): avc: denied { shutdown } for pid=8163 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.868845][ T30] audit: type=1400 audit(2000000171.370:471): avc: denied { write } for pid=8163 comm="syz.3.562" lport=53131 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 246.188553][ T30] audit: type=1400 audit(2000000171.370:472): avc: denied { setopt } for pid=8163 comm="syz.3.562" lport=53131 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 246.341478][ T10] usb 2-1: USB disconnect, device number 18 [ 246.537618][ T30] audit: type=1400 audit(2000000172.650:473): avc: denied { connect } for pid=8168 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.827118][ T30] audit: type=1400 audit(2000000172.700:474): avc: denied { lock } for pid=8168 comm="syz.0.564" path="socket:[19408]" dev="sockfs" ino=19408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.453163][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 247.613537][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 247.650896][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 247.680421][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.716529][ T9] usb 1-1: Product: syz [ 247.720732][ T9] usb 1-1: Manufacturer: syz [ 247.742812][ T9] usb 1-1: SerialNumber: syz [ 247.866413][ T9] usb 1-1: config 0 descriptor?? [ 247.935948][ T9] gspca_main: 2770:9120 too many config [ 248.710212][ T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 249.095791][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.185858][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.216728][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 249.236692][ T8183] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 249.246329][ T8183] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.255135][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.279105][ T10] usb 3-1: Product: syz [ 249.298712][ T10] usb 3-1: Manufacturer: syz [ 249.315609][ T10] usb 3-1: SerialNumber: syz [ 249.323269][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 249.369894][ T10] usb 3-1: config 0 descriptor?? [ 249.382386][ T10] usb 3-1: ucan: probing device on interface #0 [ 249.406926][ T10] usb 3-1: ucan: invalid EP count (0) [ 249.418862][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 249.459128][ T8206] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 249.488792][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.490184][ T5834] usb 1-1: USB disconnect, device number 22 [ 249.507449][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.532294][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.553165][ T9] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 249.562231][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.574624][ T9] usb 2-1: config 0 descriptor?? [ 249.602610][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.626132][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.644476][ T92] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 249.822703][ T92] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.834342][ T92] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 249.849631][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.859023][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 249.870440][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 249.886093][ T92] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.895318][ T92] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.903985][ T92] usb 5-1: Product: syz [ 249.908454][ T92] usb 5-1: Manufacturer: syz [ 249.944139][ T92] cdc_wdm 5-1:1.0: skipping garbage [ 249.949708][ T92] cdc_wdm 5-1:1.0: skipping garbage [ 249.969309][ T92] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 249.975913][ T92] cdc_wdm 5-1:1.0: Unknown control protocol [ 250.366729][ T8228] fuse: Unknown parameter '' [ 250.468230][ T8230] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 250.485055][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 250.538174][ T30] audit: type=1400 audit(2000000177.250:475): avc: denied { read write } for pid=8217 comm="syz.4.576" name="cdc-wdm0" dev="devtmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 250.578616][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 250.715720][ T30] audit: type=1400 audit(2000000177.260:476): avc: denied { open } for pid=8217 comm="syz.4.576" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 251.371685][ T841] usb 3-1: USB disconnect, device number 28 [ 252.523211][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 252.698759][ T92] usb 5-1: USB disconnect, device number 13 [ 253.083529][ T30] audit: type=1400 audit(2000000179.750:477): avc: denied { getopt } for pid=8252 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.137696][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 253.151555][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.152862][ T30] audit: type=1400 audit(2000000179.770:478): avc: denied { execute } for pid=8252 comm="syz.3.585" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.215513][ T9] usb 2-1: USB disconnect, device number 19 [ 253.253159][ T92] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 