last executing test programs: 5.945420333s ago: executing program 1 (id=1350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206050000000000000000000300000405000100070000000900020073797a31000000000c00078008001200ffffffff050005000a000000050004000100000011000300686173683a6e65742c6e657400000000"], 0x58}}, 0x40000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="e400000043000701fefffffffcdbdf25017c000004004580ca0001800000", @ANYBLOB="dfc554aab77c4c65a2c76a5decf947ecfd3cfff5f8954affd67a64a306425b3f35d9d4c863fc07a78444facce0056037658439b09610"], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 4.969584446s ago: executing program 1 (id=1355): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001070101000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103083, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x4000000000000, 0x3, 0x554, {0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x3, 0x80000000000, 0x0, 0x0, 0x0, 0xa000, 0xfffffffc, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7, {0xfffffffffffffffc, 0xe3, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x0, 0xe64, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f00000000c0)) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000004043080104000000000000000000000002050003003a00000004000480"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) 4.690324845s ago: executing program 3 (id=1357): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x5c, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x10, 0x4, 0x0, 0x2b, 0x0, 0x67, 0x5, 0x29, 0xff, 0x40, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@ssrr={0x89, 0xf, 0x6e, [@empty, @empty, @local]}, @lsrr={0x83, 0x1b, 0x7e, [@remote, @rand_addr=0x64010101, @loopback, @broadcast, @broadcast, @loopback]}]}}}}}}}, 0x0) 4.605088767s ago: executing program 3 (id=1359): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x4, 0x8, 0xfff}, {0x4, 0x1000}, 0xff, 0x0, 0x1}, {{@in=@local, 0x80, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, 0x40) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0xa9e, 0x0, 0xbcb}, {0xa96, 0x0, 0xb9}]}) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x7fff}}, './file0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000180)="1cd3c2cd92561100b852e50996cf15bd04aade5308e201d2c66fc2f5ddcb09", &(0x7f0000000300)=""/149, &(0x7f0000000cc0)="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", &(0x7f00000003c0)="16587e7938fe9c1adb67836402d8c8c591699d61df5bec7076cf568e7ab52d77ea5c836d0b62aab5912fc5a854106df145554679faa5e50d3a348f83872916ba7eec0c427849e580e6e9809d6ffc949446ef4f9cc50f465065226d5078e939f9b130a5b83340cc88f822475a696718d362b294704c1835208aaff7eaa024d07cc5f42934be04db80ca6564052f31e9221507343932e8f79acd2dc69857b40eed88c17f2bd3531a7143d9a6b3ba11ca4152c60c2a445f86398654466bf9902c90219b7a48e45ff1d516a7352a459695a95c3208e7abe83bb662", 0x7, r10}, 0x38) r11 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000000000600150004000000140016"], 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4.361542701s ago: executing program 3 (id=1361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mlockall(0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000005e02, 0x20000000007ff, &(0x7f0000006680)) rt_sigtimedwait(0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x1000) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000840)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000a80)) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000009c0)={@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000880)=""/217, 0xd9}, &(0x7f0000000980), 0x24}, 0xa0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd0, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x42, 0x80, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x0, 0x3, 0x0, 0x10, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x1d, &(0x7f00000001c0)=@string={0x1d, 0x3, "3a65b9b32aa2075b37f43a939767f7a2a9e872fec43bf1b58ec9de"}}, {0x18, &(0x7f0000000200)=@string={0x18, 0x3, "22d8c9225bf15160a73fa3aea40b9932a7111296bde0"}}, {0xfc, &(0x7f0000000580)=ANY=[@ANYBLOB="fc03d75686d6438ad6e0546193bb90de12448fb053c1e5e3f584c42476cefc5c60e30415700989ae3b0e39eb5ec48cb48de1d8902c9173e87b644fd85a84527665efb8587423af2e1a6300e92eab5b344f3607f91064aa8065464f2bf4f807fa03d9ec261f32fbadd51e94b2ea40bbe326a5598b3b6a930aa40123d5e0800bc61a1aedc4c70621f3b0057238e900200d0d4b577c8480e0e1ebfd8a411b791617a731997f682162b9f272928523763a7cced507e0dc01a46bfa07bc0d026853cb82a0f96b078b809979d97a2a2316e1546557ad56eeae8cc63cd5062b8da60b7f5037f8cb4b597cf3664a00000000000000005618891d5aa8162efc00613d1a91f6b33dc62c85202d15ee654861a9eb3e7a654096081ddfb6f15a9e84cae29b961daac42c5d82594b081cb26e577e15e388e075f5e5e2e79407e4d01d7be172a02601b2cba80a7bed990a661d35f96293a0909b331d5a458d7331d9f867c03d2f1cab74e7a0a04dfea67a764eda0bb456e79fe1a0c2c34a1e81b0c938202d883e490b1894a3d54697f44390f3d730fc4fd624e301049ab6338d77fc4408a02368008e368868f34a6bb52dfed9832b7d9d7cdbc25e82cf5e0ecc0a57363715eb3b1e80c7a8053c11edb06e767bf525788554f669438530459b2be5b06b791aeba109dcd843152ba614f88b3b0e60f3733906bb57c990478a2e92b78ae6d32c8ace053e3d66d633494d47a00df2ddf5873b"]}, {0x62, &(0x7f0000000380)=@string={0x62, 0x3, "4e0d790ccc1bfb7a4236cef08b0173a8e119feb0272ee7dd719116fe0d99389e4190701e9446aaadafacafeabf35c7303408e379927d1e7d85af7063a2dfde02242c87fbe12d37745ab4aeb3ef43576c396c01ed7278f5cff7a071de25547b32"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1da031df7af3e97e}}, {0x42, &(0x7f0000000b00)=ANY=[@ANYBLOB="4203f2244d0e5449fac4e222f4ef40cd8972230ad15a3f287fa60b847852a31c78cfabb7bf764a7fbe238002c9573992685957846a261d6f6366dbaea87169b54820a3968917daab7808bf9a8fa80ebc9f5e02503341c278df619aea86b3ae39c20f5f25d0a746d5eaf4254c7ec90b6a2110bb352f19a46c0ae3e2ca41fbc61c08331ef11082b8a78bf721cb76e5454664b49658b3e2189f3543199a40cf0675"]}]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0}, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x10, 0x800) r3 = accept4$llc(r2, &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000800)=0x10, 0x80000) accept4$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x80000) 3.984748012s ago: executing program 4 (id=1365): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x1412, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x4008804) 3.983732838s ago: executing program 0 (id=1366): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000000002010400000000000000000a00fffc680003800c00028005000100890000002c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000aa2c00018014000300fc01000000000000000000000000000114000400fe80000000000000000000313c0002802c0001801400030000000000000000000000ffff7f00000114000400200100000000000000000000000000000c000280050001"], 0xb8}, 0x1, 0x0, 0x0, 0x20040015}, 0x20008090) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet(0x2, 0x3, 0x6) r5 = dup3(r3, r4, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904"], 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a", 0x36}], 0x1}, 0x40084) 3.975514355s ago: executing program 4 (id=1367): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x204000, 0x0, 0x334e8b, 0x200000a03503}) 3.893581559s ago: executing program 4 (id=1368): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00') getdents(r5, &(0x7f0000000000)=""/39, 0x82) 3.841317976s ago: executing program 1 (id=1369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.960605211s ago: executing program 1 (id=1370): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000040)=0x200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000dc0)={'gretap0\x00', 0x0, 0x1, 0x8000, 0xff, 0x7, {{0x5, 0x4, 0x3, 0x39, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x808000}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r3, 0xa, "e53d5448999bf178e22c"}, &(0x7f00000000c0)=0x12) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.955366595s ago: executing program 4 (id=1371): r0 = io_uring_setup(0x3c4e, &(0x7f0000000bc0)={0x0, 0xcb44, 0x3040, 0x0, 0x26c}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2a003) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) 2.735412327s ago: executing program 1 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa20000000000000700"/33], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0xa) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f00000000c0)={0x1}) (async) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="0b3def9fa63a6f72294e4efcd5c5c4fe1a1285cd6c82db6473423affe45e4c152bbf876f07040ad1f0fb47ea504153479ef2c0e13601d0ce24902000ad13a8c2819763cd67025417f3f82ffbaba361e9ea05bb32275d91"], 0x20}}, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0xae5}}, 0x1006) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) 2.464151878s ago: executing program 4 (id=1373): getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x39, 0x10, 0x70bd66, 0x4000, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r0, r0, r0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000019400)=0x0) stat(&(0x7f00000193c0)='./file1\x00', &(0x7f0000019480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000019500)='./file0\x00', &(0x7f0000019540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000019380)='system.posix_acl_access\x00', &(0x7f0000019600)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02020600", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r2, @ANYBLOB="040002000000000008000500", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="10000400000000002000010000000000"], 0x6c, 0x1) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r7 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_mtu(r7, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000080)={0xa, {0x2, 0x7f, 0x3}}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x9, 0x3, 0x4, @private0, @loopback, 0x40, 0x8, 0x7fff, 0x35}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0) 2.438977433s ago: executing program 1 (id=1374): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x0, 0x22, 0xb0, {0xb0, 0x11, "6cf10e4fb5bff4bab103fc324235632ed73a4d3274ec3533588e5a3dc35f70f7f3a5f431b881c0d29214ddd469ea266642a78552ed63d2de81de6578436e28add0dc3dc3fb09cf94311348c5ca4f0b83a8012c7dc4ebd589412ff22ef322afb279fe6e788872879412dff39ec4b3433666f9d168ce554cc1f755bde528947025472b725b928f9bb94ca2d76ee3c6dcffb485e7e3271e57c8d0f7c42f50d7d0f6f252b4393956ea96cfb3113e2a8f"}}, &(0x7f0000000800)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "1d0331177cc3a38d921d23789fa12d26edeb28b77295045be3ce54d44e4add74000a0bcc1d7326fc67182fb72a8ed5c998736e0287c3f86b369b480983b20259956cb42c77d7c733bd4c9f06b54be9817a72fac22883eeb00447c6c150faf0803a2ed5aad060e42980de26113363f88a5da3283b408c9b0bf16bf0ce851b96981b198163036f6275b8594aaec4f6ef38c9452646da729e081d4112caf35fe664f6e7"}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x40, 0x14, 0x5c, "ff4e624a5e7ebe18c9a6e3e65172c848efaa8925b536e5b320583e999456396de3066728db3e0108509ce2eda1e2f7f0e56bf48edd6ac8f740cd06437c6ddcf5726018247e2d4675a2440601fb6b7c5b251b76f6a65e265a50b0c21a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x5c}, &(0x7f00000009c0)={0xc0, 0x5, 0x2, "9e66"}, &(0x7f0000000a00)={0x40, 0x5, 0x4, "1243276f"}}) 2.230005647s ago: executing program 0 (id=1375): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)={0xfffffffffffffffb, 0x7, 0x1, 0x0, 0x0, [{{r4}, 0x1ff}]}) listen(r3, 0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000380)=ANY=[]) 1.838398661s ago: executing program 0 (id=1376): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.793396424s ago: executing program 2 (id=1377): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r5, @ANYRES32=0x1, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000008eec000000000000000000000000cd1f00000000000000ffd5d4125a303fe5df350e33224f433b56a7a007b8469c56063f877ee338b87f5392b24a6c9512e1f2d401da5b8a579a4200e8087aa203cf6c18edb415ea9268"], 0x50) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x1, 0xbf, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x800) 1.692868681s ago: executing program 0 (id=1378): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r3, r4, 0x3, 0x1, 0x2, 0x802, {0xac7c, 0x2, 0x40a, 0x68, 0x4f49, 0x2, 0x8, 0x45, 0x412c, 0xe154, 0x4, 0x8006, 0x403, 0x7fff, "fe1d00e13313000000000000276e9e440000c1261e09cb5b1b73840900"}}) (fail_nth: 3) 1.638499017s ago: executing program 2 (id=1379): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x204000, 0x0, 0x334e8b, 0x200000a03503}) 1.636511752s ago: executing program 4 (id=1380): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) fsopen(0x0, 0x0) r0 = syz_usbip_server_init(0x1) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001"], 0x0) mknod$loop(0x0, 0x2480, 0x1) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x444, 0x2, [@TCA_MATCHALL_ACT={0x440, 0x2, [@m_police={0x43c, 0x1, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x20004, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x0, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x6, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001"], 0x108}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="000088a80003110004"], 0x10da) 1.589912806s ago: executing program 2 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000041005e1d37429ab7f837a0153b0"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r0, &(0x7f0000000180)="bec927642a2872fb22539dd9ff7a1268f88325d2b53ad8e9e28366188f977b198558a03831540c74414348468cc851f2143bb69d990a5ef752d995217264e2a06571cad40d8bce813c4e6e6e09eb58118c14b64cc227977f09c6fd3496471fe6668e61a48d8dccf0ee210d7ac6e118255fdc52f8", &(0x7f0000000200)=""/2}, 0x20) 1.359646519s ago: executing program 0 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x190) syz_io_uring_setup(0xbc6, &(0x7f0000000380)={0x0, 0x4ad, 0x80, 0xffffffff, 0x20c}, &(0x7f0000000280)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x1135, &(0x7f0000000440)={0x0, 0x2ed3, 0x4, 0x3, 0x70}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x22, 0x2004, @fd_index=0x7, 0xfffffffffffffffb, &(0x7f00000005c0)="14e0a76bda10b45f52e2c8c2c0182b55ffd4afad2f0a8e6d0ce4bdcbfc01c03b71a84c70b0933398fb59767b6a79e9bb8bc805a9965d54d8d263570cda90c99a7b6c7b5af74363491db9b2eae296fb5a91725c241edd6e61a3bdc40393cf8971bbfd9e9d7cf3895a3a3ce05ff2496081111afbd029bab8d122598362337b4912daeda3f6d065618b66df3e", 0x8b, 0xc}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r3, 0xfffffffffffffc01, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6e726f3dcca439f16f74faea9c0183021572eb086482ed34cf169cf33ba3af485d5dd464cab69884d59b295d1a31e206a32042905531752c315832778d73fbacde05c6c2b248247cde3917d397e632e8ff51b0c1fb8bfc4d9b7ca331e3c07e258cf438c8cc08d64d9ba3f65300"/123, @ANYRESDEC=0x0]) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x2, 0x54, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7fc37c525df9cb47, 0x40, 0xffffffa7, 0x7}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000200), 0x80000001, 0x201) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) close_range(r10, r9, 0x2) r11 = io_uring_setup(0x20007, &(0x7f0000000040)={0x0, 0x4e1b, 0xc000, 0x8, 0x30e, 0x0, r8}) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.359431297s ago: executing program 2 (id=1383): r0 = io_uring_setup(0x3c4e, &(0x7f0000000bc0)={0x0, 0xcb44, 0x3040, 0x0, 0x26c}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x2a003) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000480)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) 674.243644ms ago: executing program 2 (id=1384): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpid() r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002) sched_setscheduler(r5, 0x5, 0x0) sched_rr_get_interval(r5, &(0x7f0000000180)) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000300)={@broadcast, @remote, 0x1, "41b9ecd65c2c041f544838356c23f97c763fba200031bc5a575605079da018fb", 0x4, 0xfffffffd, 0x80000000, 0xfffeffff}, 0x3c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2}) 652.622924ms ago: executing program 0 (id=1385): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000000002010400000000000000000a00fffc680003800c00028005000100890000002c000180140003002001000000000000000000000000000114000400fe8000000000000000000000000000aa2c00018014000300fc01000000000000000000000000000114000400fe80000000000000000000313c0002802c0001801400030000000000000000000000ffff7f00000114000400200100000000000000000000000000000c000280050001"], 0xb8}, 0x1, 0x0, 0x0, 0x20040015}, 0x20008090) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) arch_prctl$ARCH_SET_GS(0x1001, 0xfffffffffffffffd) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet(0x2, 0x3, 0x6) r5 = dup3(r3, r4, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904"], 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a", 0x36}], 0x1}, 0x40084) 634.544029ms ago: executing program 3 (id=1386): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)={0xfffffffffffffffb, 0x7, 0x1, 0x0, 0x0, [{{r4}, 0x1ff}]}) listen(r3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fc, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000380)=ANY=[]) 319.051023ms ago: executing program 3 (id=1387): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd}, 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xa) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="660fc732650f07470f01cab9800000c02e6726f3400fc7b50000000008040421020f30c4417ff030b9800000c048b800000000008000000f23c00f21f835010003000f23f80f30640f01cf65490fc79ce656000000f3010f1efcfc64653e470f1f690c", 0x63}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x77, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 55.650271ms ago: executing program 2 (id=1388): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) pipe2$9p(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=1389): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x0, 0x17, 0x6, "b9f1f5bb37f2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000002c26ef1ba00bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ge from 0 to 7 [ 326.041983][ T9331] Dev loop9: unable to read RDB block 7 [ 326.121470][ T9331] loop9: unable to read partition table [ 326.140922][ T9331] loop9: partition table beyond EOD, truncated [ 326.150562][ T9331] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 326.574052][ T9337] Dev loop9: unable to read RDB block 7 [ 326.792739][ T30] audit: type=1400 audit(1761260068.502:862): avc: denied { read } for pid=9339 comm="syz.1.892" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 326.816159][ T9337] loop9: unable to read partition table [ 326.837733][ T9337] loop9: partition table beyond EOD, truncated [ 326.866149][ T30] audit: type=1400 audit(1761260068.502:863): avc: denied { open } for pid=9339 comm="syz.1.892" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 326.939298][ T9337] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 328.374314][ T30] audit: type=1400 audit(1761260070.072:864): avc: denied { create } for pid=9355 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.393572][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.593503][ T30] audit: type=1400 audit(1761260070.082:865): avc: denied { write } for pid=9355 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 328.784973][ T9364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.521299][ T9373] netlink: 256 bytes leftover after parsing attributes in process `syz.0.899'. [ 329.577473][ T9376] dns_resolver: Unsupported content type (152) [ 329.737324][ T30] audit: type=1400 audit(1761260071.452:866): avc: denied { mounton } for pid=9383 comm="syz.1.905" path="/202/file0" dev="autofs" ino=24345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 329.811308][ T911] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 330.180014][ T911] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.201219][ T911] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.211812][ T911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.220787][ T911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 330.358105][ T911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 330.425694][ T911] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.482900][ T911] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.641327][ T911] usb 1-1: Product: syz [ 330.645554][ T911] usb 1-1: Manufacturer: syz [ 330.937801][ T911] cdc_wdm 1-1:1.0: skipping garbage [ 330.943082][ T911] cdc_wdm 1-1:1.0: skipping garbage [ 330.960770][ T911] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 330.971229][ T911] cdc_wdm 1-1:1.0: Unknown control protocol [ 330.979304][ T9407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.910'. [ 330.990092][ T9407] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 331.575941][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.645349][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.668481][ T9] usb 1-1: USB disconnect, device number 27 [ 331.831253][ T911] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.896777][ T30] audit: type=1400 audit(1761260073.592:867): avc: denied { read } for pid=9419 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 332.141486][ T9431] random: crng reseeded on system resumption [ 332.156211][ T30] audit: type=1400 audit(1761260073.872:868): avc: denied { map } for pid=9432 comm="syz.2.919" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.248069][ T9433] mkiss: ax0: crc mode is auto. [ 332.261563][ T30] audit: type=1400 audit(1761260073.872:869): avc: denied { execute } for pid=9432 comm="syz.2.919" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.286078][ T30] audit: type=1400 audit(1761260073.982:870): avc: denied { read append } for pid=9429 comm="syz.0.918" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 332.311819][ T30] audit: type=1400 audit(1761260073.982:871): avc: denied { open } for pid=9429 comm="syz.0.918" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 332.311861][ T30] audit: type=1400 audit(1761260074.002:872): avc: denied { ioctl } for pid=9429 comm="syz.0.918" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 332.391388][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 332.501498][ T911] usb 4-1: device descriptor read/64, error -71 [ 332.515556][ T7844] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 332.542079][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 332.548965][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 332.581360][ T9446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 332.587870][ T9446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.596467][ T9446] vhci_hcd vhci_hcd.0: Device attached [ 332.672018][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.921'. [ 332.713529][ T7844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 332.740148][ T7844] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 332.761488][ T9] usb 2-1: config 0 has no interface number 0 [ 332.772482][ T7844] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 332.781970][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 332.800781][ T7844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.815685][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 332.828293][ T7844] usb 3-1: Product: syz [ 332.832565][ T7844] usb 3-1: Manufacturer: syz [ 332.837192][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.841211][ T5823] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 332.845242][ T911] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 332.861543][ T1947] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 332.861582][ T7844] usb 3-1: SerialNumber: syz [ 332.873861][ T9] usb 2-1: Product: syz [ 332.878129][ T9] usb 2-1: Manufacturer: syz [ 332.884985][ T9] usb 2-1: SerialNumber: syz [ 332.894128][ T7844] usb 3-1: config 0 descriptor?? [ 332.901825][ T9] usb 2-1: config 0 descriptor?? [ 332.907289][ T9433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 332.914634][ T9433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.012035][ T911] usb 4-1: no configurations [ 333.016684][ T911] usb 4-1: can't read configurations, error -22 [ 333.021267][ T1947] usb 1-1: Using ep0 maxpacket: 16 [ 333.023358][ T911] usb usb4-port1: attempt power cycle [ 333.037978][ T1947] usb 1-1: config 0 has no interfaces? [ 333.043928][ T1947] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 333.107437][ T1947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.123166][ T9433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.130399][ T9433] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.143319][ T1947] usb 1-1: config 0 descriptor?? [ 333.354579][ T9447] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 333.361993][ T12] vhci_hcd: stop threads [ 333.366340][ T12] vhci_hcd: release socket [ 333.370884][ T12] vhci_hcd: disconnect device [ 333.379322][ T911] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 333.402560][ T911] usb 4-1: no configurations [ 333.411330][ T911] usb 4-1: can't read configurations, error -22 [ 333.443329][ T1947] usb 1-1: USB disconnect, device number 28 [ 333.461902][ T9454] FAULT_INJECTION: forcing a failure. [ 333.461902][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 333.475250][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.4.924 Not tainted syzkaller #0 PREEMPT(full) [ 333.475273][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.475282][ T9454] Call Trace: [ 333.475288][ T9454] [ 333.475294][ T9454] dump_stack_lvl+0x16c/0x1f0 [ 333.475322][ T9454] should_fail_ex+0x512/0x640 [ 333.475338][ T9454] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 333.475356][ T9454] should_failslab+0xc2/0x120 [ 333.475368][ T9454] kmem_cache_alloc_node_noprof+0x78/0x770 [ 333.475383][ T9454] ? __alloc_skb+0x2b2/0x380 [ 333.475406][ T9454] ? __alloc_skb+0x2b2/0x380 [ 333.475422][ T9454] ? __pfx_netlink_insert+0x10/0x10 [ 333.475442][ T9454] __alloc_skb+0x2b2/0x380 [ 333.475459][ T9454] ? __pfx___alloc_skb+0x10/0x10 [ 333.475475][ T9454] ? netlink_autobind.isra.0+0x158/0x370 [ 333.475493][ T9454] netlink_alloc_large_skb+0x69/0x140 [ 333.475508][ T9454] netlink_sendmsg+0x698/0xdd0 [ 333.475525][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.475553][ T9454] ____sys_sendmsg+0xa98/0xc70 [ 333.475578][ T9454] ? copy_msghdr_from_user+0x10a/0x160 [ 333.475598][ T9454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.475624][ T9454] ___sys_sendmsg+0x134/0x1d0 [ 333.475638][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.475650][ T9454] ? __lock_acquire+0x622/0x1c90 [ 333.475686][ T9454] __sys_sendmsg+0x16d/0x220 [ 333.475707][ T9454] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.475733][ T9454] ? xfd_validate_state+0x61/0x180 [ 333.475761][ T9454] do_syscall_64+0xcd/0xfa0 [ 333.475777][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.475789][ T9454] RIP: 0033:0x7fbbe2f8efc9 [ 333.475798][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.475808][ T9454] RSP: 002b:00007fbbe3e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.475818][ T9454] RAX: ffffffffffffffda RBX: 00007fbbe31e5fa0 RCX: 00007fbbe2f8efc9 [ 333.475828][ T9454] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 333.475837][ T9454] RBP: 00007fbbe3e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 333.475846][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.475855][ T9454] R13: 00007fbbe31e6038 R14: 00007fbbe31e5fa0 R15: 00007fffb5892f48 [ 333.475877][ T9454] [ 333.781652][ T911] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 333.826547][ T911] usb 4-1: no configurations [ 333.866992][ T911] usb 4-1: can't read configurations, error -22 [ 333.874516][ T911] usb usb4-port1: unable to enumerate USB device [ 334.093774][ T9458] bond0: entered promiscuous mode [ 334.098982][ T9458] bond_slave_0: entered promiscuous mode [ 334.107637][ T9458] bond_slave_1: entered promiscuous mode [ 334.135237][ T9458] dummy0: entered promiscuous mode [ 334.157032][ T9458] hsr1: entered promiscuous mode [ 334.162160][ T9458] hsr1: entered allmulticast mode [ 334.167331][ T9458] bond0: entered allmulticast mode [ 334.172577][ T9458] bond_slave_0: entered allmulticast mode [ 334.178435][ T9458] bond_slave_1: entered allmulticast mode [ 334.184536][ T9458] dummy0: entered allmulticast mode [ 334.454018][ T7844] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 334.482160][ T7844] usb 3-1: USB disconnect, device number 26 [ 335.940914][ T9] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 335.959772][ T9] usb 2-1: USB disconnect, device number 22 [ 336.519869][ T30] audit: type=1400 audit(1761260078.222:873): avc: denied { write } for pid=9480 comm="syz.4.932" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.547108][ T9484] loop7: detected capacity change from 0 to 16384 [ 336.779953][ T9504] fuse: Bad value for 'fd' [ 336.911229][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 337.065407][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 337.074803][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.083106][ T9] usb 2-1: Product: syz [ 337.087527][ T9] usb 2-1: Manufacturer: syz [ 337.092428][ T9] usb 2-1: SerialNumber: syz [ 337.099644][ T9] usb 2-1: config 0 descriptor?? [ 337.317248][ T1947] libceph: connect (1)[c::]:6789 error -101 [ 337.323820][ T1947] libceph: mon0 (1)[c::]:6789 connect error [ 337.536765][ T9491] ceph: No mds server is up or the cluster is laggy [ 337.585126][ T1947] libceph: connect (1)[c::]:6789 error -101 [ 337.658022][ T1947] libceph: mon0 (1)[c::]:6789 connect error [ 337.763033][ T1947] usb 2-1: USB disconnect, device number 23 [ 337.941617][ T5823] vhci_hcd: vhci_device speed not set [ 338.308884][ T30] audit: type=1400 audit(1761260079.352:874): avc: denied { connect } for pid=9517 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 338.488279][ T30] audit: type=1400 audit(1761260080.202:875): avc: denied { execute } for pid=9529 comm="syz.3.944" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 339.092427][ T9539] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 339.203404][ T9543] netlink: 'syz.1.948': attribute type 6 has an invalid length. [ 339.761591][ T9560] fuse: Bad value for 'fd' [ 340.342130][ T30] audit: type=1400 audit(1761260082.052:876): avc: denied { ioctl } for pid=9563 comm="syz.4.956" path="socket:[25921]" dev="sockfs" ino=25921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.273372][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 341.511260][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 341.622802][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 341.640712][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 341.682539][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.691233][ T9] usb 3-1: Product: syz [ 341.727971][ T9] usb 3-1: Manufacturer: syz [ 341.748042][ T9] usb 3-1: SerialNumber: syz [ 341.770936][ T9] usb 3-1: config 0 descriptor?? [ 341.882964][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 342.143394][ T9599] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.295200][ T8408] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.510576][ T9] gspca_zc3xx: reg_w_i err -110 [ 343.072477][ T30] audit: type=1400 audit(1761260084.432:877): avc: denied { execute_no_trans } for pid=9570 comm="syz.2.958" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.120800][ T30] audit: type=1400 audit(1761260084.502:878): avc: denied { append } for pid=9570 comm="syz.2.958" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 343.121952][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 343.151411][ T911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 343.159582][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 343.216921][ T9610] fuse: Unknown parameter '0x0000000000000003' [ 343.302600][ T911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 343.309337][ T911] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 343.318448][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.334166][ T911] usb 5-1: config 0 descriptor?? [ 343.360347][ T30] audit: type=1400 audit(1761260085.072:879): avc: denied { execute } for pid=9611 comm="syz.3.970" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 343.464235][ T30] audit: type=1400 audit(1761260085.182:880): avc: denied { connect } for pid=9616 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 343.510094][ T30] audit: type=1400 audit(1761260085.222:881): avc: denied { append } for pid=9616 comm="syz.3.971" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.570917][ T911] (null): keene_cmd_main failed (-71) [ 343.581549][ T911] video4linux radio48: keene_cmd_main failed (-71) [ 343.588406][ T911] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 343.598738][ T911] usb 5-1: USB disconnect, device number 26 [ 344.164297][ T911] usb 3-1: USB disconnect, device number 27 [ 344.261240][ T53] Bluetooth: hci5: command 0x1003 tx timeout [ 344.269521][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 344.274267][ T30] audit: type=1400 audit(1761260085.982:882): avc: denied { write } for pid=9628 comm="syz.4.975" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 344.377650][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 344.413235][ T9618] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 344.491237][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 344.585809][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 344.713519][ T9] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 344.722071][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.732225][ T9] usb 2-1: config 0 has no interfaces? [ 344.737882][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 345.158268][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.171018][ T9] usb 2-1: config 0 descriptor?? [ 345.196516][ T9647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9647 comm=syz.4.978 [ 345.622598][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 345.706415][ T30] audit: type=1400 audit(1761260087.422:883): avc: denied { read } for pid=9643 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.245550][ T9668] fuse: Unknown parameter '0x0000000000000003' [ 347.547275][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 347.598571][ T9683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9683 comm=syz.0.987 [ 347.627311][ T9689] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.990'. [ 347.651440][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 347.666832][ T30] audit: type=1400 audit(1761260089.382:884): avc: denied { write } for pid=9692 comm="syz.0.991" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 347.706228][ T9693] syzkaller0: entered promiscuous mode [ 