last executing test programs: 23.358433497s ago: executing program 2 (id=265): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 22.897661205s ago: executing program 1 (id=266): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) r0 = openat2(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', &(0x7f0000001180)={0x4100, 0x20, 0x2744f4dd411f17b9}, 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000011c0)=0xb0000) setpgid(0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001040)={0x0, 0xe, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x60, 0xa, 0xbc, {0xbc, 0x33, "d3e4c13d09debc8ad91fd0c4faac837148e07b7ecc10e957566488a05dd7d44132e0683e26081661207ef6040ddb9569bc5d1f6054cef1389df97b29b0909452e2e094e69e06de98f29ca41c501ff324f68adf12915650d90655e78f4319c98aca1eb0f952906e27e866e34982e7d0f3f304506e1d4ade219d4899d0372a42a966b30aceeadc943ac0927fb838380352bf1ad33878da24e812899602e793e8fe6cb6b024fa8d5dc995677042399c251b7b728b3b5449a63d27e6"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0xa, 0xae, "98f2bbdcf47e8ae5740f452c53490d8109e91b0bfc52e368d34760d804d5a6fa86a2d33b288b081beeff218f3cba3c785134f5de4cf414d83a4eba6279efb5195e6c60bb5774428e5025dd9ef6bf09ff68353a2d72f6ab30684b92841719c5594c5c61ef8e4766d8b596f2a89ac3864e37275e5569316d64f3cea9d659d27b299589fd6718a4732f0de8ec50cc4c7d38dd213492f1f6d281e1bda885cfb8beeb55cd42fb3216758871fc7ccb6996"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3893, 0x5, 0x0, 0x0, 0xfffc, 0x1000, 0x3, 0x3, 0x6, 0x1000, 0x5, 0x8}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xa5}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x40, 0x10}}, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0xb, 0x2, "84ea"}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0xb5}}) syz_usb_control_io$printer(r2, &(0x7f0000000740)={0x14, &(0x7f0000000c00)={0x40, 0x23, 0x9a, {0x9a, 0xa51899e5f461c5de, "6757b7d0f599e0069fe066ca4c7b7323a7553b547a44600788bf12ef76ed0b8a2102578a3143c59c4f2840f863e05662e2e85fbe3899583dba8d830f5f5eed8d310292b50cc6cf72fe0ed700a00c94c89b01506f5eb77e14ac7d8a171236b6ce0320dc5659b7fb1e20576e80d64124dfdeab0a97552c30f9429aa3b602c0d3d439a6a7d0100ae15cf7f9d52afc822dea166a00ae1fd13a7b"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "d52fb6bfab8c39d44753e588e376014095115ceb8c0bbf15c417d37e8dba70c6f709f275693d76a3fbc76d8254c92963c1078b58f52f61d563b8d131c3854856f8a30400000000000000da4d22004c2f0ff82573c323a5c822b71857f7b82bfa3b8430f1ed7f0e6edc7726c80000000000000000"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000d80)={0x0, 0x9, 0xcc, "86ffa73efdbbdbdbe57c23b47a52c58e0d349794a6754f244f52edf790463760244d976cefb1874c119a6c30e20a6df6a7bb67fe8df0f9c8fbb7cd1fa80e4b9753165a770d0e788d9b1daabee971e908d4ff31fc09f53fc63597037a4ba0a892db33d42c47ad5ae05dc2669f35dbb79a97fea6455fb2a6001f7bdf15f2417ccf97d9689b273d7e586203476fd4bb16c5c2b4db7d68f41df1d7fb7a891fa89fe96cddd2b60e870f0d03e2dfac2533fd25f9453f4516a2bdd4527fb89187ff6757280df4742b55874fa6b949ce"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x7c, {0x7a, "be77ad9eafe7a23b3c33c6a4fa3c4ecc39e9e26e9fbc71d6cc552b5dcbd8df4512d3d014082d923eea59d40a4d7742ac46d9a13f4ea1b393ba5b6cdf2e959a6f24192456abfdadcdc18031c1ef55a70f371da915feced447695741ab7a73cfc2713842222e8aa5e32b4d434018d5a767203a0e4021e4990f6502"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0xd6}, &(0x7f0000000fc0)={0x20, 0x0, 0x1}}) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_io_uring_setup(0x5ee, &(0x7f0000000600)={0x0, 0xdb6d, 0x1000, 0xfffffffe, 0x109}, &(0x7f0000000680), &(0x7f00000006c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) 22.132513131s ago: executing program 2 (id=267): getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500e50226bd70000000000007000c00", @ANYRES32=r2, @ANYBLOB="6d6e01"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000914) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) poll(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = syz_open_dev$media(&(0x7f0000000280), 0xfffffffffffffffa, 0xe0160) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0) syz_clone(0x24004000, 0x0, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') pread64(r8, &(0x7f0000000080)=""/196, 0xc4, 0x3) 18.346614685s ago: executing program 0 (id=275): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) r2 = gettid() capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x3) 17.882842012s ago: executing program 3 (id=277): r0 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x4100d, 0x0, 0x0, 0x5, 'syz0\x00', 0xffffffff}, 0x3, 0x10, 0xffffffff, r0, 0x0, 0x10, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x4100d, 0x0, 0x0, 0x5, 'syz0\x00', 0xffffffff}, 0x3, 0x10, 0xffffffff, r0, 0x0, 0x10, 'syz1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private1, @multicast2, 0x13, 0xffff}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_open_dev$MSR(&(0x7f0000000200), 0x8, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x8, 0x0) read$msr(r3, &(0x7f00000004c0)=""/4096, 0x1000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0xed, 0xc, 0x0, 0x1, 0x40, 0x2, 0x5}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0xed, 0xc, 0x0, 0x1, 0x40, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff9, 0x4031, 0xffffffffffffffff, 0xb7b56000) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff9, 0x4031, 0xffffffffffffffff, 0xb7b56000) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000001c0)={0xdddd1000, 0x4, 0x3, 0x0, 0x80000001}) 16.883829366s ago: executing program 0 (id=278): syz_open_dev$sg(0x0, 0x0, 0x140) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0xf4, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2], 0x119) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000900)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) connect$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2, 0x1}}, 0x10) 16.566110716s ago: executing program 2 (id=279): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x720) execveat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000800)={[&(0x7f00000004c0)='#\\\x00', &(0x7f0000000680)='/dev/ptmx\x00', &(0x7f0000000700)='l2tp\x00', &(0x7f0000000740)='+[]]%\x00', &(0x7f00000007c0)='-){{w\x00']}, &(0x7f0000000880)={[&(0x7f0000000840)='\x00']}, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0x15, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea8000000000d000000000000deff00000000000000000000000000a26c8f00", "28090f00e1080389482d0000b420a1a93c7540f4767f4101177d000000000001000000100000000000000000000400000100", "90be8b1c55f9640000000000000000000000000000005d00", [0x800]}}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r6, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) close_range(r0, 0xffffffffffffffff, 0x3e000000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000008c0)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x80c, 0x3, 0x1c, 0x7, 0x1, 0x13, 0x3, 0xe9, 0x1, 0x9, 0x4, 0x6}, {0x6, 0x6, 0xa, 0xc1, 0x4, 0x1, 0x47, 0xf1, 0x7, 0x8b, 0x44, 0x7d, 0x3fffffffffe}, {0x7fffffff, 0x8, 0x1, 0x5, 0x4, 0x9, 0x8, 0xf8, 0x5, 0x6, 0x3, 0x3, 0x4}], 0x800000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r8, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00', @ANYRES16=r9, @ANYBLOB="00092229012dbd7000fcdbdf250c000000080019006401ae47d9f7a34b4901000d00865d000000000000000024000063c60a3c70356a00260003000b0000000c003249529944d0392a000005dabc2cf087c2d8cb4c1fb330f1e09d428a8ecd960aa01a398199b1f71d7ae930baeea17caf7f4a079743ee50e3f0330116a1f9caa1862d562e2fe0f5a7a7315284c6c6522078172c4650844ad4ee12af1d55cc6e90b4c55b4653a21b7b421a4573438477a5d998c0a4b430165432bda154"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x44050) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x868d, 0x2, 0xe, 0x8, "1398fc0e87d824eda37085236ae9a82491ee07dbf196b9a270b3d32a3f9d0aab980132e2d526bf03b726e85607d78b63087c3952b968934849d8d0ec1caeece7", "d5aa7abd3e65231db1b9fdc65cced93f7c4162a10ebc590d379381c163835668", [0x40000000, 0x4]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 16.197096528s ago: executing program 0 (id=280): syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES16], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xfffefffd}}], 0x18}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 14.406188998s ago: executing program 3 (id=281): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') epoll_create1(0x80000) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x610) socket(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000002812070008001300", @ANYRES32=r5, @ANYBLOB="28000f0004000000"], 0x30}}, 0x4004090) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023892) 14.246280231s ago: executing program 4 (id=282): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000003e0007012bbd7071c7037e2820775000000400fc80"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="56827991aa676b4b32d4150cc4af208d9e9a780653e7db3c2482eced", 0x1c}, {&(0x7f0000000100)="88b9a0bb3156b40ad18f99d5cb39f4025188bf0d7adf6c48c28f917493eeefac1349e134d4635a6dd4d1474562560096c5dee1dfae8fcaadf8bd6eb1fda80de98792e19eb547d452b238fb1dfea1dcf83f45afa5f917", 0x56}, {&(0x7f0000000240)="34e55b55247be5f4d1d7bc625948f8370779908d5de317f2626914dc320828578fba13ceefa83df9fbc869c5adff61b450bcfe4226d883f0a83da9e36e33f4bd4adf1ae1c4fcf7a370a9071bf754af8ec59bc733cdcbdee6f2635a1ebb249bb435c72a0afe64d29e7726d90d073846035cb440d2ab06ecad23aa32ee3088ef87379bdefa0f613ce5fc47b733e75293ebb9cdb42f95d7dd977c56d1da5e19cce024e9843898f6977131021a699cda680e2379682e40dbcd9952b1f2245d33b4afcac972172d46b51f6d999dffba4fd78ca06f9deee394e9f8640a", 0xda}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x390}, 0x40040) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESOCT=r0], 0x50}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffe, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) 11.715878018s ago: executing program 2 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0x5, 0x20800) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f00000005c0)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb30000000000000000f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafc07000000000000006232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b003a9498097e7ceeef3dd32fa7f095961e0fd177ade538b8e296688cb9dd0a4164af7d281fac82e8c814960b3ac0812363760fdbbca96983b6b02bdf37ef6d8f29c24777afb60fd7ce7304eaa5cde059d4ec63c18ad9a76d0864c5c0d04cf0d7928", 0xd4}, {&(0x7f0000001280)="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", 0x21d}, {&(0x7f0000000cc0)="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", 0x146}, {&(0x7f0000000b00)="15c84609b06c6d85a5ca6f3a9a242f214aee93161b717090c0c852a05393abd8992d91576f57bbd3488e85d845", 0x2d}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 11.221258882s ago: executing program 3 (id=284): syz_emit_ethernet(0x2b, &(0x7f0000001400)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9, 0x0, @opaque='.'}}}}}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x3, 0xfffffffd) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42"}}}}}, 0x0) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0xfdff, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @random="e45adc42531e", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 10.420819838s ago: executing program 1 (id=285): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfff5, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.123779625s ago: executing program 2 (id=286): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304"], 0x0) syz_usb_connect(0x0, 0x3fc, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x35, 0x6a, 0xec, 0x20, 0xc52, 0x2883, 0x2e84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ea, 0x1, 0x27, 0x2, 0x10, 0x40, [{{0x9, 0x4, 0xfb, 0x7f, 0xe, 0xc7, 0x33, 0xb2, 0x8, [], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x9, 0x6, 0x81, [@generic={0x39, 0x10, "39dc490ac1b1fbe06b4f6f49b333c1fd7976bcdefb7cfa27fed680b5dc1229b7a53b36401d982cf177fb2255414fe0f470ffa4fa23b7e7"}, @uac_iso={0x7, 0x25, 0x1, 0x182, 0xf, 0xc}]}}, {{0x9, 0x5, 0x6, 0x10, 0x640, 0x80, 0x0, 0x7, [@generic={0xae, 0x2, "273fb29024f67d07a1d35a879acd2b24b282ba1c42d8ad316f954aabd4ffaa0d71c7bd0e58e67a2c1cb09778ef5463ffc29e71a2b46411e662accb19943f0b8195a61f16aa51cd3ec0417ce3c465e79072d9cd8522d350e3eabbc229a3dcee2cd7562a28ec3809f92e021ef220cf1c31b1dec62a8c90a141728031e44a6dea4744cb3b76af5a4014d4acab182498ade57331df21120f3966b33d6ea15c270a40767112fa319be0d0cca69e92"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x1, 0x4, 0x0, [@generic={0x2f, 0xd, "4336e99dc2b78060959bfed4b8de8b03196182884257d93d7ebae43f8b4b6ebd555d475175295dee0b4352ccdd"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0xdc, 0x24, [@generic={0xae, 0x3, "5ad8c59dd1fa213e48db197b42d42af4d65076be298d28c91b0d903d7facf8273d358876d12a69a88bae71d4a849338067ad893cb4a5798d54e8c1912c7b01a320bce526357ab58685757e3ac9bbfb1440fb76d4cd52bfdf6c12b15d883f992972dbe183131ff59de09a59c7dc5ff506e3fecf84cc323f42e320104234f6d80212fa11d6450a674951f9d35dbdfbf21c09fd225e562e4839736498fed0aedd3d7e9b5499f280c5fc00906048"}, @generic={0xcd, 0xc, "cdc405d7858b7593bb253e01c1791fd2374f62e69e4037ce33f5c294c4ed7f5c9465360cc90cb0393922ad38069c37bc9066251cc1fc96dae06d3858c5b249bc9854f91f2643121fd9174523520ab7dd9f4ff87c29dc76f182d96f6cce9fa40113805561531d87c594666dd8d9498255e03c9d6230ce4bfededcd40267b4a69a7003c54a7957551066e89e8970558ad173f2b655c74ed6895e28bccfbb31115d0e977986de4fbb72f96d2202d8cb63068320b1ef742e973557d9fd19d5d6835448807564f11d16b28261a3"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x5, 0x9, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfffd}, @generic={0x3c, 0x23, "59ce883a344a8f14c3d378ef1464828926a7857c374745933274bdbf3d1dad2dc180da98766fb389af50d1f8d16d55c4494b7c960ae57276a9de"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x10, 0x42, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2e, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7, 0xc1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x5}]}}, {{0x9, 0x5, 0x5, 0x1c, 0x20, 0x80, 0x1, 0x5a, [@generic={0x30, 0x21, "b8f78a445d696c26722788fa315f7e65f66edb36d84807668245491db02c813e79e2cd31f459b5426e46779a76c4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0x9, 0xe, 0x400, 0x3, 0x2, 0x0, [@generic={0x2, 0x24}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xff}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x201, 0x69, 0x9, 0x3, 0x40, 0x2}, 0x38, &(0x7f0000000800)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x97, "34724e12115c0c9f56e1aa50ae1d17de"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x81, 0xe, 0x7, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7827e5c56a9b40edeef943d7171e191e"}]}, 0x8, [{0xa5, &(0x7f0000000840)=@string={0xa5, 0x3, "58bad816148fb19b6cc9ca40af1f8087409bd45d20509d7a18a869911f84094f639839b684d3333c1324801a589408ce49224db121ce67a35920801129eecb6f6df6925cd00f759294898d8febfc6abf9930e00e005f6214e3affaede1fecbce6141b63cfbf074e8250c3da1544db96c2f108686bfa759dac5a4753cdf6005bbcb4b283ed2aa9dec4bf6fd9f3ea0ba98552bccfa84260f6b5276fa59acf4fa10b1a807"}}, {0x5e, &(0x7f0000000900)=@string={0x5e, 0x3, "dc2df04f612223c2c9dd9bf19cd313d41faf415a272cb0d4e5209f35f5139e31c0639b440c7a426c213215b97b5df4fb1c0aa388c405cf6dc94c676a8d4718949dbce9f4e5cedbf96ea5826f731dfaa2d17fb3a9b3c46c77254587b2"}}, {0xe6, &(0x7f0000000980)=@string={0xe6, 0x3, "74f532f23df3425d85e9696f24a0e6c60c8cff65469d2b0cb60446b704ccf4b66d39f8ad52ae8cbe7ab3a64072d8d09aff94ee8f6d657129fd6940454210ffe83db74d17c47e6b67c681048ae49d4c282f7324f6a0d55cab15126cf6cc604225673cc1b69ef0506dbfca1ebf5673e98d5523abaafc50e3298663e221615c2fc0d3ca71b36d5850255b27073c610ea22ad63f256c57482a4597f5e0774d37c24152c4db81ad4bb006a1bcc51ce8df51fbf11f1d290f2cd177c49ccd092e52526d9377549092187707981b249c9f6ffde538732d0b2fb581070fde5579f44a4fab4803d379"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x457}}, {0x57, &(0x7f0000000b00)=@string={0x57, 0x3, "1222963b81b7e2c1300bfede1f0a8b5d141b943d249311bc6ce304884e504523705393414c05f568202813e18ad0618ced894c136d219a41d06e33f7990b815cfce69062deed23f77d469212267ab3f909a65e18f7"}}, {0x47, &(0x7f0000000b80)=@string={0x47, 0x3, "1d9044cebca4dfd7253fdc95933c7f0a15f2702244772716f87f7232bc934778eb8ff95b45bfed53e8a7754ef1f293870e0e6f7b3fb3cb9906773785b08904b65040e4f35f"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9.726744319s ago: executing program 3 (id=287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f00ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010004000000159b0000340000003400000006000000040017000000000e04000000000000000000000000e60300431700040000000000000003000000000000006100e31300929b2218380700"], 0x0, 0x52}, 0x28) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/85, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000040)={0x1}) socket$pptp(0x18, 0x1, 0x2) r4 = shmget$private(0x0, 0x2000, 0x1886, &(0x7f0000c00000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000002000/0x3000)=nil, 0x2) 9.437093151s ago: executing program 0 (id=288): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="180000003e0007012bbd7071c7037e2820775000000400fc80"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="56827991aa676b4b32d4150cc4af208d9e9a780653e7db3c2482eced", 