253.415695][ T92] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 253.441790][ T92] usb 5-1: config 0 has no interface number 0 [ 253.453637][ T92] usb 5-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.483999][ T92] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 253.493895][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.522219][ T92] usb 5-1: config 0 descriptor?? [ 253.827606][ T8263] Can't find a SQUASHFS superblock on nullb0 [ 253.870742][ T92] usb 5-1: USB disconnect, device number 14 [ 255.477339][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.531858][ T30] audit: type=1400 audit(2000000183.130:479): avc: denied { watch } for pid=8277 comm="syz.3.591" path="/130/file1" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 256.802785][ T30] audit: type=1400 audit(2000000183.130:480): avc: denied { watch_sb watch_reads } for pid=8277 comm="syz.3.591" path="/130/file1" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.267079][ T5834] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 257.301642][ T30] audit: type=1400 audit(2000000184.020:481): avc: denied { getopt } for pid=8303 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 257.685868][ T5834] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.695256][ T5834] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.715787][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.746560][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.760334][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.817714][ T5834] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.831161][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.848204][ T5834] usb 2-1: Product: syz [ 257.857830][ T5834] usb 2-1: Manufacturer: syz [ 257.873414][ T92] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 257.912777][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 257.923156][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 257.950697][ T5834] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 257.969414][ T5834] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.085082][ T92] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 258.093425][ T92] usb 4-1: config 0 has no interface number 0 [ 258.099654][ T92] usb 4-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.143019][ T92] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 258.152645][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.181909][ T92] usb 4-1: config 0 descriptor?? [ 258.283340][ T841] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 258.401346][ T5908] usb 4-1: USB disconnect, device number 14 [ 258.446219][ T841] usb 3-1: Using ep0 maxpacket: 8 [ 258.460953][ T841] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 258.472887][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 4 bytes [ 258.472970][ T841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.496301][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 258.510895][ T841] usb 3-1: Product: syz [ 258.519675][ T30] audit: type=1400 audit(2000000185.230:482): avc: denied { read } for pid=8318 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.541900][ T841] usb 3-1: Manufacturer: syz [ 258.547295][ T841] usb 3-1: SerialNumber: syz [ 258.565829][ T841] usb 3-1: config 0 descriptor?? [ 258.584326][ T841] gspca_main: 2770:9120 too many config [ 258.821533][ T8309] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 258.829465][ T8309] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 259.326108][ T841] usb 3-1: USB disconnect, device number 29 [ 259.938866][ T9] usb 2-1: USB disconnect, device number 20 [ 260.948069][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 260.956969][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 261.037299][ T59] Bluetooth: Error in BCSP hdr checksum [ 261.264005][ T8359] siw: device registration error -23 [ 262.218986][ T8356] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 262.242019][ T6204] Bluetooth: hci6: Frame reassembly failed (-84) [ 262.921575][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 262.979580][ T8370] FAULT_INJECTION: forcing a failure. [ 262.979580][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.992148][ T8369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.993191][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.0.620 Not tainted syzkaller #0 PREEMPT(full) [ 262.993211][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.993219][ T8370] Call Trace: [ 262.993224][ T8370] [ 262.993230][ T8370] dump_stack_lvl+0x16c/0x1f0 [ 262.993255][ T8370] should_fail_ex+0x512/0x640 [ 262.993278][ T8370] _copy_from_user+0x2e/0xd0 [ 262.993299][ T8370] video_usercopy+0xedd/0x1720 [ 262.993320][ T8370] ? __pfx___video_do_ioctl+0x10/0x10 [ 262.993336][ T8370] ? selinux_kernel_read_file+0x70/0x130 [ 262.993358][ T8370] ? __pfx_video_usercopy+0x10/0x10 [ 262.993390][ T8370] v4l2_ioctl+0x1bd/0x250 [ 262.993406][ T8370] ? __pfx_v4l2_ioctl+0x10/0x10 [ 262.993434][ T8370] __x64_sys_ioctl+0x18e/0x210 [ 262.993459][ T8370] do_syscall_64+0xcd/0x4e0 [ 262.993481][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.993496][ T8370] RIP: 0033:0x7f4e2a78eec9 [ 262.993509][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.993522][ T8370] RSP: 002b:00007f4e2b6a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.993537][ T8370] RAX: ffffffffffffffda RBX: 00007f4e2a9e6090 RCX: 00007f4e2a78eec9 [ 262.993547][ T8370] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000006 [ 262.993556][ T8370] RBP: 00007f4e2b6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.993564][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.993573][ T8370] R13: 00007f4e2a9e6128 R14: 00007f4e2a9e6090 R15: 00007ffd935b3c18 [ 262.993593][ T8370] [ 262.997624][ T8370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.620'. [ 263.174268][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 263.174294][ T5170] Bluetooth: hci4: command 0x1003 tx timeout [ 263.188839][ T8370] netlink: 43 bytes leftover after parsing attributes in process `syz.0.620'. [ 263.198742][ T8370] netlink: 'syz.0.620': attribute type 6 has an invalid length. [ 263.206652][ T8370] netlink: 43 bytes leftover after parsing attributes in process `syz.0.620'. [ 263.412625][ T8373] fuse: Unknown parameter '' [ 263.428800][ T8369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.519811][ T8376] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 263.529101][ T6204] Bluetooth: hci4: Frame reassembly failed (-84) [ 263.707338][ T8369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.837363][ T8369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.908698][ T8380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.971558][ T2108] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.991709][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.012417][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.032097][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.163385][ T5908] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 264.283543][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 264.350419][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 264.376036][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.434742][ T5908] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.450638][ T5908] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 264.470397][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.481563][ T5908] usb 2-1: Product: syz [ 264.486034][ T841] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 264.496685][ T5908] usb 2-1: Manufacturer: syz [ 264.501310][ T5908] usb 2-1: SerialNumber: syz [ 264.512786][ T5908] usb 2-1: config 0 descriptor?? [ 264.653252][ T841] usb 4-1: Using ep0 maxpacket: 16 [ 264.663943][ T841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.674078][ T841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.687583][ T841] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.698078][ T841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.715789][ T841] usb 4-1: config 0 descriptor?? [ 264.739037][ T841] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 265.577145][ T5850] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.844386][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 265.853631][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 266.026760][ T6204] Bluetooth: Error in BCSP hdr checksum [ 266.915832][ T92] usb 2-1: USB disconnect, device number 21 [ 267.827622][ T841] usb 4-1: USB disconnect, device number 15 [ 267.883516][ T5170] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 268.046269][ T5908] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 268.224851][ T5908] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.271268][ T5908] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 268.373564][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.397591][ T5908] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.510155][ T5908] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.529524][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.564145][ T5908] usb 3-1: Product: syz [ 268.568424][ T5908] usb 3-1: Manufacturer: syz [ 268.579999][ T5908] cdc_wdm 3-1:1.0: skipping garbage [ 268.645555][ T5908] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 269.074262][ T5834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 269.273282][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 269.287099][ T5834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 269.309397][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.363154][ T5834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 269.390860][ T5834] pvrusb2: ********** [ 269.397202][ T5834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 269.547204][ T8476] siw: device registration error -23 [ 270.382761][ T5834] pvrusb2: Important functionality might not be entirely working. [ 270.406501][ T5834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 270.526387][ T5834] pvrusb2: ********** [ 271.417921][ T5962] usb 3-1: USB disconnect, device number 30 [ 271.733448][ T92] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 271.837046][ T30] audit: type=1804 audit(2000000198.560:483): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.653" name="/newroot/122/file0" dev="tmpfs" ino=713 