347.713895][ T9693] syzkaller0: entered allmulticast mode [ 347.824542][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.847467][ T9] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 348.274190][ T9] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 348.298845][ T9] usb 4-1: config 14 has no interface number 0 [ 348.305834][ T9] usb 4-1: config 14 interface 21 has no altsetting 0 [ 348.320139][ T9] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 348.331224][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.339391][ T9] usb 4-1: Product: syz [ 348.345003][ T9] usb 4-1: Manufacturer: syz [ 348.349776][ T9] usb 4-1: SerialNumber: syz [ 348.382488][ T5899] usb 2-1: USB disconnect, device number 24 [ 348.430098][ T30] audit: type=1400 audit(1761260090.142:885): avc: denied { create } for pid=9698 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 348.513863][ T30] audit: type=1400 audit(1761260090.232:886): avc: denied { ioctl } for pid=9698 comm="syz.1.993" path="socket:[25002]" dev="sockfs" ino=25002 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 348.516337][ T9701] x_tables: duplicate underflow at hook 3 [ 348.548425][ T30] audit: type=1400 audit(1761260090.262:887): avc: denied { bind } for pid=9700 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.579748][ T30] audit: type=1400 audit(1761260090.262:888): avc: denied { getopt } for pid=9700 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.594024][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.609322][ T30] audit: type=1400 audit(1761260090.262:889): avc: denied { ioctl } for pid=9700 comm="syz.4.994" path="socket:[25012]" dev="sockfs" ino=25012 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.626200][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 348.724948][ T9] usb 4-1: USB disconnect, device number 32 [ 348.871372][ T5899] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 349.001246][ T5899] usb 5-1: device descriptor read/64, error -71 [ 349.230631][ T9709] fuse: Unknown parameter '0x0000000000000003' [ 349.241306][ T5899] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 349.371374][ T5899] usb 5-1: device descriptor read/64, error -71 [ 349.499630][ T5899] usb usb5-port1: attempt power cycle [ 349.593468][ T9697] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 349.600485][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 349.673203][ T9711] netlink: 'syz.1.996': attribute type 6 has an invalid length. [ 349.821182][ T30] audit: type=1400 audit(1761260091.532:890): avc: denied { relabelfrom } for pid=9715 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.857271][ T5899] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 349.887571][ T30] audit: type=1400 audit(1761260091.562:891): avc: denied { relabelto } for pid=9715 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 349.917820][ T5899] usb 5-1: device descriptor read/8, error -71 [ 350.072685][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1001'. [ 350.127601][ T9725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9725 comm=syz.1.1001 [ 350.171255][ T5899] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 350.255053][ T5899] usb 5-1: device descriptor read/8, error -71 [ 350.352297][ T30] audit: type=1400 audit(1761260092.062:892): avc: denied { ioctl } for pid=9732 comm="syz.1.1004" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 350.458264][ T5899] usb usb5-port1: unable to enumerate USB device [ 350.603462][ T9744] vlan2: entered promiscuous mode [ 350.609806][ T9744] vlan2: entered allmulticast mode [ 350.616273][ T9744] hsr_slave_1: entered allmulticast mode [ 350.752055][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 350.844608][ T30] audit: type=1400 audit(1761260092.562:893): avc: denied { setopt } for pid=9748 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 350.902663][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.911772][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.921907][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.930873][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.941961][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.954175][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.963275][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.971279][ T9] usb 2-1: Product: syz [ 350.975451][ T9] usb 2-1: Manufacturer: syz [ 350.983161][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 350.988360][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 350.994806][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 351.000916][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 351.071518][ T30] audit: type=1400 audit(1761260092.792:894): avc: denied { getopt } for pid=9752 comm="syz.2.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 351.201001][ T5899] usb 2-1: USB disconnect, device number 25 [ 351.758822][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 351.818943][ T9766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9766 comm=syz.1.1014 [ 352.236751][ T9779] netlink: zone id is out of range [ 352.242098][ T9779] netlink: zone id is out of range [ 352.251289][ T9779] netlink: zone id is out of range [ 352.256530][ T9779] netlink: zone id is out of range [ 352.298602][ T9776] syzkaller0: entered promiscuous mode [ 352.304261][ T9779] netlink: zone id is out of range [ 352.309566][ T9776] syzkaller0: entered allmulticast mode [ 352.388528][ T9779] netlink: set zone limit has 8 unknown bytes [ 352.409922][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1015'. [ 352.443559][ T9772] bridge0: port 3(batadv0) entered disabled state [ 352.450267][ T9772] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.457606][ T9772] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.508146][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.518700][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.565331][ T8408] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.605338][ T8408] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.656108][ T8408] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.689565][ T8408] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.817957][ T9795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1020'. [ 354.883980][ T9811] fuse: Unknown parameter '0x0000000000000003' [ 354.972494][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 355.009330][ T9814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9814 comm=syz.0.1026 [ 355.103730][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 355.103746][ T30] audit: type=1400 audit(1761260096.822:898): avc: denied { watch } for pid=9820 comm="syz.2.1029" path="/194/bus" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 355.230825][ T30] audit: type=1400 audit(1761260096.822:899): avc: denied { watch_sb } for pid=9820 comm="syz.2.1029" path="/194/bus" dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.231522][ T9819] syzkaller0: entered promiscuous mode [ 355.259089][ T9819] syzkaller0: entered allmulticast mode [ 355.266379][ T9821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1029'. [ 355.277842][ T9821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1029'. [ 355.328071][ T30] audit: type=1400 audit(1761260097.042:900): avc: denied { getopt } for pid=9805 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 355.347482][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.424993][ T30] audit: type=1400 audit(1761260097.142:901): avc: denied { append } for pid=9826 comm="syz.2.1030" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 355.448063][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.537901][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 355.811550][ T30] audit: type=1400 audit(1761260097.532:902): avc: denied { ioctl } for pid=9829 comm="syz.2.1031" path="pid:[4026532793]" dev="nsfs" ino=4026532793 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 355.836175][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.491226][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 356.692161][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 356.708837][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.738363][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.781316][ T30] audit: type=1400 audit(1761260098.482:903): avc: denied { read write } for pid=9846 comm="syz.2.1035" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 356.847773][ T9850] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1035'. [ 356.891947][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 356.896808][ T30] audit: type=1400 audit(1761260098.482:904): avc: denied { open } for pid=9846 comm="syz.2.1035" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 356.900998][ T9] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 357.051189][ T30] audit: type=1400 audit(1761260098.482:905): avc: denied { ioctl } for pid=9846 comm="syz.2.1035" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 357.165523][ T9] usb 2-1: Manufacturer: syz [ 357.291885][ T9] usb 2-1: config 0 descriptor?? [ 357.328232][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 357.865141][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1038'. [ 357.923976][ T9858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9858 comm=syz.3.1038 [ 358.284458][ T9870] fuse: Unknown parameter '0x0000000000000003' [ 358.808780][ T30] audit: type=1400 audit(1761260100.422:906): avc: denied { map } for pid=9874 comm="syz.2.1043" path="socket:[25415]" dev="sockfs" ino=25415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 359.384368][ T30] audit: type=1400 audit(1761260101.092:907): avc: denied { read } for pid=9884 comm="syz.4.1046" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.412273][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 359.434755][ T9887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1046'. [ 359.583516][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 359.595632][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 359.606651][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 359.618545][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 359.631495][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 359.640731][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.649233][ T9] usb 3-1: Product: syz [ 359.653752][ T9] usb 3-1: Manufacturer: syz [ 359.658449][ T9] usb 3-1: SerialNumber: syz [ 359.665719][ T9] usb 3-1: config 0 descriptor?? [ 359.672973][ T9881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.682249][ T9] usb 3-1: ucan: probing device on interface #0 [ 359.688627][ T9] usb 3-1: ucan: invalid endpoint configuration [ 359.695391][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 360.281379][ T30] audit: type=1400 audit(1761260101.912:908): avc: denied { shutdown } for pid=9878 comm="syz.2.1044" laddr=172.20.20.170 lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.321707][ T5823] usb 2-1: USB disconnect, device number 26 [ 360.593488][ T9885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.601422][ T9885] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 360.610992][ T9885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.661235][ T9885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 360.923966][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 360.933628][ T30] audit: type=1400 audit(1761260102.452:909): avc: denied { setopt } for pid=9896 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.955196][ T9885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.972214][ T9885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 361.049313][ T9885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 361.069819][ T9885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.087172][ T9907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9907 comm=syz.3.1049 [ 361.100366][ T9904] fuse: Bad value for 'fd' [ 361.105090][ T9885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 361.152357][ T9885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.186994][ T9885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.997071][ T9911] netlink: zone id is out of range [ 362.002230][ T9911] netlink: zone id is out of range [ 362.007384][ T9911] netlink: zone id is out of range [ 362.012526][ T9911] netlink: zone id is out of range [ 362.017632][ T9911] netlink: zone id is out of range [ 362.022790][ T9911] netlink: zone id is out of range [ 362.027899][ T9911] netlink: zone id is out of range [ 362.033046][ T9911] netlink: zone id is out of range [ 362.038155][ T9911] netlink: zone id is out of range [ 362.043285][ T9911] netlink: zone id is out of range [ 362.683533][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 362.689636][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 362.761301][ T5823] usb 3-1: USB disconnect, device number 28 [ 362.804697][ T9924] fuse: Unknown parameter 'fd0x0000000000000003' [ 362.837207][ T30] audit: type=1400 audit(1761260104.552:910): avc: denied { mount } for pid=9927 comm="syz.3.1053" name="/" dev="hugetlbfs" ino=25544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 362.981411][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 363.141309][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 363.222410][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 363.269355][ T30] audit: type=1400 audit(1761260104.982:911): avc: denied { setopt } for pid=9925 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.511244][ T5823] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 363.518203][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805537a000: rx timeout, send abort [ 363.652618][ T30] audit: type=1400 audit(1761260105.372:912): avc: denied { read } for pid=5170 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 363.748089][ T9943] ucma_write: process 742 (syz.0.1059) changed security contexts after opening file descriptor, this is not allowed. [ 363.761950][ T30] audit: type=1400 audit(1761260105.372:913): avc: denied { search } for pid=5170 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.788521][ T30] audit: type=1400 audit(1761260105.372:914): avc: denied { append } for pid=5170 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.813220][ T30] audit: type=1400 audit(1761260105.372:915): avc: denied { open } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.836543][ T30] audit: type=1400 audit(1761260105.372:916): avc: denied { getattr } for pid=5170 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.860511][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 363.880901][ T5823] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 363.890392][ T5823] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 363.919694][ T5823] usb 5-1: Product: syz [ 363.935320][ T5823] usb 5-1: Manufacturer: syz [ 363.942361][ T9951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9951 comm=syz.2.1061 [ 363.951220][ T5823] usb 5-1: SerialNumber: syz [ 363.961745][ T5823] usb 5-1: config 0 descriptor?? [ 363.974307][ T5823] ch341 5-1:0.0: ch341-uart converter detected [ 364.018271][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055379c00: rx timeout, send abort [ 364.027052][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805537a000: abort rx timeout. Force session deactivation [ 364.526490][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055379c00: abort rx timeout. Force session deactivation [ 364.951029][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 364.957613][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 365.062380][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 365.069668][ T5823] usb 5-1: failed to receive control message: -110 [ 365.084083][ T5823] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 365.190004][ T9972] tipc: Enabling of bearer rejected, failed to enable media [ 365.221231][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 365.301312][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 365.335521][ T9972] syz.3.1066 (9972): drop_caches: 2 [ 365.341761][ T9972] syz.3.1066 (9972): drop_caches: 2 [ 365.364631][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 365.405212][ T9970] fuse: Bad value for 'fd' [ 365.559084][ T53] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 366.481184][ T30] audit: type=1326 audit(1761260107.892:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.537681][ T30] audit: type=1326 audit(1761260107.892:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.577455][ T9986] fuse: Unknown parameter 'fd0x0000000000000003' [ 366.606269][ T30] audit: type=1326 audit(1761260107.892:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.609108][ T9] usb 5-1: USB disconnect, device number 31 [ 366.661289][ T30] audit: type=1326 audit(1761260107.892:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.720364][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 366.734884][ T9] ch341 5-1:0.0: device disconnected [ 366.736046][ T30] audit: type=1326 audit(1761260107.892:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.807157][ T30] audit: type=1326 audit(1761260107.892:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.837798][ T30] audit: type=1326 audit(1761260107.892:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 366.869592][ T30] audit: type=1326 audit(1761260107.892:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.3.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1d738efc9 code=0x7ffc0000 [ 367.004863][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1073'. [ 367.048722][ T9996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9996 comm=syz.1.1073 [ 367.142032][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 367.198408][ T30] audit: type=1400 audit(1761260108.912:925): avc: denied { mount } for pid=10001 comm="syz.1.1076" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.968735][T10015] net_ratelimit: 41 callbacks suppressed [ 367.968757][T10015] netlink: zone id is out of range [ 367.979580][T10015] netlink: zone id is out of range [ 367.984810][T10015] netlink: zone id is out of range [ 367.989922][T10015] netlink: zone id is out of range [ 367.995080][T10015] netlink: zone id is out of range [ 368.000216][T10015] netlink: zone id is out of range [ 368.005344][T10015] netlink: zone id is out of range [ 368.010451][T10015] netlink: zone id is out of range [ 368.015583][T10015] netlink: zone id is out of range [ 368.020667][T10015] netlink: zone id is out of range [ 368.511289][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 368.951302][ T5823] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 369.102831][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.113070][ T5823] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 369.186391][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.237651][ T5823] usb 4-1: config 0 descriptor?? [ 369.623916][ T53] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 369.634026][ T53] Bluetooth: hci3: Injecting HCI hardware error event [ 369.654910][ T5827] Bluetooth: hci3: hardware error 0x00 [ 369.851398][ T30] audit: type=1400 audit(1761260111.422:926): avc: denied { append } for pid=10033 comm="syz.3.1087" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 370.163948][T10051] fuse: Unknown parameter 'fd0x0000000000000003' [ 370.197533][ T5823] hid (null): invalid report_count -1976762581 [ 370.232842][ T5823] wacom 0003:056A:0317.0006: invalid report_count -1976762581 [ 370.261313][ T5823] wacom 0003:056A:0317.0006: item 0 4 1 9 parsing failed [ 370.284771][ T5823] wacom 0003:056A:0317.0006: parse failed [ 370.302592][ T5823] wacom 0003:056A:0317.0006: probe with driver wacom failed with error -22 [ 370.557291][ T911] usb 4-1: USB disconnect, device number 33 [ 370.573212][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.731229][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 370.799233][T10066] Bluetooth: MGMT ver 1.23 [ 370.893783][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.903579][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.913685][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.928775][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 370.939534][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 370.947972][ T9] usb 5-1: Product: syz [ 370.952365][ T9] usb 5-1: Manufacturer: syz [ 370.956956][ T9] usb 5-1: SerialNumber: syz [ 371.182563][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 371.475610][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.484551][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1097'. [ 371.495559][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.546380][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 371.546396][ T30] audit: type=1400 audit(1761260113.262:928): avc: denied { create } for pid=10054 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 371.694460][ T9] usb 5-1: USB disconnect, device number 32 [ 371.701198][ T5827] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 371.730755][ T9] usblp0: removed [ 371.873128][ T30] audit: type=1400 audit(1761260113.592:929): avc: denied { write } for pid=10091 comm="syz.0.1100" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.896225][ T5823] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 372.102675][ T5823] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 372.112239][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.134420][ T5823] usb 4-1: config 0 descriptor?? [ 372.302142][T10102] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1103'. [ 372.315809][ T30] audit: type=1400 audit(1761260114.032:930): avc: denied { getopt } for pid=10101 comm="syz.4.