0x1c}, {&(0x7f0000000100)="88b9a0bb3156b40ad18f99d5cb39f4025188bf0d7adf6c48c28f917493eeefac1349e134d4635a6dd4d1474562560096c5dee1dfae8fcaadf8bd6eb1fda80de98792e19eb547d452b238fb1dfea1dcf83f45afa5f917", 0x56}, {&(0x7f0000000240)="34e55b55247be5f4d1d7bc625948f8370779908d5de317f2626914dc320828578fba13ceefa83df9fbc869c5adff61b450bcfe4226d883f0a83da9e36e33f4bd4adf1ae1c4fcf7a370a9071bf754af8ec59bc733cdcbdee6f2635a1ebb249bb435c72a0afe64d29e7726d90d073846035cb440d2ab06ecad23aa32ee3088ef87379bdefa0f613ce5fc47b733e75293ebb9cdb42f95d7dd977c56d1da5e19cce024e9843898f6977131021a699cda680e2379682e40dbcd9952b1f2245d33b4afcac972172d46b51f6d999dffba4fd78ca06f9deee394e9f8640a", 0xda}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x390}, 0x40040) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRESOCT=r0], 0x50}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffe, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) 9.334493119s ago: executing program 4 (id=289): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_usb_connect(0x0, 0x1d7, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x50, 0x31, 0x70, 0x8, 0x1bc7, 0x1031, 0x46fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c5, 0x1, 0x0, 0xa, 0x0, 0x7, [{{0x9, 0x4, 0xaa, 0x0, 0x4, 0xff, 0x8e, 0xe0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xd}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x0, "0b86b7a7"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x5, 0x1, [0x4], 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x4, 0x2, [0x3, 0x3], 0x87}]}], [{{0x9, 0x5, 0x2, 0xc, 0x200, 0x10, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}, @generic={0x9, 0x5, "3344587ee8d04d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x1, 0xc}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xff, 0x2, 0x6, [@generic={0x33, 0x22, "7b4dac9a3095e5af2f8fd661e3dad5c3bc36ea33649089c64e37ce90bccf3136d2d42f17c7f5afcf14cd4f7c83c8cda210"}, @generic={0x74, 0x10, "60267b7257292b8ebe9e741609ec05a2604b5e12c195f9b5bd10ccab615381210aba11d7dfbeedc594a6c6d269b8df6fa0552d5a7f7546855745cb4559f746fa0c24b717866ebbd1c1b58f2c4ee40ae62bba9dc6c8654998011d46c49b31c8904e9d862fddd80f0a46f9253198f7f3e16b82"}]}}, {{0x9, 0x5, 0x1, 0x6, 0x400, 0x7, 0x0, 0xe, [@generic={0xa6, 0x22, "622e025cd10b9fd93d84572d05b10754b231a680e4ad5a09001b73ca990804ec36da76d5ed8cf38f93e16acc571f5358792de89c5cbcb97671918b710f1550e71b99f98ee7740704f62c12fee762879c3575ee8a8f4f1c5a17b29c0125b1408970cc72d58969aa8cd6cdf0f617ebd106e428c16446e2ee0d83b2288baf5bb9f7e092618392c95665034b5bd3e59ea5417de8fc987f7e95e247c20034a8f1e1b8addbe6b4"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xffff}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x9, 0x2, 0x9, 0x10, 0x8}, 0x104, &(0x7f0000000440)={0x5, 0xf, 0x104, 0x2, [@generic={0xeb, 0x10, 0x2, "8ea43b6e261fc81bfd0156b3eef379aae128d2e77c7ab6af43ecd246c05699ce4195e079f0c8ef19de0f1abf11fdf2483f8e907a2d37b52f81941d2f5613c28f6e12e618f1322b8e33145c6ee997da74f5aa005025ea3ae823666bd0a114375f41df1d9185bc7b3c8a50f85d8a414562ff7a910493f41d346ee1ea2a9f36d2c3337d6b9176394817e72309d1c1596744f83ce627255fc597ce09c9271995695b304c5820950be886b6f4445d678c139bed7fbf636e64f3794c79b867b0b568b776dac72957c1f685fc586a7d632198a5e672e8d1b836182315f18a0298eba9f311877ddd3d3713ef"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "324a3203e0d88bd835bd1a47c635e4b5"}]}, 0x3, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x801}}, {0x74, &(0x7f00000000c0)=@string={0x74, 0x3, "bea4d7b7c95aea94666c19d53fb519dc21a9c53a5f705520cc8661e169e1b29bab09ef9beb87597cabb9583eb6643ef8982107394164bf2872201821b12643b659019e6e243944d86f05d6aae9fd82659a867ba010f4e3fe452987f81f5899aab009038053ecf2940a7e1eaa3ee72204fc64"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x804}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) write$dsp(r0, &(0x7f0000000140)="2f1966d9", 0x4) 8.279196756s ago: executing program 1 (id=290): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=0x38) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001b00)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040)) 7.204593314s ago: executing program 1 (id=291): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) writev(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) (fail_nth: 1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 6.916412783s ago: executing program 2 (id=292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x201}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x20000a}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4401000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb0086e475f1eab5ff447100"/73, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRESOCT=r0, @ANYRES8, @ANYRES32=r4], 0x144}, 0x1, 0x0, 0x0, 0x400c890}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xe0b, 0x300, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x54}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24000080) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socket$kcm(0x2, 0x3, 0x2) 5.626543326s ago: executing program 3 (id=293): openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x100}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000008f40), 0x8800, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01072cbd8d00fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) 5.376284774s ago: executing program 4 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) 5.118229227s ago: executing program 4 (id=295): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) r0 = openat2(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', &(0x7f0000001180)={0x4100, 0x20, 0x2744f4dd411f17b9}, 0x18) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000011c0)=0xb0000) setpgid(0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000001040)={0x0, 0xe, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x60, 0xa, 0xbc, {0xbc, 0x33, "d3e4c13d09debc8ad91fd0c4faac837148e07b7ecc10e957566488a05dd7d44132e0683e26081661207ef6040ddb9569bc5d1f6054cef1389df97b29b0909452e2e094e69e06de98f29ca41c501ff324f68adf12915650d90655e78f4319c98aca1eb0f952906e27e866e34982e7d0f3f304506e1d4ade219d4899d0372a42a966b30aceeadc943ac0927fb838380352bf1ad33878da24e812899602e793e8fe6cb6b024fa8d5dc995677042399c251b7b728b3b5449a63d27e6"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0xa, 0xae, "98f2bbdcf47e8ae5740f452c53490d8109e91b0bfc52e368d34760d804d5a6fa86a2d33b288b081beeff218f3cba3c785134f5de4cf414d83a4eba6279efb5195e6c60bb5774428e5025dd9ef6bf09ff68353a2d72f6ab30684b92841719c5594c5c61ef8e4766d8b596f2a89ac3864e37275e5569316d64f3cea9d659d27b299589fd6718a4732f0de8ec50cc4c7d38dd213492f1f6d281e1bda885cfb8beeb55cd42fb3216758871fc7ccb6996"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3893, 0x5, 0x0, 0x0, 0xfffc, 0x1000, 0x3, 0x3, 0x6, 0x1000, 0x5, 0x8}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0xa5}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x40, 0x10}}, 0x0, 0x0, &(0x7f00000003c0)={0x40, 0xb, 0x2, "84ea"}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x17, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0xb5}}) syz_usb_control_io$printer(r2, &(0x7f0000000740)={0x14, &(0x7f0000000c00)={0x40, 0x23, 0x9a, {0x9a, 0xa51899e5f461c5de, "6757b7d0f599e0069fe066ca4c7b7323a7553b547a44600788bf12ef76ed0b8a2102578a3143c59c4f2840f863e05662e2e85fbe3899583dba8d830f5f5eed8d310292b50cc6cf72fe0ed700a00c94c89b01506f5eb77e14ac7d8a171236b6ce0320dc5659b7fb1e20576e80d64124dfdeab0a97552c30f9429aa3b602c0d3d439a6a7d0100ae15cf7f9d52afc822dea166a00ae1fd13a7b"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "d52fb6bfab8c39d44753e588e376014095115ceb8c0bbf15c417d37e8dba70c6f709f275693d76a3fbc76d8254c92963c1078b58f52f61d563b8d131c3854856f8a30400000000000000da4d22004c2f0ff82573c323a5c822b71857f7b82bfa3b8430f1ed7f0e6edc7726c80000000000000000"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000d80)={0x0, 0x9, 0xcc, "86ffa73efdbbdbdbe57c23b47a52c58e0d349794a6754f244f52edf790463760244d976cefb1874c119a6c30e20a6df6a7bb67fe8df0f9c8fbb7cd1fa80e4b9753165a770d0e788d9b1daabee971e908d4ff31fc09f53fc63597037a4ba0a892db33d42c47ad5ae05dc2669f35dbb79a97fea6455fb2a6001f7bdf15f2417ccf97d9689b273d7e586203476fd4bb16c5c2b4db7d68f41df1d7fb7a891fa89fe96cddd2b60e870f0d03e2dfac2533fd25f9453f4516a2bdd4527fb89187ff6757280df4742b55874fa6b949ce"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x7c, {0x7a, "be77ad9eafe7a23b3c33c6a4fa3c4ecc39e9e26e9fbc71d6cc552b5dcbd8df4512d3d014082d923eea59d40a4d7742ac46d9a13f4ea1b393ba5b6cdf2e959a6f24192456abfdadcdc18031c1ef55a70f371da915feced447695741ab7a73cfc2713842222e8aa5e32b4d434018d5a767203a0e4021e4990f6502"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0xd6}, &(0x7f0000000fc0)={0x20, 0x0, 0x1}}) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_io_uring_setup(0x5ee, &(0x7f0000000600)={0x0, 0xdb6d, 0x1000, 0xfffffffe, 0x109}, &(0x7f0000000680), &(0x7f00000006c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) 2.54439753s ago: executing program 0 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.911548577s ago: executing program 1 (id=297): syz_emit_ethernet(0x2b, &(0x7f0000001400)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9, 0x0, @opaque='.'}}}}}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket(0x29, 0x3, 0xfffffffd) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42"}}}}}, 0x0) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @random="e45adc42531e", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 1.642162371s ago: executing program 3 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.624191545s ago: executing program 0 (id=299): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000040)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) r4 = socket$inet(0x2, 0x3, 0x9) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x9) fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) 1.260817409s ago: executing program 4 (id=300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'macvlan0\x00', {0x1003}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() socket$igmp(0x2, 0x3, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) 1.07148554s ago: executing program 1 (id=301): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=0x38) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001b00)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040)) 0s ago: executing program 4 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x884) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @pix={0x4, 0x2, 0xb5315258, 0x9, 0x0, 0x3, 0x9, 0x8, 0x1, 0x8, 0x1}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x84, 0x5, 0x9, 0x2, 0x779b58fe, {0x8, 0x0, 0x0, 0x4db, 0x1, 0x1ff}, {0xff, 0x2, 0x4, 0x6, 0x200, 0x7}, 0x401, 0x2, 0x1e}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xc858, 0x81, 0x7, 0x1, 0x5ba, 0x5, 0xfffffffc, 0xfffffffb, 0x29, 0x7, 0x6, 0x11, 0xa, 0x6, 0xfff, 0x3, 0x3, 0x10000000, 0x40, 0x81, 0x6, 0x4, 0x5, 0x5, 0x7ff, 0x7f, 0x7, 0x7, 0x8, 0xffffffff, 0x3, 0xfff, 0xfffffffa, 0x4, 0x0, 0xbee4, 0x7, 0x7f, 0xdee3, 0x7fffffff, 0x4, 0x10001, 0x5, 0x6, 0x5, 0x8001, 0x1a0, 0x9, 0x7, 0xb, 0x2, 0x24, 0x5, 0x8, 0x9, 0xfffffffb, 0x5, 0x7, 0x5, 0x7fffffff, 0x9, 0x4, 0x2, 0x4, 0xf85, 0x6, 0x3, 0x89b2, 0x0, 0x8000, 0x1, 0x3c3e0f73, 0x0, 0x5, 0x7, 0x0, 0x9, 0x200, 0x7, 0xa0b2, 0x0, 0x7f, 0x3, 0x3ca, 0x9, 0xffff, 0x7, 0x7, 0x8, 0xfa, 0x2, 0x1, 0x7ff, 0x1, 0x7, 0xffff7fff, 0xc, 0x4c4000, 0x3b1d, 0x1, 0x10, 0xf, 0x0, 0x7, 0xffffff7f, 0x3, 0x7fffffff, 0x8000, 0x3, 0x400, 0x200, 0x6, 0x10, 0x8001, 0x2, 0x1, 0x72fc, 0x4, 0xa, 0x9e8, 0x10001, 0x8, 0x5, 0x3, 0x401, 0x9, 0x7, 0x7f, 0x2, 0x3d97, 0x4, 0xdd5, 0x6e, 0x717, 0xfffffffe, 0x8, 0x2, 0x2, 0x63f5, 0xffffffff, 0x800, 0x9, 0x5, 0x200, 0x4, 0xc39, 0xda, 0x0, 0x7, 0x6, 0x5, 0x80, 0x7, 0x6, 0x3, 0x3, 0xc, 0x9, 0x54f, 0x6, 0xffffffff, 0x800, 0xd9, 0x6, 0x55, 0x4, 0x2, 0xb, 0x81, 0xb, 0x6, 0x4, 0x7, 0x8000, 0x3, 0x3b7, 0xc, 0x8, 0x1, 0xb3, 0x7, 0xb, 0x48e2, 0x5, 0xc6, 0x3fc00, 0xffff4c00, 0x8, 0x8, 0x400, 0xe5, 0x3, 0x7, 0xaf, 0x7, 0x8000, 0x5, 0x6, 0x7, 0x5b74, 0x5, 0x3, 0xffffffff, 0x2, 0x7, 0xff, 0x4, 0x19b0000, 0x4, 0x9, 0x7f, 0x0, 0x6, 0xffffffff, 0xfffff22d, 0x2, 0x8, 0xc5, 0x7fff, 0xa2, 0x0, 0x7, 0x8, 0x2, 0x6, 0xfffffffd, 0x1, 0x1ff, 0x4, 0x5, 0x80, 0x9, 0x1000, 0x8, 0x10001, 0x23, 0x2, 0x2, 0x5, 0x1, 0x44e, 0x3, 0x1, 0x4, 0x1, 0xffff, 0x2b1, 0x7, 0x81, 0x9, 0xa33, 0x78c09d6e, 0xffffffc6, 0xffffffff, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 501:86): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.718345][ T5807] veth1_macvtap: entered promiscuous mode [ 65.761190][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.769444][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.779618][ T30] audit: type=1400 audit(1771226117.501:87): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/root/syzkaller.iMmxkL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.782888][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.811791][ T30] audit: type=1400 audit(1771226117.501:88): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.837097][ T30] audit: type=1400 audit(1771226117.511:89): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/root/syzkaller.iMmxkL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.854197][ T5805] veth0_macvtap: entered promiscuous mode [ 65.874974][ T30] audit: type=1400 audit(1771226117.511:90): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/root/syzkaller.iMmxkL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.887193][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.928907][ T5805] veth1_macvtap: entered promiscuous mode [ 65.943240][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.962645][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.971605][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.980660][ T30] audit: type=1400 audit(1771226117.511:91): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.016072][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.027853][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.033778][ T5917] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 66.041918][ T30] audit: type=1400 audit(1771226117.571:92): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.051767][ T5917] trusted_key: encrypted_key: master key parameter 'ḣ,\mX1Պh' is invalid [ 66.080569][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.097779][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.137447][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.146494][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.170707][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.193550][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.193629][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.201373][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.223394][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.239615][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.261642][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.286350][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.316739][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.336254][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358203][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.377207][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.393707][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.403102][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.468682][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.492570][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.584105][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.633884][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.659279][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.678145][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.792070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.820942][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 66.820958][ T30] audit: type=1400 audit(1771226118.641:117): avc: denied { read } for pid=5930 comm="syz.0.