res=1 errno=0 [ 271.839422][ T8494] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 271.873858][ T8494] ref_ctr increment failed for inode: 0x2c9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801ee9cb40 [ 272.131393][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 272.138855][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.149109][ T92] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.164306][ T92] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 272.173542][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.183146][ T5962] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 272.200915][ T92] usb 4-1: config 0 descriptor?? [ 272.219934][ T92] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 272.560289][ T5962] usb 1-1: Using ep0 maxpacket: 8 [ 272.612794][ T5962] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 272.629447][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.637583][ T5962] usb 1-1: Product: syz [ 272.642350][ T5962] usb 1-1: Manufacturer: syz [ 272.648754][ T5962] usb 1-1: SerialNumber: syz [ 272.663289][ T5962] usb 1-1: config 0 descriptor?? [ 272.677604][ T5962] gspca_main: 2770:9120 too many config [ 272.859609][ T2337] pvrusb2: Invalid write control endpoint [ 272.877384][ T5834] usb 5-1: USB disconnect, device number 15 [ 272.953161][ T5962] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 272.977376][ T2337] pvrusb2: Invalid write control endpoint [ 272.986730][ T8492] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 273.001988][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 273.020854][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 273.030163][ T8492] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 273.042508][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 273.077015][ T2337] pvrusb2: Device being rendered inoperable [ 273.104199][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 273.115639][ T8512] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 273.132837][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 273.167898][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.172432][ T2337] pvrusb2: Attached sub-driver cx25840 [ 273.185773][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 273.197385][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 273.726209][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.749037][ T5962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.769669][ T5962] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.779374][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.799259][ T5962] usb 3-1: config 0 descriptor?? [ 273.810185][ T9] usb 1-1: USB disconnect, device number 23 [ 274.026569][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.656'. [ 274.173035][ T8501] netlink: 'syz.2.656': attribute type 3 has an invalid length. [ 275.159132][ T5962] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.800676][ T5834] usb 4-1: USB disconnect, device number 16 [ 275.811295][ T5962] usb 3-1: USB disconnect, device number 31 [ 301.527739][ C0] sched: DL replenish lagged too much [ 317.491476][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.352974][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 457.359940][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5219/1:b..l P6992/1:b..l [ 457.369394][ C1] rcu: (detected by 1, t=10502 jiffies, g=25621, q=1524065 ncpus=2) [ 457.377554][ C1] task:syz-executor state:R running task stack:23832 pid:6992 tgid:6992 ppid:6975 task_flags:0x400140 flags:0x00004002 [ 457.392096][ C1] Call Trace: [ 457.395396][ C1] [ 457.398335][ C1] __schedule+0x1190/0x5de0 [ 457.402877][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 457.407833][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 457.412786][ C1] ? __pfx___schedule+0x10/0x10 [ 457.417638][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 457.422596][ C1] ? mark_held_locks+0x49/0x80 [ 457.427374][ C1] preempt_schedule_irq+0x51/0x90 [ 457.432402][ C1] irqentry_exit+0x36/0x90 [ 457.436824][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.442810][ C1] RIP: 0010:unwind_next_frame+0xfe7/0x20a0 [ 457.448626][ C1] Code: 85 80 0c 00 00 49 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 56 10 00 00 <41> 39 5d 00 0f 84 10 06 00 00 bd 01 00 00 00 e9 de f3 ff ff 48 b8 [ 457.468323][ C1] RSP: 0018:ffffc90003097870 EFLAGS: 00000246 [ 457.474398][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91d32312 [ 457.482370][ C1] RDX: 1ffff92000612f1c RSI: 0000000000000001 RDI: 0000000000000001 [ 457.490342][ C1] RBP: ffffc90003097928 R08: ffffffff91d32316 R09: 0000000000000000 [ 457.498315][ C1] R10: 0000000000000001 R11: 0000000000086437 R12: ffffc90003097930 [ 457.506284][ C1] R13: ffffc900030978e0 R14: ffffc90003097f28 R15: ffffc90003097914 [ 457.514270][ C1] ? __x64_sys_socket+0x72/0xb0 [ 457.519126][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.525288][ C1] arch_stack_walk+0x94/0x100 [ 457.529970][ C1] ? do_syscall_64+0xcd/0x4e0 [ 457.534654][ C1] stack_trace_save+0x8e/0xc0 [ 457.539333][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 