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.262776][ T5823] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 373.272828][ T5823] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 373.304067][ T5823] asix 4-1:0.0: probe with driver asix failed with error -71 [ 373.326203][ T5823] usb 4-1: USB disconnect, device number 34 [ 374.170833][ T30] audit: type=1400 audit(1761260115.882:931): avc: denied { connect } for pid=10118 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.192471][T10119] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 374.227309][ T30] audit: type=1400 audit(1761260115.942:932): avc: denied { append } for pid=10121 comm="syz.0.1108" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 374.254561][T10119] bond1: entered promiscuous mode [ 374.274091][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1107'. [ 374.279783][T10119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.385081][T10127] netlink: 'syz.3.1109': attribute type 10 has an invalid length. [ 374.432906][T10127] team0: Port device dummy0 added [ 374.570033][T10130] netlink: 'syz.3.1109': attribute type 10 has an invalid length. [ 374.582617][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1109'. [ 374.592451][T10130] team0: entered promiscuous mode [ 374.597621][T10130] team_slave_0: entered promiscuous mode [ 374.609156][T10130] team_slave_1: entered promiscuous mode [ 374.661672][T10130] dummy0: entered promiscuous mode [ 374.682827][T10130] team0: entered allmulticast mode [ 374.687957][T10130] team_slave_0: entered allmulticast mode [ 374.691193][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 374.751062][T10130] team_slave_1: entered allmulticast mode [ 374.763295][T10130] dummy0: entered allmulticast mode [ 374.783371][T10130] bridge0: port 3(team0) entered blocking state [ 374.792055][T10130] bridge0: port 3(team0) entered disabled state [ 374.815643][T10130] bridge0: port 3(team0) entered blocking state [ 374.822005][T10130] bridge0: port 3(team0) entered forwarding state [ 374.892803][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 374.908764][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 374.921840][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 375.001596][ T9] usb 2-1: Product: syz [ 375.067802][ T9] usb 2-1: Manufacturer: syz [ 375.088234][ T9] usb 2-1: SerialNumber: syz [ 375.122584][ T9] usb 2-1: config 0 descriptor?? [ 375.171218][ T5823] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 375.182321][T10125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.322009][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 375.331890][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.345070][ T5823] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 375.355389][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.379713][ T5823] usb 4-1: Product: syz [ 375.401313][ T5823] usb 4-1: Manufacturer: syz [ 375.406113][ T5823] usb 4-1: SerialNumber: syz [ 375.434334][ T5823] usb 4-1: config 0 descriptor?? [ 375.463649][ T5823] usb 4-1: bad CDC descriptors [ 375.478914][ T5823] usb 4-1: unsupported MDLM descriptors [ 375.705854][ T30] audit: type=1400 audit(1761260117.422:933): avc: denied { watch watch_reads } for pid=10140 comm="syz.3.1114" path="/216/file0" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 375.764241][T10153] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1116'. [ 375.786096][T10153] gretap0: entered promiscuous mode [ 376.230635][T10158] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1116'. [ 376.283180][T10158] 0{X: renamed from gretap0 [ 376.782961][ T30] audit: type=1400 audit(1761260118.302:934): avc: denied { mounton } for pid=10154 comm="syz.4.1118" path="/232/file0" dev="tmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 376.847464][T10162] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 376.854091][T10162] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.862009][T10162] vhci_hcd vhci_hcd.0: Device attached [ 376.870426][T10164] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 376.877032][T10164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.885015][T10164] vhci_hcd vhci_hcd.0: Device attached [ 377.339419][T10158] 0{X: left promiscuous mode [ 377.341272][T10163] vhci_hcd: connection closed [ 377.344947][T10165] vhci_hcd: connection closed [ 377.360735][ T5823] usb 2-1: USB disconnect, device number 27 [ 377.365870][T10158] 0{X: entered allmulticast mode [ 377.398282][ T12] vhci_hcd: stop threads [ 377.403240][ T12] vhci_hcd: release socket [ 377.408359][ T12] vhci_hcd: disconnect device [ 377.417367][T10158] net_ratelimit: 7 callbacks suppressed [ 377.417391][T10158] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 377.440257][T10157] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 377.446850][T10157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.454323][T10160] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 377.460915][T10160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 377.463484][T10159] vhci_hcd: connection closed [ 377.471304][ T12] vhci_hcd: stop threads [ 377.482117][ T12] vhci_hcd: release socket [ 377.489371][ T12] vhci_hcd: disconnect device [ 377.586016][ T30] audit: type=1400 audit(1761260119.302:935): avc: denied { read write } for pid=10171 comm="syz.2.1119" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 377.614569][T10157] vhci_hcd vhci_hcd.0: Device attached [ 377.621544][T10161] vhci_hcd: connection closed [ 377.628265][T10160] vhci_hcd vhci_hcd.0: Device attached [ 377.639326][ T5823] kernel read not supported for file /753/task (pid: 5823 comm: kworker/1:3) [ 377.651624][ T12] vhci_hcd: stop threads [ 377.734944][ T30] audit: type=1400 audit(1761260119.302:936): avc: denied { open } for pid=10171 comm="syz.2.1119" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 377.825657][ T30] audit: type=1326 audit(1761260119.542:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c638efc9 code=0x7ffc0000 [ 377.859917][ T12] vhci_hcd: release socket [ 377.890753][ T12] vhci_hcd: disconnect device [ 377.938340][ T12] vhci_hcd: stop threads [ 377.956755][ T12] vhci_hcd: release socket [ 377.969739][ T12] vhci_hcd: disconnect device [ 377.987887][ T5823] usb 4-1: USB disconnect, device number 35 [ 378.029771][ T30] audit: type=1326 audit(1761260119.542:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c638efc9 code=0x7ffc0000 [ 378.063972][T10182] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 378.084391][T10182] audit: out of memory in audit_log_start [ 378.203014][ T30] audit: type=1326 audit(1761260119.542:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f39c638efc9 code=0x7ffc0000 [ 378.273033][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.279352][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.287072][T10186] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 378.301294][ T30] audit: type=1326 audit(1761260119.562:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c638efc9 code=0x7ffc0000 [ 378.325557][ T30] audit: type=1326 audit(1761260119.562:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10176 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c638efc9 code=0x7ffc0000 [ 378.498086][T10186] bond0: entered promiscuous mode [ 378.508823][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.623277][T10186] bond0: (slave bridge1): making interface the new active one [ 378.630849][T10186] bridge1: entered promiscuous mode [ 378.637553][T10186] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 378.741234][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 378.913685][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.925372][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.943453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.028589][ T911] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 379.039972][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.053911][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.063615][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.079428][ T9] usb 3-1: config 0 descriptor?? [ 379.211388][ T911] usb 4-1: device descriptor read/64, error -71 [ 379.441402][T10209] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1130'. [ 379.471389][ T911] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 379.523151][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x5 [ 379.530586][ T9] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 379.564259][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 379.617524][ T911] usb 4-1: device descriptor read/64, error -71 [ 379.771926][T10209] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 379.799860][T10209] netlink: 'syz.0.1130': attribute type 2 has an invalid length. [ 380.197900][ T911] usb usb4-port1: attempt power cycle [ 380.750626][T10209] tmpfs: Bad value for 'mpol' [ 380.903937][T10223] 9pnet: Found fid 0 not clunked [ 381.071258][ T911] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 381.132319][ T911] usb 4-1: device descriptor read/8, error -71 [ 381.961198][ T911] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 381.994352][ T911] usb 4-1: device descriptor read/8, error -71 [ 382.072112][ T9] usb 3-1: USB disconnect, device number 29 [ 382.114441][ T911] usb usb4-port1: unable to enumerate USB device [ 382.761325][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 384.465677][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 384.465693][ T30] audit: type=1400 audit(1761260126.182:961): avc: denied { write } for pid=10267 comm="syz.0.1147" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.581423][T10269] hub 1-0:1.0: USB hub found [ 384.588606][T10269] hub 1-0:1.0: 1 port detected [ 385.453782][ T5823] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 386.341990][ T5823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.360197][ T5823] usb 1-1: config 0 has no interface number 0 [ 386.379211][ T5823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 386.441029][ T5823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 386.556249][ T5823] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 386.575557][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.597704][ T5823] usb 1-1: config 0 descriptor?? [ 386.610317][T10276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.622152][ T5823] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 386.851237][ T30] audit: type=1400 audit(1761260128.542:962): avc: denied { setopt } for pid=10273 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 386.881650][ T5823] usb 1-1: USB disconnect, device number 29 [ 386.936587][T10293] netlink: 'syz.1.1155': attribute type 3 has an invalid length. [ 387.222494][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 387.281520][ T1947] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 387.462491][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 387.469186][ T1947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.479820][ T1947] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 387.500230][ T5899] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32 [ 387.510422][ T1947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.529944][ T5899] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 387.631775][ T1947] usb 5-1: config 0 descriptor?? [ 387.967216][ T5899] usb 2-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.987396][ T1947] ttusbir 5-1:0.0: cannot find expected altsetting [ 388.006833][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 388.023990][ T5899] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.034752][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.043424][ T5899] usb 2-1: Product: syz [ 388.048048][ T5899] usb 2-1: Manufacturer: syz [ 388.056930][ T5899] usb 2-1: SerialNumber: syz [ 388.065930][T10294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.073645][T10294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.689174][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 388.808711][ T5899] usb 2-1: bad CDC descriptors [ 388.814900][ T1947] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 388.828253][ T5899] usb 2-1: USB disconnect, device number 28 [ 388.971249][ T1947] usb 3-1: Using ep0 maxpacket: 32 [ 388.978022][ T1947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 388.992083][ T1947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 389.004083][ T1947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 389.014572][ T1947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 389.025920][ T1947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 389.039245][ T1947] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 389.049240][ T1947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.057994][ T1947] usb 3-1: Product: syz [ 389.062487][ T1947] usb 3-1: Manufacturer: syz [ 389.067137][ T1947] usb 3-1: SerialNumber: syz [ 389.075761][ T1947] usb 