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.855941][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.908395][ T5932] mmap: syz.0.6 (5932) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.930559][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.930831][ T30] audit: type=1400 audit(1771226118.641:118): avc: denied { open } for pid=5930 comm="syz.0.6" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.004873][ T30] audit: type=1400 audit(1771226118.721:119): avc: denied { ioctl } for pid=5934 comm="syz.2.7" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.038408][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.085264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.128063][ T5935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.148443][ T30] audit: type=1400 audit(1771226118.731:120): avc: denied { read write } for pid=5930 comm="syz.0.6" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.235462][ T30] audit: type=1400 audit(1771226118.731:121): avc: denied { open } for pid=5930 comm="syz.0.6" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.237774][ T5944] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 67.269881][ T5944] audit: out of memory in audit_log_start [ 67.289431][ T30] audit: type=1400 audit(1771226118.731:122): avc: denied { ioctl } for pid=5930 comm="syz.0.6" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 67.322345][ T30] audit: type=1400 audit(1771226118.731:123): avc: denied { map_create } for pid=5930 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.332165][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.372190][ T5130] Bluetooth: hci1: command tx timeout [ 67.372190][ T5810] Bluetooth: hci0: command tx timeout [ 67.404458][ T30] audit: type=1400 audit(1771226118.731:124): avc: denied { prog_load } for pid=5930 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.420962][ T5948] Zero length message leads to an empty skb [ 67.446030][ T5810] Bluetooth: hci3: command tx timeout [ 67.451938][ T5810] Bluetooth: hci4: command tx timeout [ 67.457410][ T5810] Bluetooth: hci2: command tx timeout [ 67.722669][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.842119][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.882133][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 67.893699][ T5915] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 67.907517][ T5915] usb 1-1: config 0 has no interface number 0 [ 67.909678][ T5961] process 'syz.4.13' launched '/dev/fd/7' with NULL argv: empty string added [ 67.916839][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.942739][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.956769][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 67.969892][ T5915] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.982476][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.997687][ T5915] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 68.007581][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.034031][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.045358][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.053009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.058464][ T29] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 68.076145][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.096359][ T5915] usb 1-1: config 0 descriptor?? [ 68.122975][ T5915] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 68.138676][ T5853] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 68.151360][ T29] usb 4-1: config 0 descriptor?? [ 68.158686][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.176114][ T5853] usb 3-1: Product: syz [ 68.185466][ T5853] usb 3-1: Manufacturer: syz [ 68.190140][ T5853] usb 3-1: SerialNumber: syz [ 68.211469][ T5853] usb 3-1: config 0 descriptor?? [ 68.220267][ T5853] hub 3-1:0.0: bad descriptor, ignoring hub [ 68.227197][ T5853] hub 3-1:0.0: probe with driver hub failed with error -5 [ 68.240104][ T5853] f81232 3-1:0.0: f81534a converter detected [ 68.281947][ T5966] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.321801][ T5962] usb 1-1: USB disconnect, device number 2 [ 68.353233][ T5962] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 68.421451][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.431242][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.441612][ T5966] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.462226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 68.468624][ T5966] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.484514][ T5853] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 68.507555][ T5853] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 68.535987][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.542347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.559657][ T5966] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 68.581421][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.593947][ T5853] usb 3-1: USB disconnect, device number 2 [ 68.618745][ T5853] f81232 3-1:0.0: device disconnected [ 68.637085][ T5966] usb 2-1: config 0 descriptor?? [ 68.886875][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 68.895158][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 68.906440][ T29] usb 4-1: USB disconnect, device number 2 [ 69.101878][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.144414][ T5980] tipc: Started in network mode [ 69.149460][ T5980] tipc: Node identity 7f000001, cluster identity 4711 [ 69.157490][ T5980] tipc: Enabling of bearer rejected, failed to enable media [ 69.272021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 69.281881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 69.351854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 69.362136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 69.384418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.403335][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.416889][ T5130] Bluetooth: Wrong link type (-57) [ 69.419501][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 69.442567][ T5130] Bluetooth: hci0: command tx timeout [ 69.448092][ T5130] Bluetooth: hci1: command tx timeout [ 69.491790][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 69.528935][ T5810] Bluetooth: hci2: command tx timeout [ 69.528957][ T5817] Bluetooth: hci3: command tx timeout [ 69.545421][ T5130] Bluetooth: hci4: command tx timeout [ 69.637752][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 69.726531][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 69.736689][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.744975][ T5894] usb 5-1: Product: syz [ 69.753483][ T5894] usb 5-1: Manufacturer: syz [ 69.764771][ T5894] usb 5-1: SerialNumber: syz [ 69.788914][ T5894] usb 5-1: config 0 descriptor?? [ 69.806544][ T5894] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 69.820557][ T5894] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 69.976322][ T5894] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 70.073307][ T5894] usb 5-1: USB disconnect, device number 2 [ 70.084266][ T5894] garmin_gps 5-1:0.0: device disconnected [ 72.006433][ T5998] infiniband syz1: set active [ 72.011176][ T5998] infiniband syz1: added veth1_vlan [ 72.020712][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 72.020730][ T30] audit: type=1400 audit(1771226123.431:214): avc: denied { create } for pid=5995 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.058361][ T5966] usbhid 2-1:0.0: can't add hid device: -71 [ 72.064642][ T5966] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.091721][ T5998] RDS/IB: syz1: added [ 72.096053][ T5998] smc: adding ib device syz1 with port count 1 [ 72.102396][ T5998] smc: ib device syz1 port 1 has no pnetid [ 72.565427][ T5966] usb 2-1: USB disconnect, device number 2 [ 72.582196][ T30] audit: type=1400 audit(1771226123.431:215): avc: denied { write } for pid=5995 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.726723][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 72.817043][ T30] audit: type=1400 audit(1771226124.631:216): avc: denied { map } for pid=6000 comm="syz.4.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.908442][ T30] audit: type=1400 audit(1771226124.641:217): avc: denied { read write } for pid=6000 comm="syz.4.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.937700][ T30] audit: type=1400 audit(1771226124.761:218): avc: denied { ioctl } for pid=6005 comm="syz.0.24" path="socket:[8740]" dev="sockfs" ino=8740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.995251][ T30] audit: type=1400 audit(1771226124.761:219): avc: denied { connect } for pid=6005 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.997718][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 73.160929][ T6014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.168303][ T6014] IPv6: NLM_F_CREATE should be set when creating new route [ 73.320008][ T30] audit: type=1400 audit(1771226125.141:220): avc: denied { create } for pid=6005 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.326795][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.347438][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.409843][ T30] audit: type=1400 audit(1771226125.221:221): avc: denied { write } for pid=6005 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.504538][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 73.513649][ T30] audit: type=1400 audit(1771226125.331:222): avc: denied { create } for pid=6005 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.607426][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.628060][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.641980][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.758327][ T77] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.771948][ T5966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.780039][ T77] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.791003][ T77] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.810165][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 73.836638][ T5929] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 73.853364][ T77] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.862575][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.874204][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.885696][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 73.900126][ T5929] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 73.909523][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.923579][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.935634][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.945983][ T5966] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 73.956044][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.994306][ T5929] usb 2-1: config 0 descriptor?? [ 74.000994][ T5966] usb 3-1: config 0 descriptor?? [ 74.822405][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 74.833986][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 74.865720][ T5929] usb 2-1: USB disconnect, device number 3 [ 74.912555][ T5966] usbhid 3-1:0.0: can't add hid device: -71 [ 74.929556][ T5966] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 74.957465][ T5966] usb 3-1: USB disconnect, device number 3 [ 74.976069][ T30] audit: type=1400 audit(1771226126.801:223): avc: denied { read write } for pid=6035 comm="syz.2.33" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.212335][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 75.704974][ T5966] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.077894][ T793] cfg80211: failed to load regulatory.db [ 76.619655][ T5966] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 76.636220][ T5966] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 76.653038][ T5929] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 76.676325][ T5966] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 76.708858][ T5966] usb 5-1: config 220 has no interface number 2 [ 76.723197][ T5966] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 76.753791][ T5966] usb 5-1: config 220 interface 0 has no altsetting 0 [ 76.781575][ T5966] usb 5-1: config 220 interface 76 has no altsetting 0 [ 76.791157][ T5966] usb 5-1: config 220 interface 1 has no altsetting 0 [ 76.810101][ T5966] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 76.829528][ T5929] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 76.842017][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.857436][ T5929] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 76.859709][ T5966] usb 5-1: Product: syz [ 76.882753][ T5929] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 76.900892][ T5966] usb 5-1: Manufacturer: syz [ 76.903543][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.910974][ T5966] usb 5-1: SerialNumber: syz [ 77.070195][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 77.269497][ T6044] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.295205][ T5966] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 77.322303][ T5966] uvcvideo 5-1:220.0: No valid video chain found. [ 77.344609][ T5966] usb 5-1: selecting invalid altsetting 0 [ 77.398165][ T5966] usb 5-1: selecting invalid altsetting 0 [ 77.398194][ T5966] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 77.419884][ T5966] usb 5-1: USB disconnect, device number 3 [ 77.443902][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 77.443917][ T30] audit: type=1400 audit(1771226129.271:229): avc: denied { mounton } for pid=6051 comm="syz.2.37" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 77.516682][ T30] audit: type=1400 audit(1771226129.341:230): avc: denied { getattr } for pid=6065 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.268941][ T30] audit: type=1400 audit(1771226130.091:231): avc: denied { read append } for pid=6068 comm="syz.3.39" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.274845][ T30] audit: type=1400 audit(1771226130.091:232): avc: denied { open } for pid=6068 comm="syz.3.39" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.296342][ T30] audit: type=1400 audit(1771226130.121:233): avc: denied { map } for pid=6068 comm="syz.3.39" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.300715][ T30] audit: type=1400 audit(1771226130.121:234): avc: denied { write execute } for pid=6068 comm="syz.3.39" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 78.424394][ T30] audit: type=1400 audit(1771226130.251:235): avc: denied { read } for pid=6073 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.425444][ T30] audit: type=1400 audit(1771226130.251:236): avc: denied { open } for pid=6073 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1884 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.613429][ T30] audit: type=1400 audit(1771226130.441:237): avc: denied { read write } for pid=6079 comm="syz.0.42" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.613801][ T30] audit: type=1400 audit(1771226130.441:238): avc: denied { open } for pid=6079 comm="syz.0.42" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.942634][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.091922][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 79.095855][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.095968][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.096035][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.096056][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.096211][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.097355][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.097377][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.097395][ T10] usb 4-1: Manufacturer: syz [ 79.157509][ T6088] syz1: rxe_newlink: already configured on veth1_vlan [ 79.179502][ T10] usb 4-1: config 0 descriptor?? [ 79.315626][ T5929] usb 2-1: string descriptor 0 read error: -71 [ 79.323299][ T5929] hub 2-1:32.0: USB hub found [ 79.332674][ T5929] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 79.469291][ T6095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 79.661313][ T6103] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 79.848170][ T10] rc_core: IR keymap rc-hauppauge not found [ 79.856223][ T10] Registered IR keymap rc-empty [ 79.861419][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 79.902192][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 80.845265][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 80.862067][ T5929] usb 2-1: USB disconnect, device number 4 [ 80.881258][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 81.366400][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.560192][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.582125][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.608371][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.635009][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.665240][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.694199][ T5929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.716843][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.732403][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 81.739065][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.751960][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.769099][ T5894] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.791969][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.804529][ T5894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.813770][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.842154][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.852100][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.861952][ T792] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.872055][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 81.883523][ T5929] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 81.902773][ T5894] usb 5-1: Product: syz [ 81.907694][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 81.918960][ T5894] usb 5-1: Manufacturer: syz [ 81.924034][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.938266][ T5894] usb 5-1: SerialNumber: syz [ 