457.544706][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 457.549660][ C1] save_stack+0x160/0x1f0 [ 457.553985][ C1] ? __pfx_save_stack+0x10/0x10 [ 457.558829][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 457.564211][ C1] ? __put_partials+0x165/0x1c0 [ 457.569062][ C1] ? qlist_free_all+0x4d/0x120 [ 457.573819][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 457.579461][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 457.584497][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 457.590148][ C1] ? security_file_alloc+0x34/0x2b0 [ 457.595364][ C1] ? init_file+0x93/0x4c0 [ 457.599699][ C1] ? alloc_empty_file+0x73/0x1e0 [ 457.604729][ C1] ? alloc_file_pseudo+0x13a/0x230 [ 457.609863][ C1] ? sock_alloc_file+0x50/0x210 [ 457.614717][ C1] ? __sys_socket+0x1c0/0x260 [ 457.619389][ C1] ? __x64_sys_socket+0x72/0xb0 [ 457.624243][ C1] ? page_ext_put+0x3e/0xd0 [ 457.628749][ C1] __reset_page_owner+0x84/0x1a0 [ 457.633688][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 457.638901][ C1] __put_partials+0x165/0x1c0 [ 457.643597][ C1] qlist_free_all+0x4d/0x120 [ 457.648195][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 457.653653][ C1] __kasan_slab_alloc+0x69/0x90 [ 457.658506][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 457.663963][ C1] ? security_file_alloc+0x34/0x2b0 [ 457.669168][ C1] security_file_alloc+0x34/0x2b0 [ 457.674195][ C1] init_file+0x93/0x4c0 [ 457.678352][ C1] alloc_empty_file+0x73/0x1e0 [ 457.683115][ C1] alloc_file_pseudo+0x13a/0x230 [ 457.688059][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 457.693520][ C1] ? alloc_fd+0x471/0x7d0 [ 457.697853][ C1] sock_alloc_file+0x50/0x210 [ 457.702532][ C1] __sys_socket+0x1c0/0x260 [ 457.707031][ C1] ? __pfx___sys_socket+0x10/0x10 [ 457.712048][ C1] ? dnotify_flush+0x79/0x4c0 [ 457.716733][ C1] __x64_sys_socket+0x72/0xb0 [ 457.721581][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.726784][ C1] do_syscall_64+0xcd/0x4e0 [ 457.731295][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.737195][ C1] RIP: 0033:0x7f30b1990de7 [ 457.741610][ C1] RSP: 002b:00007ffce4458e48 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 457.750034][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f30b1990de7 [ 457.758013][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 457.765983][ C1] RBP: 00007ffce445957c R08: 0000000000000000 R09: 00007ffce4459287 [ 457.773959][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f30b1bb2ca0 [ 457.781932][ C1] R13: 00000000000927c0 R14: 0000000000043a0e R15: 00007f30b1bb4e60 [ 457.789957][ C1] [ 457.792973][ C1] task:udevd state:R running task stack:26200 pid:5219 tgid:5219 ppid:1 task_flags:0x400140 flags:0x00004002 [ 457.806460][ C1] Call Trace: [ 457.809740][ C1] [ 457.812670][ C1] __schedule+0x1190/0x5de0 [ 457.817182][ C1] ? __lock_acquire+0x620/0x1ce0 [ 457.822139][ C1] ? __pfx___schedule+0x10/0x10 [ 457.827002][ C1] ? mark_held_locks+0x49/0x80 [ 457.831773][ C1] preempt_schedule_irq+0x51/0x90 [ 457.836799][ C1] irqentry_exit+0x36/0x90 [ 457.841217][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 457.847190][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 457.852385][ C1] Code: 19 3f 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 c2 9f 13 0f 0f 82 74 02 00 00 8b 35 7a d1 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 19 3f 12 0f 85 c7 02 00 00 48 83 c4 [ 457.871995][ C1] RSP: 0018:ffffc90003637478 EFLAGS: 00000206 [ 457.878064][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c16a0 RCX: 00000000fdedef1f [ 457.886033][ C1] RDX: 0000000000000000 RSI: ffffffff8de2da30 RDI: ffffffff8c163380 [ 457.894001][ C1] RBP: 0000000000000002 R08: 8bfc3957ff8205e7 R09: 0000000000000000 [ 457.901972][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 457.909943][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.917931][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 457.923139][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.929332][ C1] unwind_next_frame+0xd1/0x20a0 [ 457.934278][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 457.939390][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 457.944778][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 457.950971][ C1] arch_stack_walk+0x94/0x100 [ 457.955656][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 457.961045][ C1] stack_trace_save+0x8e/0xc0 [ 457.965732][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 457.971113][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 457.976067][ C1] save_stack+0x160/0x1f0 [ 457.980396][ C1] ? __pfx_save_stack+0x10/0x10 [ 457.985244][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 457.990638][ C1] ? page_ext_put+0x3e/0xd0 [ 457.995182][ C1] __reset_page_owner+0x84/0x1a0 [ 458.000122][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 458.005332][ C1] __put_partials+0x165/0x1c0 [ 458.010020][ C1] qlist_free_all+0x4d/0x120 [ 458.014609][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 458.020074][ C1] __kasan_slab_alloc+0x69/0x90 [ 458.024926][ C1] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 