81.943940][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.959132][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.972307][ T5894] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 81.980789][ T5894] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 81.992169][ T10] usb 4-1: USB disconnect, device number 3 [ 81.998979][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 82.018465][ T5929] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 82.041498][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 82.055355][ T792] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 82.069116][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.077998][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.099145][ T5929] usb 2-1: config 0 descriptor?? [ 82.113252][ T792] usb 1-1: config 0 descriptor?? [ 82.148008][ T6123] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 82.255189][ T29] usb 5-1: USB disconnect, device number 4 [ 82.588648][ T792] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 82.604537][ T792] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 82.611757][ T792] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 82.621996][ T792] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 82.639113][ T792] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 82.663684][ T792] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 82.770647][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 82.801686][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.820570][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.859566][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.893540][ T5929] usb 2-1: USB disconnect, device number 5 [ 82.910293][ T29] usb 1-1: USB disconnect, device number 3 [ 83.141950][ T1206] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 83.304001][ T1206] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 83.332695][ T1206] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 83.348862][ T1206] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 83.360348][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.388742][ T6156] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 83.451675][ T6173] syz_tun: entered allmulticast mode [ 83.469958][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 83.483359][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 83.556618][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 83.682851][ T6173] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.069844][ T6173] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.658799][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 84.668025][ T30] audit: type=1400 audit(1771226136.061:251): avc: denied { ioctl } for pid=6155 comm="syz.4.56" path="socket:[9074]" dev="sockfs" ino=9074 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.872438][ T30] audit: type=1400 audit(1771226136.591:252): avc: denied { write } for pid=6180 comm="syz.2.59" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.046713][ T30] audit: type=1400 audit(1771226136.631:253): avc: denied { mounton } for pid=6180 comm="syz.2.59" path="/14" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.097079][ T6172] syz_tun: left allmulticast mode [ 85.160446][ T30] audit: type=1400 audit(1771226136.841:254): avc: denied { read } for pid=6180 comm="syz.2.59" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.184802][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.201253][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.205381][ T30] audit: type=1400 audit(1771226136.841:255): avc: denied { open } for pid=6180 comm="syz.2.59" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.290264][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.345764][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.374936][ T6173] virt_wifi0 speed is unknown, defaulting to 1000 [ 85.391750][ T6177] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 85.558485][ T6197] block nbd1: NBD_DISCONNECT [ 85.619094][ T30] audit: type=1400 audit(1771226137.371:256): avc: denied { append } for pid=6195 comm="syz.1.61" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.976585][ T1206] usb 5-1: string descriptor 0 read error: -71 [ 85.989301][ T30] audit: type=1400 audit(1771226137.801:257): avc: denied { relabelfrom } for pid=6200 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.030811][ T1206] hub 5-1:32.0: USB hub found [ 86.046549][ T1206] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 86.118515][ T30] audit: type=1400 audit(1771226137.801:258): avc: denied { relabelto } for pid=6200 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.222449][ T1206] usb 5-1: USB disconnect, device number 5 [ 86.234684][ T30] audit: type=1400 audit(1771226137.811:259): avc: denied { create } for pid=6198 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.297470][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.390844][ T30] audit: type=1400 audit(1771226137.811:260): avc: denied { name_bind } for pid=6200 comm="syz.4.64" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 86.793389][ T6222] siw: device registration error -23 [ 86.815153][ T6222] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 87.332858][ T6225] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.485342][ T6225] bond1: (slave lo): Enslaving as an active interface with an up link [ 87.547830][ T6225] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 88.391887][ T6258] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 88.581905][ T1206] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.878916][ T1206] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.887684][ T1206] usb 3-1: no configurations [ 88.894540][ T1206] usb 3-1: can't read configurations, error -22 [ 89.021917][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.363353][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.371429][ T10] usb 4-1: config 0 has no interface number 0 [ 89.378036][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 89.469460][ T10] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 89.485469][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.559556][ T10] usb 4-1: Product: syz [ 89.567745][ T10] usb 4-1: Manufacturer: syz [ 89.574769][ T10] usb 4-1: SerialNumber: syz [ 89.604207][ T10] usb 4-1: config 0 descriptor?? [ 89.827359][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 89.827369][ T30] audit: type=1400 audit(1771226141.651:286): avc: denied { create } for pid=6259 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.862646][ T30] audit: type=1400 audit(1771226141.681:287): avc: denied { setopt } for pid=6259 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.909755][ T30] audit: type=1400 audit(1771226141.711:288): avc: denied { bind } for pid=6259 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.951974][ T5929] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.992978][ T10] msi2500 4-1:0.1: Registered as swradio24 [ 89.998980][ T10] msi2500 4-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 90.030070][ T30] audit: type=1400 audit(1771226141.821:289): avc: denied { create } for pid=6280 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.120435][ T10] usb 4-1: USB disconnect, device number 4 [ 90.399415][ T6286] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 90.399415][ T6286] The task syz.2.78 (6286) triggered the difference, watch for misbehavior. [ 90.597981][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 90.607436][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 90.635848][ T5929] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 90.645417][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.655057][ T5929] usb 5-1: Product: syz [ 90.660748][ T5929] usb 5-1: Manufacturer: syz [ 90.666022][ T5929] usb 5-1: SerialNumber: syz [ 90.684490][ T5929] usb 5-1: config 0 descriptor?? [ 90.730170][ T30] audit: type=1400 audit(1771226142.551:290): avc: denied { setopt } for pid=6287 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.984053][ T30] audit: type=1400 audit(1771226142.811:291): avc: denied { write } for pid=6287 comm="syz.3.79" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 91.138743][ T6294] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 91.291888][ T30] audit: type=1400 audit(1771226143.101:292): avc: denied { name_bind } for pid=6287 comm="syz.3.79" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 91.484550][ T30] audit: type=1400 audit(1771226143.111:293): avc: denied { name_connect } for pid=6287 comm="syz.3.79" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.021972][ T792] IPVS: starting estimator thread 0... [ 92.131478][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.253825][ T6311] IPVS: using max 73 ests per chain, 175200 per kthread [ 92.553007][ T30] audit: type=1400 audit(1771226144.201:294): avc: denied { read write } for pid=6304 comm="syz.1.83" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.592005][ T6315] syz.2.82 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.716808][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 92.770804][ T30] audit: type=1400 audit(1771226144.201:295): avc: denied { open } for pid=6304 comm="syz.1.83" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.130978][ T1206] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.144840][ T5929] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 93.215361][ T5929] usb 5-1: USB disconnect, device number 6 [ 93.283667][ T1206] usb 1-1: Using ep0 maxpacket: 8 [ 93.304482][ T1206] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 93.323500][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.326708][ T1206] usb 1-1: config 0 has no interface number 0 [ 93.373631][ T1206] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 93.403955][ T1206] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 93.420002][ T1206] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.438763][ T1206] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.453296][ T1206] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 93.471957][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.485072][ T1206] usb 1-1: config 0 descriptor?? [ 93.498416][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.515479][ T10] usb 4-1: no configurations [ 93.526912][ T10] usb 4-1: can't read configurations, error -22 [ 93.560260][ T1206] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 95.260600][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 95.260615][ T30] audit: type=1400 audit(1771226147.081:297): avc: denied { connect } for pid=6357 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.303758][ T30] audit: type=1400 audit(1771226147.081:298): avc: denied { bind } for pid=6357 comm="syz.3.95" lport=15483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.325058][ T30] audit: type=1400 audit(1771226147.081:299): avc: denied { name_bind } for pid=6357 comm="syz.3.95" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 95.348981][ T30] audit: type=1400 audit(1771226147.081:300): avc: denied { node_bind } for pid=6357 comm="syz.3.95" saddr=2001:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 95.392018][ T30] audit: type=1400 audit(1771226147.101:301): avc: denied { mount } for pid=6357 comm="syz.3.95" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.483949][ T29] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 95.656030][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.676041][ T29] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 95.688316][ T29] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 95.712235][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.793019][ T29] usb 2-1: string descriptor 0 read error: -22 [ 95.800497][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.831574][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.891744][ T1206] usb 1-1: USB disconnect, device number 4 [ 95.928241][ T1206] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 95.995098][ T29] usb 2-1: 0:2 : does not exist [ 96.113392][ T30] audit: type=1400 audit(1771226147.931:302): avc: denied { create } for pid=6370 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.142241][ T30] audit: type=1400 audit(1771226147.941:303): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 96.186607][ T30] audit: type=1400 audit(1771226148.011:304): avc: denied { setopt } for pid=6370 comm="syz.0.99" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.218038][ T1206] usb 2-1: USB disconnect, device number 6 [ 96.337822][ T30] audit: type=1400 audit(1771226148.151:305): avc: denied { read write } for pid=6373 comm="syz.3.100" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.391023][ T30] audit: type=1400 audit(1771226148.151:306): avc: denied { open } for pid=6373 comm="syz.3.100" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.662030][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 97.241885][ T1206] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.393334][ T1206] usb 3-1: Using ep0 maxpacket: 16 [ 97.400227][ T1206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.412103][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.421863][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.465035][ T6389] FAULT_INJECTION: forcing a failure. [ 97.465035][ T6389] name failslab, interval 1, probability 0, space 0, times 0 [ 97.477767][ T6389] CPU: 1 UID: 0 PID: 6389 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 97.477789][ T6389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.477799][ T6389] Call Trace: [ 97.477805][ T6389] [ 97.477811][ T6389] dump_stack_lvl+0x100/0x190 [ 97.477843][ T6389] should_fail_ex.cold+0x5/0xa [ 97.477865][ T6389] ? tomoyo_realpath_from_path+0xb6/0x690 [ 97.477890][ T6389] should_failslab+0xc2/0x120 [ 97.477915][ T6389] __kmalloc_noprof+0xe0/0x850 [ 97.477942][ T6389] tomoyo_realpath_from_path+0xb6/0x690 [ 97.477973][ T6389] tomoyo_path_number_perm+0x23c/0x580 [ 97.477993][ T6389] ? tomoyo_path_number_perm+0x22e/0x580 [ 97.478017][ T6389] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.478065][ T6389] ? find_held_lock+0x2b/0x80 [ 97.478085][ T6389] ? __fget_files+0x215/0x3d0 [ 97.478109][ T6389] ? hook_file_ioctl_common+0x146/0x410 [ 97.478133][ T6389] ? __fget_files+0x21f/0x3d0 [ 97.478163][ T6389] security_file_ioctl+0xd3/0x230 [ 97.478189][ T6389] __x64_sys_ioctl+0xb7/0x210 [ 97.478214][ T6389] do_syscall_64+0x106/0xf80 [ 97.478235][ T6389] ? clear_bhb_loop+0x40/0x90 [ 97.478257][ T6389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.478273][ T6389] RIP: 0033:0x7fe72199bf79 [ 97.478288][ T6389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.478303][ T6389] RSP: 002b:00007fe722872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.478320][ T6389] RAX: ffffffffffffffda RBX: 00007fe721c16090 RCX: 00007fe72199bf79 [ 97.478331][ T6389] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000005 [ 97.478341][ T6389] RBP: 00007fe722872090 R08: 0000000000000000 R09: 0000000000000000 [ 97.478351][ T6389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.478360][ T6389] R13: 00007fe721c16128 R14: 00007fe721c16090 R15: 00007ffed5c52c18 [ 97.478384][ T6389] [ 97.478391][ T6389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.729816][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.752164][ T1206] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.763114][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.785936][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 97.795491][ T29] usb 5-1: no configurations [ 97.800107][ T29] usb 5-1: can't read configurations, error -22 [ 97.810673][ T1206] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.819868][ T1206] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.829419][ T1206] usb 3-1: Manufacturer: syz [ 97.843821][ T1206] usb 3-1: config 0 descriptor?? [ 98.143521][ T1206] rc_core: IR keymap rc-hauppauge not found [ 98.155864][ T1206] Registered IR keymap rc-empty [ 98.159494][ T6407] FAULT_INJECTION: forcing a failure. [ 98.159494][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 98.171960][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.186811][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 98.186835][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.186845][ T6407] Call Trace: [ 98.186851][ T6407] [ 98.186858][ T6407] dump_stack_lvl+0x100/0x190 [ 98.186891][ T6407] should_fail_ex.cold+0x5/0xa [ 98.186915][ T6407] ? tomoyo_realpath_from_path+0xb6/0x690 [ 98.186941][ T6407] should_failslab+0xc2/0x120 [ 98.186967][ T6407] __kmalloc_noprof+0xe0/0x850 [ 98.186995][ T6407] tomoyo_realpath_from_path+0xb6/0x690 [ 98.187027][ T6407] tomoyo_path_number_perm+0x23c/0x580 [ 98.187056][ T6407] ? tomoyo_path_number_perm+0x22e/0x580 [ 98.187080][ T6407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.187132][ T6407] ? find_held_lock+0x2b/0x80 [ 98.187154][ T6407] ? __fget_files+0x215/0x3d0 [ 98.187179][ T6407] ? hook_file_ioctl_common+0x146/0x410 [ 98.187202][ T6407] ? __fget_files+0x21f/0x3d0 [ 98.187232][ T6407] security_file_ioctl+0xd3/0x230 [ 98.187259][ T6407] __x64_sys_ioctl+0xb7/0x210 [ 98.187284][ T6407] do_syscall_64+0x106/0xf80 [ 98.187305][ T6407] ? clear_bhb_loop+0x40/0x90 [ 98.187326][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.187344][ T6407] RIP: 0033:0x7fda7c39bf79 [ 98.187360][ T6407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.187375][ T6407] RSP: 002b:00007fda7d217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.187392][ T6407] RAX: ffffffffffffffda RBX: 00007fda7c615fa0 RCX: 00007fda7c39bf79 [ 98.187403][ T6407] RDX: 00002000000000c0 RSI: 00000000c0405610 RDI: 0000000000000003 [ 98.187413][ T6407] RBP: 00007fda7d217090 R08: 0000000000000000 R09: 0000000000000000 [ 98.187423][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.187433][ T6407] R13: 00007fda7c616038 R14: 00007fda7c615fa0 R15: 00007fff808bf108 [ 98.187457][ T6407] [ 98.187519][ T6407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.347478][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.458228][ T1206] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 98.554076][ T1206] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 98.706162][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 98.798135][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.000345][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.034800][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.071975][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.123800][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.152471][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.201987][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.209633][ T6424] 9p: Could not find request transport: J [ 99.352405][ T6431] FAULT_INJECTION: forcing a failure. [ 99.352405][ T6431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.365554][ T6431] CPU: 0 UID: 0 PID: 6431 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT(full) [ 99.365576][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.365586][ T6431] Call Trace: [ 99.365591][ T6431] [ 99.365597][ T6431] dump_stack_lvl+0x100/0x190 [ 99.365629][ T6431] should_fail_ex.cold+0x5/0xa [ 99.365652][ T6431] _copy_from_user+0x2e/0xd0 [ 99.365671][ T6431] dev_ethtool+0x162/0x5d70 [ 99.365686][ T6431] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.365709][ T6431] ? is_bpf_text_address+0x94/0x1a0 [ 99.365731][ T6431] ? kernel_text_address+0x8d/0x100 [ 99.365749][ T6431] ? __kernel_text_address+0xd/0x30 [ 99.365765][ T6431] ? unwind_get_return_address+0x59/0xa0 [ 99.365787][ T6431] ? __pfx_dev_ethtool+0x10/0x10 [ 99.365806][ T6431] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.365828][ T6431] ? stack_trace_save+0x8e/0xc0 [ 99.365848][ T6431] ? __pfx_stack_trace_save+0x10/0x10 [ 99.365868][ T6431] ? stack_depot_save_flags+0x27/0x9d0 [ 99.365892][ T6431] ? __lock_acquire+0x4a5/0x2630 [ 99.365917][ T6431] ? __kasan_slab_free+0x5f/0x80 [ 99.365939][ T6431] ? kfree+0x1f6/0x6b0 [ 99.365954][ T6431] ? tomoyo_path_number_perm+0x46d/0x580 [ 99.365973][ T6431] ? security_file_ioctl+0xd3/0x230 [ 99.365995][ T6431] ? __x64_sys_ioctl+0xb7/0x210 [ 99.366015][ T6431] ? do_syscall_64+0x106/0xf80 [ 99.366034][ T6431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.366065][ T6431] ? find_held_lock+0x2b/0x80 [ 99.366085][ T6431] ? avc_has_extended_perms+0x33a/0x1080 [ 99.366103][ T6431] ? avc_has_extended_perms+0x33a/0x1080 [ 99.366130][ T6431] ? __lock_acquire+0x4a5/0x2630 [ 99.366156][ T6431] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 99.366183][ T6431] ? find_held_lock+0x2b/0x80 [ 99.366202][ T6431] ? dev_load+0x8e/0x240 [ 99.366218][ T6431] ? dev_load+0x8e/0x240 [ 99.366240][ T6431] dev_ioctl+0x63b/0x10e0 [ 99.366260][ T6431] sock_do_ioctl+0x1a0/0x280 [ 99.366285][ T6431] ? __pfx_sock_do_ioctl+0x10/0x10 [ 99.366314][ T6431] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.366335][ T6431] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.366365][ T6431] sock_ioctl+0x599/0x6b0 [ 99.366390][ T6431] ? __pfx_sock_ioctl+0x10/0x10 [ 99.366413][ T6431] ? hook_file_ioctl_common+0x146/0x410 [ 99.366437][ T6431] ? selinux_file_ioctl+0x139/0x290 [ 99.366461][ T6431] ? selinux_file_ioctl+0xb4/0x290 [ 99.366486][ T6431] ? __pfx_sock_ioctl+0x10/0x10 [ 99.366513][ T6431] __x64_sys_ioctl+0x18e/0x210 [ 99.366535][ T6431] do_syscall_64+0x106/0xf80 [ 99.366555][ T6431] ? clear_bhb_loop+0x40/0x90 [ 99.366575][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.366592][ T6431] RIP: 0033:0x7fe0dc59bf79 [ 99.366607][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.366621][ T6431] RSP: 002b:00007fe0dd3be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.366638][ T6431] RAX: ffffffffffffffda RBX: 00007fe0dc816090 RCX: 00007fe0dc59bf79 [ 99.366649][ T6431] RDX: 0000200000000540 RSI: 0000000000008946 RDI: 0000000000000003 [ 99.366659][ T6431] RBP: 00007fe0dd3be090 R08: 0000000000000000 R09: 0000000000000000 [ 99.366668][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.366678][ T6431] R13: 00007fe0dc816128 R14: 00007fe0dc816090 R15: 00007fffe8737f78 [ 99.366697][ T6431] [ 99.373621][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.742520][ T1206] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 99.764709][ T1206] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 99.780058][ T1206] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.815861][ T1206] usb 3-1: USB disconnect, device number 6 [ 99.865113][ T6438] xt_socket: unknown flags 0x4 [ 99.917371][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 99.927069][ T6443] Unknown options in mask b7f2 [ 100.141413][ T6448] PM: Enabling pm_trace changes system date and time during resume. [ 100.141413][ T6448] PM: Correct system time has to be restored manually after resume. [ 100.162282][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.275773][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 100.395231][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 100.402258][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 100.415247][ T10] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 100.425216][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.437468][ T10] usb 5-1: Product: syz [ 100.441724][ T10] usb 5-1: Manufacturer: syz [ 100.468864][ T10] usb 5-1: SerialNumber: syz [ 100.758387][ T10] usb 5-1: config 0 descriptor?? [ 100.867045][ T6464] FAULT_INJECTION: forcing a failure. [ 100.867045][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 100.880502][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(full) [ 100.880518][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.880525][ T6464] Call Trace: [ 100.880529][ T6464] [ 100.880534][ T6464] dump_stack_lvl+0x100/0x190 [ 100.880556][ T6464] should_fail_ex.cold+0x5/0xa [ 100.880577][ T6464] should_failslab+0xc2/0x120 [ 100.880601][ T6464] __kmalloc_cache_noprof+0x7a/0x6f0 [ 100.880617][ T6464] ? pkcs7_parse_message+0x98/0x870 [ 100.880642][ T6464] pkcs7_parse_message+0x98/0x870 [ 100.880658][ T6464] ? down_read+0x13b/0x460 [ 100.880675][ T6464] verify_pkcs7_signature+0x30/0xa0 [ 100.880692][ T6464] pkcs7_preparse+0x88/0xc0 [ 100.880708][ T6464] ? __pfx_pkcs7_view_content+0x10/0x10 [ 100.880730][ T6464] ? __pfx_pkcs7_preparse+0x10/0x10 [ 100.880752][ T6464] __key_create_or_update+0x463/0xe30 [ 100.880788][ T6464] ? __pfx___key_create_or_update+0x10/0x10 [ 100.880814][ T6464] ? lookup_user_key+0x3f3/0x1300 [ 100.880841][ T6464] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 100.880860][ T6464] ? __pfx_keyring_search_iterator+0x10/0x10 [ 100.880881][ T6464] key_create_or_update+0x42/0x60 [ 100.880908][ T6464] __do_sys_add_key+0x2e8/0x460 [ 100.880927][ T6464] ? __pfx___do_sys_add_key+0x10/0x10 [ 100.880941][ T6464] ? ksys_write+0x1ac/0x250 [ 100.880961][ T6464] do_syscall_64+0x106/0xf80 [ 100.880974][ T6464] ? clear_bhb_loop+0x40/0x90 [ 100.880987][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.880999][ T6464] RIP: 0033:0x7fe72199bf79 [ 100.881014][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.881028][ T6464] RSP: 002b:00007fe722893028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 100.881043][ T6464] RAX: ffffffffffffffda RBX: 00007fe721c15fa0 RCX: 00007fe72199bf79 [ 100.881053][ T6464] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000080 [ 100.881062][ T6464] RBP: 00007fe722893090 R08: 00000000024d8d1d R09: 0000000000000000 [ 100.881071][ T6464] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 100.881080][ T6464] R13: 00007fe721c16038 R14: 00007fe721c15fa0 R15: 00007ffed5c52c18 [ 100.881094][ T6464] [ 101.250201][ T6469] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 102.415053][ T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.469035][ T6472] batman_adv: batadv0: Adding interface: gretap1 [ 102.475432][ T6472] batman_adv: batadv0: Interface activated: gretap1 [ 102.820565][ T6478] loop2: detected capacity change from 0 to 7 [ 102.831102][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 102.836562][ T6478] Dev loop2: unable to read RDB block 7 [ 102.842693][ T6478] loop2: unable to read partition table [ 102.849327][ T6478] loop2: partition table beyond EOD, truncated [ 102.855929][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.861940][ T6478] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.900383][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.923019][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 102.933400][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.945471][ T792] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.959972][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.982236][ T792] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.992970][ T792] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.002267][ T792] usb 3-1: Manufacturer: syz [ 103.005592][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 103.005605][ T30] audit: type=1400 audit(1771226154.831:319): avc: denied { ioctl } for pid=6477 comm="syz.1.129" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 103.062456][ T6478] ip6gretap0: entered promiscuous mode [ 103.080737][ T792] usb 3-1: config 0 descriptor?? [ 103.107876][ T30] audit: type=1400 audit(1771226154.871:320): avc: denied { set_context_mgr } for pid=6477 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 103.621899][ T792] rc_core: IR keymap rc-hauppauge not found [ 103.627861][ T792] Registered IR keymap rc-empty [ 103.633231][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.662155][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.692746][ T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 103.717147][ T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 103.732868][ T10] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 103.753937][ T10] usb 5-1: USB disconnect, device number 9 [ 103.771724][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.813362][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.844187][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.888823][ T30] audit: type=1400 audit(1771226155.711:321): avc: denied { append } for pid=6487 comm="syz.4.131" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.937209][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 103.982406][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.014759][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.056064][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6489 comm=syz.4.131 [ 104.062022][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.092290][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.112073][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.131893][ T792] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 104.153715][ T792] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.164094][ T792] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.180529][ T792] usb 3-1: USB disconnect, device number 7 [ 104.281953][ T793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.431907][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 104.567498][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.584346][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.594548][ T793] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 104.604470][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.617187][ T793] usb 4-1: config 0 descriptor?? [ 104.670631][ T30] audit: type=1400 audit(1771226156.491:322): avc: denied { create } for pid=6497 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.706800][ T30] audit: type=1400 audit(1771226156.531:323): avc: denied { accept } for pid=6497 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.192986][ T6512] tipc: Started in network mode [ 105.197921][ T6512] tipc: Node identity 7f000001, cluster identity 4711 [ 105.216313][ T30] audit: type=1326 audit(1771226157.001:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a79bf79 code=0x7ffc0000 [ 105.219578][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 105.328911][ T30] audit: type=1326 audit(1771226157.001:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff32a79bf79 code=0x7ffc0000 [ 105.400373][ T30] audit: type=1326 audit(1771226157.001:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a79bf79 code=0x7ffc0000 [ 105.425487][ T30] audit: type=1326 audit(1771226157.001:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff32a79bf79 code=0x7ffc0000 [ 105.449725][ T793] aquacomputer_d5next 0003:0C70:F00E.0002: hidraw0: USB HID v4.00 Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0 [ 105.546015][ T793] usb 4-1: USB disconnect, device number 7 [ 105.692144][ T30] audit: type=1326 audit(1771226157.001:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32a79bf79 code=0x7ffc0000 [ 105.717199][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.059719][ T6527] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 106.696750][ T6529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.702942][ T6529] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.849463][ T6529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.876551][ T6536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.900894][ T6529] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.927310][ T6529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.938490][ T6529] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 106.991050][ T6529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.011593][ T6529] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 107.071884][ T792] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.096560][ T6529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.110931][ T6529] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.231875][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 107.240329][ T792] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 107.251004][ T792] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 107.262436][ T792] usb 1-1: Product: syz [ 107.285754][ T792] usb 1-1: Manufacturer: syz [ 107.294757][ T792] usb 1-1: SerialNumber: syz [ 107.324440][ T792] usb 1-1: config 0 descriptor?? [ 107.336812][ T6544] tipc: Started in network mode [ 107.342150][ T6544] tipc: Node identity 7f000001, cluster identity 4711 [ 107.353108][ T6544] tipc: Enabling of bearer rejected, failed to enable media [ 107.378115][ T792] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 107.502445][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.728729][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 107.735489][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.745986][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.813951][ T6548] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 108.232584][ T792] gspca_zc3xx: reg_r err -110 [ 108.237397][ T792] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 108.292010][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.333265][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.354797][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.642221][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.656940][ T6552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.680819][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.695746][ T29] usb 4-1: Manufacturer: syz [ 108.714405][ T29] usb 4-1: config 0 descriptor?? [ 108.719417][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 108.719429][ T30] audit: type=1400 audit(1771226160.541:402): avc: denied { ioctl } for pid=6551 comm="syz.2.149" path="socket:[10924]" dev="sockfs" ino=10924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.995263][ T30] audit: type=1400 audit(1771226160.821:403): avc: denied { ioctl } for pid=6551 comm="syz.2.149" path="socket:[10927]" dev="sockfs" ino=10927 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.021935][ T29] rc_core: IR keymap rc-hauppauge not found [ 109.027989][ T29] Registered IR keymap rc-empty [ 109.033132][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.052015][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.075317][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 109.095505][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 109.113103][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.132394][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.152038][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.172197][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.191984][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.221907][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.252051][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.282028][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.301905][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.322029][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 109.344516][ T29] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 109.358852][ T29] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 109.431481][ T792] usb 4-1: USB disconnect, device number 8 [ 109.857837][ T792] usb 1-1: USB disconnect, device number 5 [ 110.526593][ T30] audit: type=1400 audit(1771226162.351:404): avc: denied { nlmsg_write } for pid=6567 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 110.650116][ T30] audit: type=1400 audit(1771226162.471:405): avc: denied { unmount } for pid=6561 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.992122][ T30] audit: type=1400 audit(1771226162.811:406): avc: denied { read } for pid=6576 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.316343][ T6582] warning: `syz.0.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.393681][ T30] audit: type=1400 audit(1771226163.211:407): avc: denied { setopt } for pid=6586 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.550199][ T30] audit: type=1400 audit(1771226163.291:408): avc: denied { mounton } for pid=6583 comm="syz.3.155" path="/proc/101/task" dev="proc" ino=11521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.294338][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 112.396723][ T30] audit: type=1400 audit(1771226164.121:409): avc: denied { write } for pid=6599 comm="syz.2.159" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.854463][ T30] audit: type=1400 audit(1771226164.321:410): avc: denied { mounton } for pid=6599 comm="syz.2.159" path="/file0" dev="ramfs" ino=11012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 112.989829][ T30] audit: type=1400 audit(1771226164.811:411): avc: denied { execute_no_trans } for pid=6616 comm="syz.1.163" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.801907][ T30] audit: type=1400 audit(1771226165.541:412): avc: denied { read write } for pid=6631 comm="syz.4.166" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.149368][ T30] audit: type=1400 audit(1771226165.541:413): avc: denied { open } for pid=6631 comm="syz.4.166" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.193117][ T6641] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 114.264664][ T30] audit: type=1400 audit(1771226165.541:414): avc: denied { setopt } for pid=6631 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.397402][ T30] audit: type=1400 audit(1771226165.881:415): avc: denied { create } for pid=6635 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 114.475185][ T30] audit: type=1400 audit(1771226166.031:416): avc: denied { setopt } for pid=6635 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.598353][ T6646] FAULT_INJECTION: forcing a failure. [ 114.598353][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 114.627243][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 114.627267][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.627276][ T6646] Call Trace: [ 114.627282][ T6646] [ 114.627288][ T6646] dump_stack_lvl+0x100/0x190 [ 114.627312][ T6646] should_fail_ex.cold+0x5/0xa [ 114.627327][ T6646] ? tomoyo_realpath_from_path+0xb6/0x690 [ 114.627345][ T6646] should_failslab+0xc2/0x120 [ 114.627361][ T6646] __kmalloc_noprof+0xe0/0x850 [ 114.627378][ T6646] tomoyo_realpath_from_path+0xb6/0x690 [ 114.627398][ T6646] tomoyo_path_number_perm+0x23c/0x580 [ 114.627412][ T6646] ? tomoyo_path_number_perm+0x22e/0x580 [ 114.627428][ T6646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.627459][ T6646] ? find_held_lock+0x2b/0x80 [ 114.627479][ T6646] ? __fget_files+0x215/0x3d0 [ 114.627501][ T6646] ? hook_file_ioctl_common+0x146/0x410 [ 114.627519][ T6646] ? __fget_files+0x21f/0x3d0 [ 114.627538][ T6646] security_file_ioctl+0xd3/0x230 [ 114.627556][ T6646] __x64_sys_ioctl+0xb7/0x210 [ 114.627571][ T6646] do_syscall_64+0x106/0xf80 [ 114.627584][ T6646] ? clear_bhb_loop+0x40/0x90 [ 114.627598][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.627610][ T6646] RIP: 0033:0x7f2e3cf9bf79 [ 114.627620][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.627630][ T6646] RSP: 002b:00007f2e3df2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.627645][ T6646] RAX: ffffffffffffffda RBX: 00007f2e3d215fa0 RCX: 00007f2e3cf9bf79 [ 114.627652][ T6646] RDX: 00002000000001c0 RSI: 000000004028af11 RDI: 0000000000000004 [ 114.627658][ T6646] RBP: 00007f2e3df2e090 R08: 0000000000000000 R09: 0000000000000000 [ 114.627665][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.627670][ T6646] R13: 00007f2e3d216038 R14: 00007f2e3d215fa0 R15: 00007ffce79db3d8 [ 114.627684][ T6646] [ 114.627744][ T6646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.186296][ T30] audit: type=1400 audit(1771226167.991:417): avc: denied { bind } for pid=6664 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.344253][ T792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.441937][ T30] audit: type=1400 audit(1771226168.001:418): avc: denied { listen } for pid=6664 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.504809][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.509419][ T30] audit: type=1400 audit(1771226168.331:419): avc: denied { unlink } for pid=6683 comm="syz.4.181" name="#1" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.536537][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.549443][ T6686] overlayfs: failed to set uuid (33/file1, err=-1); falling back to uuid=null. [ 116.591456][ T6689] wg1: entered promiscuous mode [ 116.596657][ T6689] wg1: entered allmulticast mode [ 116.600806][ T6686] overlayfs: failed to verify upper root origin [ 116.621730][ T792] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 116.692173][ T6687] netlink: 216 bytes leftover after parsing attributes in process `syz.0.182'. [ 116.702386][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.720368][ T30] audit: type=1400 audit(1771226168.541:420): avc: denied { read } for pid=6690 comm="syz.2.183" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.773471][ T792] usb 2-1: config 0 descriptor?? [ 117.172215][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.449981][ T30] audit: type=1400 audit(1771226169.231:421): avc: denied { read write } for pid=6699 comm="syz.4.184" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.512588][ T10] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 117.562708][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 117.618037][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.650729][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.670693][ T10] usb 3-1: config 0 descriptor?? [ 117.693387][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 119.027322][ T792] usbhid 2-1:0.0: can't add hid device: -71 [ 119.061960][ T792] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.083771][ T792] usb 2-1: USB disconnect, device number 7 [ 119.301594][ T6721] comedi comedi0: Minor 2 could not be opened [ 120.054551][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.188'. [ 120.108667][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 120.139457][ T6725] netlink: 'syz.1.188': attribute type 7 has an invalid length. [ 120.165733][ T6725] netlink: 'syz.1.188': attribute type 8 has an invalid length. [ 120.191451][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 120.262903][ T792] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 120.271053][ T6731] FAULT_INJECTION: forcing a failure. [ 120.271053][ T6731] name failslab, interval 1, probability 0, space 0, times 0 [ 120.293985][ T6731] CPU: 1 UID: 0 PID: 6731 Comm: syz.3.190 Not tainted syzkaller #0 PREEMPT(full) [ 120.294010][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.294019][ T6731] Call Trace: [ 120.294025][ T6731] [ 120.294031][ T6731] dump_stack_lvl+0x100/0x190 [ 120.294061][ T6731] should_fail_ex.cold+0x5/0xa [ 120.294083][ T6731] should_failslab+0xc2/0x120 [ 120.294107][ T6731] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 120.294128][ T6731] ? __alloc_skb+0x140/0x710 [ 120.294151][ T6731] __alloc_skb+0x140/0x710 [ 120.294165][ T6731] ? __alloc_skb+0x5b7/0x710 [ 120.294182][ T6731] ? __pfx___alloc_skb+0x10/0x10 [ 120.294198][ T6731] ? genl_rcv_msg+0x4be/0x800 [ 120.294233][ T6731] netlink_ack+0x117/0xb80 [ 120.294260][ T6731] netlink_rcv_skb+0x333/0x420 [ 120.294282][ T6731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.294305][ T6731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.294337][ T6731] ? netlink_deliver_tap+0x1ae/0xcc0 [ 120.294362][ T6731] genl_rcv+0x28/0x40 [ 120.294384][ T6731] netlink_unicast+0x5aa/0x870 [ 120.294409][ T6731] ? __pfx_netlink_unicast+0x10/0x10 [ 120.294442][ T6731] netlink_sendmsg+0x8b0/0xda0 [ 120.294468][ T6731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.294487][ T6731] ? __might_fault+0x20/0x140 [ 120.294514][ T6731] ____sys_sendmsg+0xa54/0xc30 [ 120.294540][ T6731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.294575][ T6731] ___sys_sendmsg+0x190/0x1e0 [ 120.294601][ T6731] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.294655][ T6731] __sys_sendmsg+0x170/0x220 [ 120.294676][ T6731] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.294711][ T6731] do_syscall_64+0x106/0xf80 [ 120.294732][ T6731] ? clear_bhb_loop+0x40/0x90 [ 120.294753][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.294770][ T6731] RIP: 0033:0x7fe0dc59bf79 [ 120.294785][ T6731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.294800][ T6731] RSP: 002b:00007fe0dd3df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.294817][ T6731] RAX: ffffffffffffffda RBX: 00007fe0dc815fa0 RCX: 00007fe0dc59bf79 [ 120.294833][ T6731] RDX: 0000000004000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 120.294843][ T6731] RBP: 00007fe0dd3df090 R08: 0000000000000000 R09: 0000000000000000 [ 120.294853][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.294862][ T6731] R13: 00007fe0dc816038 R14: 00007fe0dc815fa0 R15: 00007fffe8737f78 [ 120.294885][ T6731] [ 120.560909][ T792] usb 1-1: config 0 has an invalid interface number: 158 but max is 0 [ 120.593487][ T6735] ./cgroup: Can't lookup blockdev [ 120.601588][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 120.601598][ T30] audit: type=1400 audit(1771226172.421:424): avc: denied { getopt } for pid=6734 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.630722][ T792] usb 1-1: config 0 has no interface number 0 [ 120.667755][ T792] usb 1-1: too many endpoints for config 0 interface 158 altsetting 95: 112, using maximum allowed: 30 [ 120.719312][ T792] usb 1-1: config 0 interface 158 altsetting 95 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 120.778862][ T30] audit: type=1400 audit(1771226172.581:425): avc: denied { shutdown } for pid=6734 comm="syz.1.191" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.832084][ T792] usb 1-1: config 0 interface 158 has no altsetting 0 [ 120.922857][ T792] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 120.948757][ T30] audit: type=1400 audit(1771226172.581:426): avc: denied { read } for pid=6734 comm="syz.1.191" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.970997][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.011524][ T792] usb 1-1: config 0 descriptor?? [ 121.027194][ T5929] usb 3-1: USB disconnect, device number 8 [ 121.050092][ T30] audit: type=1400 audit(1771226172.711:427): avc: denied { ioctl } for pid=6747 comm="syz.3.194" path="socket:[11737]" dev="sockfs" ino=11737 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.086152][ T30] audit: type=1326 audit(1771226172.821:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 121.144837][ T30] audit: type=1326 audit(1771226172.821:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 121.168644][ T30] audit: type=1326 audit(1771226172.821:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 121.233943][ T30] audit: type=1326 audit(1771226172.821:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 121.269627][ T6757] input: syz0 as /devices/virtual/input/input13 [ 121.524132][ T30] audit: type=1326 audit(1771226172.821:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 121.687024][ T30] audit: type=1326 audit(1771226172.821:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dc59bf79 code=0x7ffc0000 [ 122.682417][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.199'. [ 123.287767][ T6799] capability: warning: `syz.1.202' uses deprecated v2 capabilities in a way that may be insecure [ 123.564940][ T792] usb 1-1: string descriptor 0 read error: -71 [ 123.574031][ T792] pegasus 1-1:0.158: probe with driver pegasus failed with error -71 [ 123.635037][ T792] usb 1-1: USB disconnect, device number 6 [ 123.975292][ T6796] syz.1.202 (6796) used greatest stack depth: 19672 bytes left [ 124.184455][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 124.281151][ T793] libceph: connect (1)[c::]:6789 error -101 [ 124.287843][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 124.341951][ T6829] tipc: Enabling of bearer rejected, failed to enable media [ 124.558458][ T793] libceph: connect (1)[c::]:6789 error -101 [ 124.662983][ T6834] FAULT_INJECTION: forcing a failure. [ 124.662983][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.668993][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 124.698468][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.2.209 Not tainted syzkaller #0 PREEMPT(full) [ 124.698485][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.698493][ T6834] Call Trace: [ 124.698497][ T6834] [ 124.698501][ T6834] dump_stack_lvl+0x100/0x190 [ 124.698523][ T6834] should_fail_ex.cold+0x5/0xa [ 124.698537][ T6834] _copy_from_user+0x2e/0xd0 [ 124.698550][ T6834] copy_msghdr_from_user+0x9f/0x4f0 [ 124.698568][ T6834] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.698591][ T6834] ___sys_sendmsg+0x106/0x1e0 [ 124.698608][ T6834] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.698640][ T6834] __sys_sendmsg+0x170/0x220 [ 124.698652][ T6834] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.698673][ T6834] do_syscall_64+0x106/0xf80 [ 124.698687][ T6834] ? clear_bhb_loop+0x40/0x90 [ 124.698700][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.698711][ T6834] RIP: 0033:0x7f2e3cf9bf79 [ 124.698720][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.698730][ T6834] RSP: 002b:00007f2e3df2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.698746][ T6834] RAX: ffffffffffffffda RBX: 00007f2e3d215fa0 RCX: 00007f2e3cf9bf79 [ 124.698753][ T6834] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 124.698759][ T6834] RBP: 00007f2e3df2e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.698765][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.698772][ T6834] R13: 00007f2e3d216038 R14: 00007f2e3d215fa0 R15: 00007ffce79db3d8 [ 124.698785][ T6834] [ 125.020602][ T6824] ceph: No mds server is up or the cluster is laggy [ 125.131702][ T6844] netlink: 'syz.3.208': attribute type 4 has an invalid length. [ 126.227927][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 126.227964][ T30] audit: type=1400 audit(1771226178.051:524): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.394010][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 126.831869][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.082190][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 127.090048][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 127.108439][ T30] audit: type=1400 audit(1771226178.931:525): avc: denied { bind } for pid=6879 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.128396][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 127.170377][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 127.188511][ T30] audit: type=1400 audit(1771226178.931:526): avc: denied { connect } for pid=6879 comm="syz.0.216" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.251902][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 127.252209][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.268045][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.291932][ T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 127.300988][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.325993][ T10] usb 5-1: Product: syz [ 127.330312][ T10] usb 5-1: Manufacturer: syz [ 127.338230][ T10] usb 5-1: SerialNumber: syz [ 127.348012][ T10] usb 5-1: config 0 descriptor?? [ 127.424736][ T30] audit: type=1400 audit(1771226179.251:527): avc: denied { remount } for pid=6886 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.455529][ T30] audit: type=1400 audit(1771226179.271:528): avc: denied { create } for pid=6886 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.495034][ T30] audit: type=1400 audit(1771226179.321:529): avc: denied { append } for pid=6888 comm="syz.2.219" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.581891][ T793] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 127.733123][ T793] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 127.761843][ T793] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 127.772749][ T793] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 127.792189][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.808056][ T6885] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.870963][ T5853] usb 5-1: USB disconnect, device number 10 [ 130.193500][ T30] audit: type=1400 audit(1771226182.021:530): avc: denied { mount } for pid=6911 comm="syz.3.226" name="/" dev="ramfs" ino=12681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.251937][ T5964] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.292669][ T5853] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.442306][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 130.469261][ T793] usb 2-1: string descriptor 0 read error: -71 [ 130.537189][ T6916] netlink: 180 bytes leftover after parsing attributes in process `syz.3.226'. [ 130.876914][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.889181][ T30] audit: type=1400 audit(1771226182.401:531): avc: denied { mount } for pid=6911 comm="syz.3.226" name="/" dev="overlay" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.919613][ T793] hub 2-1:32.0: USB hub found [ 130.932728][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.947542][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.960692][ T793] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 130.974818][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.985427][ T5964] usb 3-1: Product: syz [ 131.000100][ T5964] usb 3-1: Manufacturer: syz [ 131.014699][ T5964] usb 3-1: SerialNumber: syz [ 131.020249][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.059818][ T5964] usb 3-1: config 0 descriptor?? [ 131.077280][ T5853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.087353][ T793] usb 2-1: USB disconnect, device number 8 [ 131.107238][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.137521][ T5853] usb 5-1: config 0 descriptor?? [ 131.252383][ T30] audit: type=1400 audit(1771226183.081:532): avc: denied { ioctl } for pid=6917 comm="syz.1.227" path="/dev/sg0" dev="devtmpfs" ino=815 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.302535][ T5964] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.370516][ T30] audit: type=1400 audit(1771226183.191:533): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.459866][ T6922] tipc: Enabling of bearer rejected, failed to enable media [ 131.468252][ T30] audit: type=1326 audit(1771226183.281:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.468324][ T30] audit: type=1326 audit(1771226183.281:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.468363][ T30] audit: type=1326 audit(1771226183.281:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.468398][ T30] audit: type=1326 audit(1771226183.281:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.468455][ T30] audit: type=1326 audit(1771226183.281:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.597393][ T30] audit: type=1326 audit(1771226183.281:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.626436][ T30] audit: type=1326 audit(1771226183.281:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72199bf79 code=0x7ffc0000 [ 131.649856][ T30] audit: type=1326 audit(1771226183.281:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6919 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe72199d807 code=0x7ffc0000 [ 131.764073][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.772873][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.783779][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 131.789802][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.804836][ T5853] usb 5-1: USB disconnect, device number 11 [ 131.939753][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.963406][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.991911][ T792] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.152030][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 132.159541][ T792] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 132.169033][ T792] usb 4-1: config 0 has no interface number 0 [ 132.213633][ T792] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=33.76 [ 132.231840][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.245266][ T792] usb 4-1: Product: syz [ 132.252104][ T792] usb 4-1: Manufacturer: syz [ 132.259351][ T792] usb 4-1: SerialNumber: syz [ 132.271343][ T792] usb 4-1: config 0 descriptor?? [ 132.285752][ T792] ftdi_sio 4-1:0.234: FTDI USB Serial Device converter detected [ 132.299361][ T792] ftdi_sio ttyUSB0: unknown device type: 0x3376 [ 132.645543][ T5964] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 133.584295][ T5964] usb 3-1: USB disconnect, device number 9 [ 133.941892][ T5894] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.105432][ T5894] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.139714][ T5894] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.169250][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.207873][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.230628][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.256893][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.280450][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.305054][ T5894] usb 1-1: Product: syz [ 134.314928][ T5894] usb 1-1: Manufacturer: syz [ 134.404075][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 134.434797][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 134.480596][ T5894] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 134.490188][ T5894] cdc_wdm 1-1:1.0: Unknown control protocol [ 134.785856][ T5964] usb 4-1: USB disconnect, device number 9 [ 134.792554][ T5964] ftdi_sio 4-1:0.234: device disconnected [ 134.834279][ T5894] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 135.582937][ T5894] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 135.605473][ T5894] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 135.633251][ T5894] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 135.655201][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.676886][ T6971] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 136.913021][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 136.913036][ T30] audit: type=1400 audit(1771226188.741:594): avc: denied { open } for pid=7004 comm="syz.4.244" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 136.943499][ T30] audit: type=1400 audit(1771226188.741:595): avc: denied { ioctl } for pid=7004 comm="syz.4.244" path="socket:[12150]" dev="sockfs" ino=12150 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.969626][ T30] audit: type=1400 audit(1771226188.741:596): avc: denied { getopt } for pid=7004 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.191963][ T792] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.255855][ T7009] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 137.264130][ T30] audit: type=1400 audit(1771226189.081:597): avc: denied { ioctl } for pid=7006 comm="syz.1.245" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.315136][ T30] audit: type=1400 audit(1771226189.141:598): avc: denied { create } for pid=7006 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 137.339276][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 137.351896][ T792] usb 5-1: device descriptor read/64, error -71 [ 137.591877][ T792] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.695870][ T5894] usb 3-1: string descriptor 0 read error: -71 [ 137.715071][ T5894] hub 3-1:32.0: USB hub found [ 137.735618][ T5964] usb 1-1: USB disconnect, device number 7 [ 137.738403][ T5894] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 137.762315][ T792] usb 5-1: device descriptor read/64, error -71 [ 138.103308][ T792] usb usb5-port1: attempt power cycle [ 138.164005][ T5894] usb 3-1: USB disconnect, device number 10 [ 138.372546][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.543987][ T7022] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.249'. [ 138.558506][ T7020] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.249'. [ 138.661917][ T792] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 138.693046][ T792] usb 5-1: device descriptor read/8, error -71 [ 138.781901][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 138.788617][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 138.832068][ T5929] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 138.841138][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.849259][ T5929] usb 1-1: Product: syz [ 138.859003][ T5929] usb 1-1: Manufacturer: syz [ 138.866538][ T5929] usb 1-1: SerialNumber: syz [ 138.878418][ T5929] usb 1-1: config 0 descriptor?? [ 138.951888][ T792] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.972502][ T792] usb 5-1: device descriptor read/8, error -71 [ 139.093651][ T792] usb usb5-port1: unable to enumerate USB device [ 139.461888][ T5853] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 140.645148][ T5853] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 140.656401][ T5853] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 140.667374][ T5853] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 140.676739][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.733413][ T7025] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 141.695250][ T30] audit: type=1400 audit(1771226193.521:599): avc: denied { append } for pid=7040 comm="syz.2.254" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.726405][ T30] audit: type=1400 audit(1771226193.521:600): avc: denied { read } for pid=7040 comm="syz.2.254" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.751716][ T30] audit: type=1400 audit(1771226193.521:601): avc: denied { open } for pid=7040 comm="syz.2.254" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.776497][ T30] audit: type=1400 audit(1771226193.601:602): avc: denied { ioctl } for pid=7040 comm="syz.2.254" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.753363][ T5853] usb 2-1: string descriptor 0 read error: -71 [ 142.766239][ T5853] hub 2-1:32.0: USB hub found [ 142.908056][ T5964] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 143.788487][ T30] audit: type=1400 audit(1771226194.871:603): avc: denied { listen } for pid=7049 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.808046][ T30] audit: type=1400 audit(1771226194.871:604): avc: denied { connect } for pid=7049 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.833115][ T5929] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 143.885833][ T5853] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 143.915623][ T5929] usb 1-1: USB disconnect, device number 8 [ 144.183708][ T30] audit: type=1400 audit(1771226196.001:605): avc: denied { read } for pid=7054 comm="syz.0.260" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.291916][ T5964] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 144.322158][ T5964] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 144.334928][ T30] audit: type=1400 audit(1771226196.001:606): avc: denied { open } for pid=7054 comm="syz.0.260" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.401941][ T5964] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 144.411005][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.433420][ T5853] usb 2-1: USB disconnect, device number 9 [ 144.447403][ T30] audit: type=1400 audit(1771226196.031:607): avc: denied { ioctl } for pid=7054 comm="syz.0.260" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.489598][ T7048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 144.572176][ T30] audit: type=1400 audit(1771226196.141:608): avc: denied { write } for pid=7054 comm="syz.0.260" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.660749][ T30] audit: type=1400 audit(1771226196.431:609): avc: denied { setopt } for pid=7064 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.682117][ T30] audit: type=1400 audit(1771226196.431:610): avc: denied { read } for pid=7064 comm="syz.4.261" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 144.709293][ T30] audit: type=1400 audit(1771226196.431:611): avc: denied { open } for pid=7064 comm="syz.4.261" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.886721][ T30] audit: type=1400 audit(1771226197.671:612): avc: denied { create } for pid=7075 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.265676][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 146.616207][ T5964] usb 4-1: string descriptor 0 read error: -71 [ 146.654816][ T5964] hub 4-1:32.0: USB hub found [ 146.661885][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.680521][ T5964] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 146.945135][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.982791][ T5964] usb 4-1: USB disconnect, device number 10 [ 147.065148][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.141876][ T792] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 147.230609][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.243306][ T7099] nvme_fabrics: missing parameter 'transport=%s' [ 147.257283][ T7099] nvme_fabrics: missing parameter 'nqn=%s' [ 147.392949][ T5873] usb 2-1: Product: syz [ 147.429992][ T792] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 147.476950][ T5873] usb 2-1: Manufacturer: syz [ 147.499764][ T5873] usb 2-1: SerialNumber: syz [ 147.505764][ T792] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 147.990862][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.632489][ T792] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 148.835442][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.881327][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.949020][ T7107] syzkaller0: entered promiscuous mode [ 149.018722][ T7107] syzkaller0: entered allmulticast mode [ 149.373308][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.412268][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.519148][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.579863][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.813800][ T792] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 150.410723][ T792] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 150.554390][ T792] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 150.842803][ T792] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 151.393086][ T792] usb 5-1: USB disconnect, device number 16 [ 153.026525][ T5853] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.301916][ T5894] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 153.385401][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 153.427642][ T5853] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 153.465560][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.620721][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.668331][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.698891][ T5853] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.733300][ T5853] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.773424][ T5894] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 153.857026][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.906884][ T5894] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 153.933828][ T5894] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 153.949349][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.045330][ T7132] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 154.190273][ T7134] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 154.219549][ T7134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.282'. [ 154.236673][ T7134] bridge0: port 3(dummy0) entered blocking state [ 154.244637][ T5873] cdc_ncm 2-1:1.0: bind() failure [ 154.265976][ T5873] usbtest 2-1:1.1: probe with driver usbtest failed with error -32 [ 154.278827][ T7134] bridge0: port 3(dummy0) entered disabled state [ 154.543357][ T5853] usb 3-1: usb_control_msg returned -32 [ 155.883274][ T7134] dummy0: entered allmulticast mode [ 155.891662][ T7134] dummy0: entered promiscuous mode [ 156.325635][ T5853] usbtmc 3-1:16.0: can't read capabilities [ 156.455710][ T5853] usb 3-1: USB disconnect, device number 11 [ 156.612836][ T7134] bridge0: port 3(dummy0) entered blocking state [ 156.619271][ T7134] bridge0: port 3(dummy0) entered forwarding state [ 156.713599][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 157.787059][ T5964] usb 2-1: USB disconnect, device number 10 [ 158.104373][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 158.110992][ T5894] hub 1-1:32.0: USB hub found [ 158.215894][ T5894] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 158.759877][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.045200][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 