458.030302][ C1] ? kernfs_fop_open+0xa3a/0xda0 [ 458.035240][ C1] kernfs_fop_open+0xa3a/0xda0 [ 458.040007][ C1] do_dentry_open+0x97f/0x1530 [ 458.044770][ C1] ? __pfx_kernfs_fop_open+0x10/0x10 [ 458.050056][ C1] vfs_open+0x82/0x3f0 [ 458.054133][ C1] path_openat+0x1de4/0x2cb0 [ 458.058759][ C1] ? __pfx_path_openat+0x10/0x10 [ 458.063699][ C1] do_filp_open+0x20b/0x470 [ 458.068204][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 458.073245][ C1] ? alloc_fd+0x471/0x7d0 [ 458.077580][ C1] do_sys_openat2+0x11b/0x1d0 [ 458.082260][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.087464][ C1] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 458.093538][ C1] __x64_sys_openat+0x174/0x210 [ 458.098393][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.103776][ C1] do_syscall_64+0xcd/0x4e0 [ 458.108286][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.114179][ C1] RIP: 0033:0x7f319aea7407 [ 458.118592][ C1] RSP: 002b:00007ffc15434690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 458.127009][ C1] RAX: ffffffffffffffda RBX: 00007f319b615880 RCX: 00007f319aea7407 [ 458.134979][ C1] RDX: 0000000000080000 RSI: 00007ffc15434810 RDI: ffffffffffffff9c [ 458.142947][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 458.150921][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000056396296b7f5 [ 458.158889][ C1] R13: 000056396296b7f5 R14: 0000000000000001 R15: 00007ffc15438e60 [ 458.166878][ C1] [ 458.169895][ C1] rcu: rcu_preempt kthread starved for 1631 jiffies! g25621 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 458.181001][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 458.190973][ C1] rcu: RCU grace-period kthread stack dump: [ 458.196856][ C1] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 458.210354][ C1] Call Trace: [ 458.213633][ C1] [ 458.216564][ C1] __schedule+0x1190/0x5de0 [ 458.221086][ C1] ? __pfx___schedule+0x10/0x10 [ 458.225939][ C1] ? find_held_lock+0x2b/0x80 [ 458.230623][ C1] ? schedule+0x2d7/0x3a0 [ 458.234958][ C1] schedule+0xe7/0x3a0 [ 458.239024][ C1] schedule_timeout+0x123/0x290 [ 458.243871][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 458.249265][ C1] ? __pfx_process_timeout+0x10/0x10 [ 458.254556][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 458.260363][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 458.265832][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 458.270597][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 458.275882][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 458.281080][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 458.286010][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 458.290863][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 458.296672][ C1] rcu_gp_kthread+0x270/0x380 [ 458.301352][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.306547][ C1] ? rcu_is_watching+0x12/0xc0 [ 458.311314][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 458.316514][ C1] ? __kthread_parkme+0x19e/0x250 [ 458.321548][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 458.326750][ C1] kthread+0x3c2/0x780 [ 458.330820][ C1] ? __pfx_kthread+0x10/0x10 [ 458.335409][ C1] ? rcu_is_watching+0x12/0xc0 [ 458.340173][ C1] ? __pfx_kthread+0x10/0x10 [ 458.344761][ C1] ret_from_fork+0x56a/0x730 [ 458.349348][ C1] ? __pfx_kthread+0x10/0x10 [ 458.353937][ C1] ret_from_fork_asm+0x1a/0x30 [ 458.358715][ C1] [ 458.361725][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 458.368039][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 458.376999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 458.387056][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 458.392702][ C1] Code: 3d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 16 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 458.412317][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 458.418390][ C1] RAX: 0000000001eac591 RBX: 0000000000000001 RCX: ffffffff8b94fb49 [ 458.426368][ C1] RDX: 0000000000000000 RSI: ffffffff8de52fc1 RDI: ffffffff8c163380 [ 458.434440][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 458.442422][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 458.450399][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab7690 R15: 0000000000000000 [ 458.458379][ C1] FS: 0000000000000000(0000) GS:ffff8881247b1000(0000) knlGS:0000000000000000 [ 458.467319][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.473910][ C1] CR2: 000055556b7d35c8 CR3: 000000004e7e5000 CR4: 00000000003526f0 [ 458.481887][ C1] Call Trace: [ 458.485165][ C1] [ 458.488090][ C1] default_idle+0x13/0x20 [ 458.492426][ C1] default_idle_call+0x6d/0xb0 [ 458.497190][ C1] do_idle+0x391/0x510 [ 458.501265][ C1] ? __pfx_do_idle+0x10/0x10 [ 458.505856][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 458.511056][ C1] cpu_startup_entry+0x4f/0x60 [ 458.515819][ C1] start_secondary+0x21d/0x2b0 [ 458.520615][ C1] ? __pfx_start_secondary+0x10/0x10 [ 458.525911][ C1] common_startup_64+0x13e/0x148 [ 458.530860][ C1] [ 459.158656][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.369774][ T1299] ieee802154 phy1 wpan1: encryption failed: -22