159.050588][ T5894] usb 1-1: USB disconnect, device number 9 [ 159.097973][ T10] usb 3-1: config 39 has an invalid interface number: 251 but max is 0 [ 159.150488][ T10] usb 3-1: config 39 contains an unexpected descriptor of type 0x2, skipping [ 159.174134][ T7157] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 159.208096][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 159.208112][ T30] audit: type=1400 audit(1771226211.031:615): avc: denied { write } for pid=7159 comm="syz.4.289" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 159.224991][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.288'. [ 159.244944][ T10] usb 3-1: config 39 has no interface number 0 [ 159.271705][ T10] usb 3-1: config 39 interface 251 altsetting 127 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 159.292308][ T7157] bridge0: port 3(dummy0) entered blocking state [ 159.298724][ T7157] bridge0: port 3(dummy0) entered disabled state [ 159.308919][ T10] usb 3-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 159.473158][ T7157] dummy0: entered allmulticast mode [ 159.479045][ T10] usb 3-1: config 39 interface 251 altsetting 127 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 159.491554][ T7157] dummy0: entered promiscuous mode [ 159.496740][ T10] usb 3-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 159.510313][ T10] usb 3-1: config 39 interface 251 altsetting 127 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 159.799252][ T10] usb 3-1: config 39 interface 251 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 159.810651][ T10] usb 3-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 159.922242][ T7157] bridge0: port 3(dummy0) entered blocking state [ 159.928711][ T7157] bridge0: port 3(dummy0) entered forwarding state [ 159.945288][ T10] usb 3-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 159.986267][ T10] usb 3-1: config 39 interface 251 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 160.036310][ T10] usb 3-1: config 39 interface 251 altsetting 127 bulk endpoint 0x9 has invalid maxpacket 1024 [ 160.061546][ T10] usb 3-1: config 39 interface 251 has no altsetting 0 [ 160.071879][ T5894] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.113980][ T10] usb 3-1: New USB device found, idVendor=0c52, idProduct=2883, bcdDevice=2e.84 [ 160.650609][ T30] audit: type=1400 audit(1771226212.401:616): avc: denied { getopt } for pid=7169 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.695199][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 160.816640][ T5894] usb 5-1: config 0 has an invalid interface number: 170 but max is 0 [ 160.827744][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.867140][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.897678][ T10] usb 3-1: Product: 嵂潩ꀤ웦谌旿鵆ఫҶ띆찄뛴㥭그깒뺌덺䂦髐铿迮敭⥱槽䕀၂뜽ᝍ组杫臆訄鷤⡌猯햠ꭜሕ惌╂㱧뛁浐쪿뼞獖跩⍕ꪫ僼⧣掆⇢屡쀯쫓덱塭═❛㰇๡⪢㿖氥䡗䔪矠㝍䇂쑒臛䮭ڰ벡᳅ﭑ῱⤝Ⰿ矑鳄্刮浒瞓達ᢒݷᮘ鰤澟猸ଭ딯ށ祕䫴ꭏ͈秓 [ 161.073648][ T5894] usb 5-1: config 0 has no interface number 0 [ 161.119288][ T5894] usb 5-1: config 0 interface 170 altsetting 0 endpoint 0x2 has invalid maxpacket 34315, setting to 64 [ 161.155171][ T5894] usb 5-1: config 0 interface 170 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 161.169851][ T10] usb 3-1: Manufacturer: ⷜ俰≡숣펜퐓꼟婁Ⱗ풰⃥㖟Ᏽ㆞揀䒛稌求㈡뤕嵻ﯴਜ袣ׄ淏䳉橧䞍鐘벝컥率ꕮ澂ᵳꋺ翑꦳쒳睬䔥늇 [ 161.187878][ T10] usb 3-1: SerialNumber: Д [ 161.194103][ T5894] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1031, bcdDevice=46.fd [ 161.230288][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.314817][ T5894] usb 5-1: Product: ࠄ [ 161.319032][ T5894] usb 5-1: Manufacturer: ꒾럗嫉铪汦픙딿ꤡ㫅灟⁕蛌鮲ফ鯯蟫籙릫㹘撶↘㤇摁⢿⁲℘⚱뙃ř溞㤤կ꫖﷩斂蚚ꁻﻣ⥅堟ꪙর考铲縊ꨞТ擼 [ 161.391309][ T10] usb 3-1: can't set config #39, error -71 [ 161.435008][ T10] usb 3-1: USB disconnect, device number 12 [ 161.470175][ T5894] usb 5-1: SerialNumber: syz [ 161.494166][ T792] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.505549][ T5894] usb 5-1: config 0 descriptor?? [ 161.712061][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 161.741021][ T792] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.947831][ T5894] option 5-1:0.170: GSM modem (1-port) converter detected [ 162.127333][ T792] usb 2-1: config 0 has no interface number 0 [ 162.247467][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 162.261850][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.277818][ T5894] usb 5-1: USB disconnect, device number 17 [ 162.287901][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 162.311287][ T5894] option 5-1:0.170: device disconnected [ 162.416896][ T792] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.635834][ T30] audit: type=1400 audit(1771226214.461:617): avc: denied { bind } for pid=7175 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.751873][ T792] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.805467][ T792] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.921427][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.950012][ T792] usb 2-1: config 0 descriptor?? [ 162.991939][ T792] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 163.233826][ T7174] ldusb 2-1:0.55: Write buffer overflow, 12582592 bytes dropped [ 164.846772][ T7174] FAULT_INJECTION: forcing a failure. [ 164.846772][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.196870][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) [ 165.196898][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.196908][ T7174] Call Trace: [ 165.196914][ T7174] [ 165.196921][ T7174] dump_stack_lvl+0x100/0x190 [ 165.196955][ T7174] should_fail_ex.cold+0x5/0xa [ 165.196983][ T7174] _copy_from_user+0x2e/0xd0 [ 165.197002][ T7174] ld_usb_write+0x331/0xbc0 [ 165.197033][ T7174] ? __pfx_ld_usb_write+0x10/0x10 [ 165.197059][ T7174] ? avc_policy_seqno+0x9/0x20 [ 165.197076][ T7174] ? selinux_file_permission+0x8f/0x6d0 [ 165.197105][ T7174] ? bpf_lsm_file_permission+0x9/0x10 [ 165.197127][ T7174] ? security_file_permission+0x76/0x210 [ 165.197155][ T7174] ? rw_verify_area+0xce/0x6d0 [ 165.197178][ T7174] ? __pfx_ld_usb_write+0x10/0x10 [ 165.197202][ T7174] vfs_writev+0x5ea/0xe10 [ 165.197231][ T7174] ? __pfx_vfs_writev+0x10/0x10 [ 165.197260][ T7174] ? find_held_lock+0x2b/0x80 [ 165.197297][ T7174] ? __fget_files+0x21f/0x3d0 [ 165.197329][ T7174] ? do_writev+0x28a/0x340 [ 165.197350][ T7174] do_writev+0x28a/0x340 [ 165.197372][ T7174] ? __pfx_do_writev+0x10/0x10 [ 165.197401][ T7174] do_syscall_64+0x106/0xf80 [ 165.197422][ T7174] ? clear_bhb_loop+0x40/0x90 [ 165.197444][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.197461][ T7174] RIP: 0033:0x7fe72199bf79 [ 165.197476][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.197493][ T7174] RSP: 002b:00007fe722893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 165.197511][ T7174] RAX: ffffffffffffffda RBX: 00007fe721c15fa0 RCX: 00007fe72199bf79 [ 165.197523][ T7174] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 165.197533][ T7174] RBP: 00007fe722893090 R08: 0000000000000000 R09: 0000000000000000 [ 165.197543][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.197553][ T7174] R13: 00007fe721c16038 R14: 00007fe721c15fa0 R15: 00007ffed5c52c18 [ 165.197578][ T7174] [ 165.749711][ T5894] usb 2-1: USB disconnect, device number 11 [ 166.376218][ T5894] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 166.601185][ T792] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 166.852158][ T792] usb 5-1: device descriptor read/all, error -71 [ 166.890299][ T30] audit: type=1400 audit(1771226218.711:618): avc: denied { mounton } for pid=7198 comm="syz.0.299" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 166.914436][ T7199] ./cgroup: Can't lookup blockdev [ 167.958444][ T30] audit: type=1400 audit(1771226219.731:619): avc: denied { read } for pid=7203 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.382102][ T30] audit: type=1400 audit(1771226220.111:620): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 273.421762][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.428755][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7037/1:b..l [ 273.436889][ C1] rcu: (detected by 1, t=10502 jiffies, g=17905, q=1018 ncpus=2) [ 273.444661][ C1] task:syz.3.253 state:R running task stack:23224 pid:7037 tgid:7037 ppid:5805 task_flags:0x40064c flags:0x00080001 [ 273.458402][ C1] Call Trace: [ 273.461656][ C1] [ 273.464559][ C1] __schedule+0xfee/0x60e0 [ 273.468954][ C1] ? __pfx___schedule+0x10/0x10 [ 273.473770][ C1] ? find_held_lock+0x2b/0x80 [ 273.478415][ C1] ? rcu_is_watching+0x12/0xc0 [ 273.483146][ C1] preempt_schedule_irq+0x50/0x90 [ 273.488147][ C1] irqentry_exit+0x17b/0x670 [ 273.492707][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.498654][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 273.503822][ C1] Code: 05 3b 22 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 06 71 f4 0e 0f 82 c2 02 00 00 8b 35 1e a4 f4 0e 85 f6 0f 85 dd 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd 21 28 12 0f 85 02 03 00 00 48 83 c4 [ 273.523396][ C1] RSP: 0000:ffffc9001cadeec8 EFLAGS: 00000206 [ 273.529442][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 273.537398][ C1] RDX: 0000000000000000 RSI: ffffffff8de46fb3 RDI: ffffffff8c1adf20 [ 273.545342][ C1] RBP: ffffffff8e7e94a0 R08: 0000000086db7919 R09: 0000000000000007 [ 273.553291][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 273.561261][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.569222][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 273.574399][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 273.579565][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.585701][ C1] unwind_next_frame+0xd1/0x1ea0 [ 273.591072][ C1] ? unwind_next_frame+0xbd/0x1ea0 [ 273.596167][ C1] ? evict+0x3c2/0xad0 [ 273.600218][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.606344][ C1] arch_stack_walk+0x94/0xf0 [ 273.610906][ C1] ? evict+0x3c2/0xad0 [ 273.614950][ C1] stack_trace_save+0x8e/0xc0 [ 273.619599][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 273.624940][ C1] ? __lock_acquire+0x4a5/0x2630 [ 273.629865][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.635640][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 273.640809][ C1] save_stack+0x162/0x1e0 [ 273.645110][ C1] ? __pfx_save_stack+0x10/0x10 [ 273.649941][ C1] ? free_unref_folios+0xac6/0x1760 [ 273.655135][ C1] ? folios_put_refs+0x53c/0x840 [ 273.660055][ C1] ? shmem_undo_range+0x5e5/0x1570 [ 273.665156][ C1] ? shmem_evict_inode+0x39e/0xbd0 [ 273.670240][ C1] ? evict+0x3c2/0xad0 [ 273.674545][ C1] ? page_ext_put+0x3e/0xd0 [ 273.679023][ C1] __reset_page_owner+0x84/0x190 [ 273.683935][ C1] free_unref_folios+0xac6/0x1760 [ 273.689107][ C1] ? rcu_is_watching+0x12/0xc0 [ 273.693839][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 273.699615][ C1] folios_put_refs+0x53c/0x840 [ 273.704415][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 273.709670][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 273.715971][ C1] shmem_undo_range+0x5e5/0x1570 [ 273.720886][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 273.726266][ C1] shmem_evict_inode+0x39e/0xbd0 [ 273.731216][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 273.736920][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 273.742354][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 273.748392][ C1] ? find_held_lock+0x2b/0x80 [ 273.753051][ C1] ? evict+0x37e/0xad0 [ 273.757091][ C1] ? evict+0x37e/0xad0 [ 273.761653][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 273.767095][ C1] evict+0x3c2/0xad0 [ 273.770986][ C1] ? find_held_lock+0x2b/0x80 [ 273.775652][ C1] ? __pfx_evict+0x10/0x10 [ 273.780046][ C1] ? iput.part.0+0x5fd/0xf50 [ 273.784607][ C1] iput.part.0+0x605/0xf50 [ 273.788992][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 273.794248][ C1] iput+0x35/0x40 [ 273.797852][ C1] dentry_unlink_inode+0x2a1/0x490 [ 273.802936][ C1] __dentry_kill+0x1d0/0x600 [ 273.807494][ C1] finish_dput+0x76/0x480 [ 273.811791][ C1] dput.part.0+0x456/0x570 [ 273.816178][ C1] dput+0x1f/0x30 [ 273.819779][ C1] __fput+0x519/0xb40 [ 273.823743][ C1] task_work_run+0x150/0x240 [ 273.828304][ C1] ? __pfx_task_work_run+0x10/0x10 [ 273.833386][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 273.838641][ C1] do_exit+0x829/0x2a90 [ 273.842771][ C1] ? __pfx_do_exit+0x10/0x10 [ 273.847332][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 273.853298][ C1] do_group_exit+0xd5/0x2a0 [ 273.857774][ C1] get_signal+0x1ec7/0x21e0 [ 273.862265][ C1] ? __pfx_get_signal+0x10/0x10 [ 273.867176][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 273.872706][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 273.878832][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 273.884101][ C1] irqentry_exit+0x1f8/0x670 [ 273.888662][ C1] asm_exc_page_fault+0x26/0x30 [ 273.893481][ C1] RIP: 0033:0x7fe0dc59bf81 [ 273.897862][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 273.903901][ C1] RAX: 0000000000000000 RBX: 00007fe0dc816090 RCX: 00007fe0dc59bf79 [ 273.911842][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 273.919781][ C1] RBP: 00007fe0dc6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 273.927736][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.935677][ C1] R13: 00007fe0dc816128 R14: 00007fe0dc816090 R15: 00007fffe8737f78 [ 273.943623][ C1] [ 273.946616][ C1] rcu: rcu_preempt kthread starved for 10434 jiffies! g17905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 273.957772][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 273.967718][ C1] rcu: RCU grace-period kthread stack dump: [ 273.973572][ C1] task:rcu_preempt state:R running task stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 273.987022][ C1] Call Trace: [ 273.990293][ C1] [ 273.993207][ C1] __schedule+0xfee/0x60e0 [ 273.997605][ C1] ? __lock_acquire+0x4a5/0x2630 [ 274.002550][ C1] ? __pfx___schedule+0x10/0x10 [ 274.007408][ C1] ? find_held_lock+0x2b/0x80 [ 274.012070][ C1] ? schedule+0x2bf/0x390 [ 274.016377][ C1] schedule+0xdd/0x390 [ 274.020418][ C1] schedule_timeout+0x127/0x280 [ 274.025238][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 274.030579][ C1] ? __pfx_process_timeout+0x10/0x10 [ 274.035836][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 274.041613][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 274.047058][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 274.051811][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 274.057100][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 274.062031][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 274.067206][ C1] ? rcu_is_watching+0x12/0xc0 [ 274.071949][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 274.077737][ C1] rcu_gp_kthread+0x179/0x230 [ 274.082390][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.087563][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 274.093342][ C1] ? __kthread_parkme+0x18c/0x230 [ 274.098351][ C1] ? kthread+0x13a/0x450 [ 274.102559][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.107727][ C1] kthread+0x370/0x450 [ 274.111781][ C1] ? __pfx_kthread+0x10/0x10 [ 274.116367][ C1] ret_from_fork+0x754/0xd80 [ 274.120934][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 274.126023][ C1] ? __switch_to+0x7b4/0x1120 [ 274.130676][ C1] ? __pfx_kthread+0x10/0x10 [ 274.135245][ C1] ret_from_fork_asm+0x1a/0x30 [ 274.140000][ C1] [ 274.143013][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 274.149311][ C1] Sending NMI from CPU 1 to CPUs 0: [ 274.154517][ C0] NMI backtrace for cpu 0 [ 274.154530][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 274.154545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.154554][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 274.154574][ C0] Code: 98 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 1d 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 274.154587][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 274.154598][ C0] RAX: 00000000008bd403 RBX: ffffffff8e4975c0 RCX: ffffffff8b8e5c75 [ 274.154607][ C0] RDX: 0000000000000000 RSI: ffffffff8de6cf89 RDI: ffffffff8c1adf20 [ 274.154616][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 274.154624][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 274.154632][ C0] R13: 0000000000000000 R14: ffffffff90d92f10 R15: 0000000000000000 [ 274.154641][ C0] FS: 0000000000000000(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 274.154655][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.154663][ C0] CR2: 00005594fbecabe0 CR3: 000000002a15c000 CR4: 00000000003526f0 [ 274.154672][ C0] Call Trace: [ 274.154678][ C0] [ 274.154683][ C0] default_idle+0x9/0x10 [ 274.154700][ C0] default_idle_call+0x6c/0xb0 [ 274.154717][ C0] do_idle+0x35b/0x4b0 [ 274.154734][ C0] ? __pfx_do_idle+0x10/0x10 [ 274.154752][ C0] cpu_startup_entry+0x4f/0x60 [ 274.154766][ C0] rest_init+0x251/0x260 [ 274.154784][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 274.154802][ C0] start_kernel+0x47f/0x480 [ 274.154818][ C0] x86_64_start_reservations+0x24/0x30 [ 274.154834][ C0] x86_64_start_kernel+0x12b/0x130 [ 274.154850][ C0] common_startup_64+0x13e/0x148 [ 274.154870][ C0]