3-1: config 0 descriptor?? [ 389.099262][T10311] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 389.123365][T10311] bond1: entered promiscuous mode [ 389.128839][T10311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.407925][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.414459][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.420958][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.427755][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.435237][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.442022][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.448392][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.454974][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.466752][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.479786][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.489564][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.500374][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.511476][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.524710][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.536041][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.544105][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.550584][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.557472][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.564153][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.571730][ T1947] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 389.581404][ T1947] input input24: Timeout waiting for response from device. [ 389.598685][ T1947] usb 3-1: USB disconnect, device number 30 [ 389.639796][ T30] audit: type=1400 audit(1761260131.352:963): avc: denied { create } for pid=10319 comm="syz.1.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 389.784928][ T5823] usb 5-1: USB disconnect, device number 33 [ 391.538835][ T30] audit: type=1326 audit(1761260133.252:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4718efc9 code=0x7ffc0000 [ 391.569761][ T30] audit: type=1326 audit(1761260133.252:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e4718efc9 code=0x7ffc0000 [ 391.785692][ T30] audit: type=1326 audit(1761260133.282:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4718efc9 code=0x7ffc0000 [ 391.810414][ T30] audit: type=1326 audit(1761260133.282:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10346 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4718efc9 code=0x7ffc0000 [ 391.930144][T10355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 391.957076][T10359] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1172'. [ 392.111512][T10359] ksmbd: Unknown IPC event: 3, ignore. [ 393.131159][ T30] audit: type=1400 audit(1761260134.842:968): avc: denied { ioctl } for pid=10367 comm="syz.4.1175" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.092087][T10392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1181'. [ 396.030642][ T30] audit: type=1400 audit(1761260137.742:969): avc: denied { read } for pid=10396 comm="syz.0.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.098398][T10408] openvswitch: netlink: IP tunnel dst address not specified [ 396.125340][ T30] audit: type=1400 audit(1761260137.832:970): avc: denied { read write } for pid=10396 comm="syz.0.1183" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 396.159357][ T30] audit: type=1400 audit(1761260137.832:971): avc: denied { open } for pid=10396 comm="syz.0.1183" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 396.342200][ T5827] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 396.357358][ T5827] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 397.245241][T10424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 397.619183][ T30] audit: type=1400 audit(1761260139.322:972): avc: denied { read } for pid=10425 comm="syz.4.1190" path="socket:[29397]" dev="sockfs" ino=29397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 397.819305][T10437] syz.4.1190 (10437): attempted to duplicate a private mapping with mremap. This is not supported. [ 398.248060][T10426] team0: Port device team_slave_0 removed [ 398.544587][T10443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1194'. [ 400.084714][ T30] audit: type=1400 audit(1761260141.802:973): avc: denied { bind } for pid=10459 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.206388][ T30] audit: type=1400 audit(1761260141.922:974): avc: denied { checkpoint_restore } for pid=10459 comm="syz.2.1198" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.228204][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.917740][T10475] hub 1-0:1.0: USB hub found [ 400.923696][T10475] hub 1-0:1.0: 1 port detected [ 401.869004][ T30] audit: type=1400 audit(1761260143.212:975): avc: denied { create } for pid=10487 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 401.991433][ T30] audit: type=1400 audit(1761260143.222:976): avc: denied { ioctl } for pid=10487 comm="syz.0.1206" path="socket:[29969]" dev="sockfs" ino=29969 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.017067][ T30] audit: type=1400 audit(1761260143.282:977): avc: denied { setattr } for pid=10487 comm="syz.0.1206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 402.366987][T10522] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 404.801405][T10556] hub 1-0:1.0: USB hub found [ 404.810961][T10556] hub 1-0:1.0: 1 port detected [ 405.164028][T10562] warn_alloc: 1 callbacks suppressed [ 405.164045][T10562] syz.0.1217: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.190409][T10562] CPU: 0 UID: 0 PID: 10562 Comm: syz.0.1217 Not tainted syzkaller #0 PREEMPT(full) [ 405.190436][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.190449][T10562] Call Trace: [ 405.190455][T10562] [ 405.190464][T10562] dump_stack_lvl+0x16c/0x1f0 [ 405.190499][T10562] warn_alloc+0x248/0x3a0 [ 405.190528][T10562] ? __pfx_warn_alloc+0x10/0x10 [ 405.190558][T10562] ? __pfx_stack_trace_save+0x10/0x10 [ 405.190597][T10562] ? kasan_save_stack+0x42/0x60 [ 405.190615][T10562] ? kasan_save_stack+0x33/0x60 [ 405.190633][T10562] ? kasan_save_track+0x14/0x30 [ 405.190652][T10562] ? xskq_create+0x52/0x1d0 [ 405.190674][T10562] ? xsk_setsockopt+0x74e/0x9a0 [ 405.190693][T10562] ? do_sock_setsockopt+0xf3/0x1d0 [ 405.190722][T10562] ? xskq_create+0xfb/0x1d0 [ 405.190743][T10562] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 405.190775][T10562] ? xskq_create+0xfb/0x1d0 [ 405.190802][T10562] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.190832][T10562] ? xskq_create+0xfb/0x1d0 [ 405.190854][T10562] vmalloc_user_noprof+0x9e/0xe0 [ 405.190872][T10562] ? xskq_create+0xfb/0x1d0 [ 405.190891][T10562] xskq_create+0xfb/0x1d0 [ 405.190914][T10562] xsk_setsockopt+0x74e/0x9a0 [ 405.190936][T10562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.190956][T10562] ? find_held_lock+0x2b/0x80 [ 405.190983][T10562] ? selinux_socket_setsockopt+0x6a/0x80 [ 405.191012][T10562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 405.191034][T10562] do_sock_setsockopt+0xf3/0x1d0 [ 405.191062][T10562] __sys_setsockopt+0x1a0/0x230 [ 405.191088][T10562] __x64_sys_setsockopt+0xbd/0x160 [ 405.191105][T10562] ? do_syscall_64+0x91/0xfa0 [ 405.191127][T10562] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.191148][T10562] do_syscall_64+0xcd/0xfa0 [ 405.191172][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.191188][T10562] RIP: 0033:0x7fe75698efc9 [ 405.191202][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.191216][T10562] RSP: 002b:00007fe757751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.191233][T10562] RAX: ffffffffffffffda RBX: 00007fe756be5fa0 RCX: 00007fe75698efc9 [ 405.191244][T10562] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 405.191254][T10562] RBP: 00007fe756a11f91 R08: 0000000000000052 R09: 0000000000000000 [ 405.191263][T10562] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.191272][T10562] R13: 00007fe756be6038 R14: 00007fe756be5fa0 R15: 00007ffd99630fe8 [ 405.191294][T10562] [ 405.479192][T10562] Mem-Info: [ 405.483435][T10562] active_anon:9920 inactive_anon:0 isolated_anon:0 [ 405.483435][T10562] active_file:21600 inactive_file:40759 isolated_file:0 [ 405.483435][T10562] unevictable:2791 dirty:636 writeback:3 [ 405.483435][T10562] slab_reclaimable:8651 slab_unreclaimable:100036 [ 405.483435][T10562] mapped:35897 shmem:5265 pagetables:1303 [ 405.483435][T10562] sec_pagetables:0 bounce:0 [ 405.483435][T10562] kernel_misc_reclaimable:0 [ 405.483435][T10562] free:1289823 free_pcp:20606 free_cma:0 [ 405.529490][T10562] Node 0 active_anon:40280kB inactive_anon:0kB active_file:86164kB inactive_file:162784kB unevictable:9628kB isolated(anon):0kB isolated(file):0kB mapped:143556kB dirty:2540kB writeback:12kB shmem:19524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12712kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.942034][T10562] Node 1 active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.061782][ T30] audit: type=1400 audit(1761260147.752:978): avc: denied { shutdown } for pid=10576 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.086602][ T30] audit: type=1400 audit(1761260147.752:979): avc: denied { read } for pid=10576 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.111475][T10562] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.200356][T10562] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 406.206250][T10562] Node 0 DMA32 free:1255592kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39208kB inactive_anon:0kB active_file:86164kB inactive_file:162792kB unevictable:9724kB writepending:2604kB zspages:0kB present:3129332kB managed:2544884kB mlocked:8188kB bounce:0kB free_pcp:64464kB local_pcp:32084kB free_cma:0kB [ 406.310568][T10562] lowmem_reserve[]: 0 0 1 1 1 [ 406.336179][T10562] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.426402][T10562] lowmem_reserve[]: 0 0 0 0 0 [ 406.444765][T10562] Node 1 Normal free:3888340kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:252kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:10144kB free_cma:0kB [ 406.549230][T10562] lowmem_reserve[]: 0 0 0 0 0 [ 406.564761][T10562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.604979][T10562] Node 0 DMA32: 1386*4kB (UM) 696*8kB (UME) 382*16kB (UME) 683*32kB (UM) 288*64kB (UME) 172*128kB (UME) 166*256kB (UME) 66*512kB (UME) 46*1024kB (UME) 6*2048kB (UM) 254*4096kB (UM) = 1255592kB [ 406.661213][T10562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.711064][T10562] Node 1 Normal: 203*4kB (UME) 59*8kB (UME) 59*16kB (UME) 133*32kB (UME) 42*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (ME) 3*1024kB (M) 6*2048kB (UME) 942*4096kB (M) = 3888340kB [ 406.760834][T10562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.910824][T10562] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 407.361778][T10562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.373011][T10562] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 407.383277][T10562] 73327 total pagecache pages [ 407.387964][T10562] 0 pages in swap cache [ 407.392343][T10562] Free swap = 124996kB [ 407.396494][T10562] Total swap = 124996kB [ 407.400644][T10562] 2097051 pages RAM [ 407.404743][T10562] 0 pages HighMem/MovableOnly [ 407.409431][T10562] 428740 pages reserved [ 407.413797][T10562] 0 pages cma reserved [ 407.985932][ T30] audit: type=1400 audit(1761260149.702:980): avc: denied { write } for pid=10603 comm="syz.4.1227" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 408.118393][ T30] audit: type=1400 audit(1761260149.702:981): avc: denied { open } for pid=10603 comm="syz.4.1227" path="/257/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 408.241178][ T5899] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 408.412782][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.423941][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.457372][ T5899] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 408.547411][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.680093][ T5899] usb 5-1: config 0 descriptor?? [ 409.151179][ T5891] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 409.183318][ T5899] hid-led 0003:1D34:0004.0008: unknown main item tag 0x0 [ 409.314521][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 409.322123][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.333294][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.343888][ T5891] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 409.358621][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.369518][ T5891] usb 1-1: config 0 descriptor?? [ 410.203951][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1233'. [ 410.221596][T10628] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1233'. [ 410.271361][ T5899] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -71 [ 410.285667][ T5899] usb 5-1: USB disconnect, device number 34 [ 412.734737][T10652] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 412.742713][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1238'. [ 412.764182][T10652] batman_adv: batadv0: Adding interface: vlan1 [ 412.770478][T10652] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.801580][T10652] batman_adv: batadv0: Interface activated: vlan1 [ 412.945352][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 412.968620][ T30] audit: type=1400 audit(1761260154.682:982): avc: denied { ioctl } for pid=10654 comm="syz.0.1241" path="socket:[31114]" dev="sockfs" ino=31114 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 412.972974][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 413.005640][ T5891] usb 1-1: USB disconnect, device number 30 [ 413.364282][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 413.579763][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 413.588805][T10667] tipc: Started in network mode [ 413.593740][T10667] tipc: Node identity 7, cluster identity 4711 [ 413.599924][T10667] tipc: Node number set to 7 [ 413.711446][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.720976][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 413.730088][ T9] usb 3-1: config 0 has no interface number 0 [ 413.744819][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 413.768140][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 413.809601][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.844313][ T9] usb 3-1: Product: syz [ 413.859254][ T9] usb 3-1: Manufacturer: syz [ 413.868834][ T9] usb 3-1: SerialNumber: syz [ 413.882444][ T9] usb 3-1: config 0 descriptor?? [ 414.442768][T10678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 414.511772][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 414.522799][T10678] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 414.541303][T10678] overlayfs: missing 'lowerdir' [ 414.780807][T10686] FAULT_INJECTION: forcing a failure. [ 414.780807][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 414.793635][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.1.1248 Not tainted syzkaller #0 PREEMPT(full) [ 414.793658][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.793669][T10686] Call Trace: [ 414.793675][T10686] [ 414.793681][T10686] dump_stack_lvl+0x16c/0x1f0 [ 414.793720][T10686] should_fail_ex+0x512/0x640 [ 414.793740][T10686] ? fs_reclaim_acquire+0xae/0x150 [ 414.793763][T10686] should_failslab+0xc2/0x120 [ 414.793783][T10686] __kmalloc_noprof+0xdd/0x880 [ 414.793809][T10686] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.793835][T10686] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.793854][T10686] tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.793876][T10686] ? tomoyo_profile+0x47/0x60 [ 414.793901][T10686] tomoyo_path_number_perm+0x245/0x580 [ 414.793927][T10686] ? tomoyo_path_number_perm+0x237/0x580 [ 414.793956][T10686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.793994][T10686] ? __pfx___schedule+0x10/0x10 [ 414.794031][T10686] ? rcu_is_watching+0x12/0xc0 [ 414.794053][T10686] ? irqentry_exit+0x3b/0x90 [ 414.794078][T10686] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.794111][T10686] ? security_file_ioctl+0x21c/0x240 [ 414.794136][T10686] security_file_ioctl+0x9b/0x240 [ 414.794157][T10686] __x64_sys_ioctl+0xb7/0x210 [ 414.794184][T10686] do_syscall_64+0xcd/0xfa0 [ 414.794212][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.794230][T10686] RIP: 0033:0x7f39c638efc9 [ 414.794245][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.794261][T10686] RSP: 002b:00007f39c7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.794278][T10686] RAX: ffffffffffffffda RBX: 00007f39c65e6090 RCX: 00007f39c638efc9 [ 414.794289][T10686] RDX: 00002000000000c0 RSI: 00000000800442d3 RDI: 000000000000000b [ 414.794299][T10686] RBP: 00007f39c7279090 R08: 0000000000000000 R09: 0000000000000000 [ 414.794309][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.794319][T10686] R13: 00007f39c65e6128 R14: 00007f39c65e6090 R15: 00007ffd815a70e8 [ 414.794344][T10686] [ 414.794401][T10686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.025851][ T30] audit: type=1400 audit(1761260156.482:983): avc: denied { ioctl } for pid=10682 comm="syz.1.1248" path="socket:[30303]" dev="sockfs" ino=30303 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 415.680374][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 415.688085][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 415.695657][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 415.703778][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 415.713363][ T9] usb 3-1: USB disconnect, device number 31 [ 416.692579][ T30] audit: type=1400 audit(1761260158.412:984): avc: denied { connect } for pid=10694 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 416.723256][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 416.913107][T10708] nvme_fabrics: unknown parameter or missing value 'gGݫ1xԲR[wDJOlDXAl [ 420.192756][T10752] dump_stack_lvl+0x16c/0x1f0 [ 420.192786][T10752] should_fail_ex+0x512/0x640 [ 420.192810][T10752] _copy_from_user+0x2e/0xd0 [ 420.192832][T10752] move_addr_to_kernel+0x65/0x170 [ 420.192851][T10752] __sys_bind+0x11b/0x260 [ 420.192875][T10752] ? __pfx___sys_bind+0x10/0x10 [ 420.192890][T10752] ? __fget_files+0x20e/0x3c0 [ 420.192920][T10752] ? __pfx_ksys_write+0x10/0x10 [ 420.192942][T10752] __x64_sys_bind+0x72/0xb0 [ 420.192961][T10752] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.192986][T10752] do_syscall_64+0xcd/0xfa0 [ 420.193013][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.193030][T10752] RIP: 0033:0x7fa1d738efc9 [ 420.193043][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.193060][T10752] RSP: 002b:00007fa1d81f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 420.193076][T10752] RAX: ffffffffffffffda RBX: 00007fa1d75e5fa0 RCX: 00007fa1d738efc9 [ 420.193087][T10752] RDX: 000000000000001c RSI: 0000200000000480 RDI: 0000000000000004 [ 420.193097][T10752] RBP: 00007fa1d81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 420.193106][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.193115][T10752] R13: 00007fa1d75e6038 R14: 00007fa1d75e5fa0 R15: 00007ffdb98efa58 [ 420.193146][T10752] [ 420.359723][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.366547][ C0] hrtimer: interrupt took 165473755 ns [ 420.466609][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.508435][ T1947] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 421.059547][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 421.068611][ T1947] usb 1-1: Using ep0 maxpacket: 32 [ 421.077113][ T1947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.113549][ T1947] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 421.124906][ T1947] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 421.134345][ T1947] usb 1-1: Product: syz [ 421.140635][ T1947] usb 1-1: Manufacturer: syz [ 421.148678][ T1947] usb 1-1: SerialNumber: syz [ 421.156938][ T1947] usb 1-1: config 0 descriptor?? [ 421.173058][ T1947] hub 1-1:0.0: bad descriptor, ignoring hub [ 421.188991][ T1947] hub 1-1:0.0: probe with driver hub failed with error -5 [ 421.642271][T10745] syzkaller0: entered promiscuous mode [ 421.673800][T10745] syzkaller0: entered allmulticast mode [ 421.809611][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 421.818807][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 421.851215][T10780] netlink: 'syz.2.1273': attribute type 12 has an invalid length. [ 421.859946][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 421.942182][ T911] usb 1-1: USB disconnect, device number 31 [ 421.943295][T10786] FAULT_INJECTION: forcing a failure. [ 421.943295][T10786] name failslab, interval 1, probability 0, space 0, times 0 [ 421.980470][T10786] CPU: 1 UID: 0 PID: 10786 Comm: syz.1.1276 Not tainted syzkaller #0 PREEMPT(full) [ 421.980494][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.980503][T10786] Call Trace: [ 421.980509][T10786] [ 421.980516][T10786] dump_stack_lvl+0x16c/0x1f0 [ 421.980545][T10786] should_fail_ex+0x512/0x640 [ 421.980564][T10786] ? fs_reclaim_acquire+0xae/0x150 [ 421.980586][T10786] should_failslab+0xc2/0x120 [ 421.980605][T10786] __kmalloc_noprof+0xdd/0x880 [ 421.980629][T10786] ? tomoyo_encode2+0x100/0x3e0 [ 421.980652][T10786] ? tomoyo_encode2+0x100/0x3e0 [ 421.980669][T10786] tomoyo_encode2+0x100/0x3e0 [ 421.980692][T10786] tomoyo_encode+0x29/0x50 [ 421.980710][T10786] tomoyo_realpath_from_path+0x18f/0x6e0 [ 421.980736][T10786] tomoyo_path_number_perm+0x245/0x580 [ 421.980762][T10786] ? tomoyo_path_number_perm+0x237/0x580 [ 421.980794][T10786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 421.980822][T10786] ? find_held_lock+0x2b/0x80 [ 421.980864][T10786] ? find_held_lock+0x2b/0x80 [ 421.980884][T10786] ? hook_file_ioctl_common+0x145/0x410 [ 421.980912][T10786] ? __fget_files+0x20e/0x3c0 [ 421.980935][T10786] security_file_ioctl+0x9b/0x240 [ 421.980956][T10786] __x64_sys_ioctl+0xb7/0x210 [ 421.980981][T10786] do_syscall_64+0xcd/0xfa0 [ 421.981008][T10786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.981025][T10786] RIP: 0033:0x7f39c638efc9 [ 421.981039][T10786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.981054][T10786] RSP: 002b:00007f39c729a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.981075][T10786] RAX: ffffffffffffffda RBX: 00007f39c65e5fa0 RCX: 00007f39c638efc9 [ 421.981084][T10786] RDX: 00002000000001c0 RSI: 000000004008af10 RDI: 0000000000000005 [ 421.981093][T10786] RBP: 00007f39c729a090 R08: 0000000000000000 R09: 0000000000000000 [ 421.981103][T10786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.981111][T10786] R13: 00007f39c65e6038 R14: 00007f39c65e5fa0 R15: 00007ffd815a70e8 [ 421.981134][T10786] [ 422.157943][T10788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.223288][T10786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.441186][ T1947] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 422.484302][T10792] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 422.497181][T10792] devtmpfs: Unknown parameter 'nr_inodeD*T[) )L6%I9' [ 422.540179][ T30] audit: type=1400 audit(1761260420.212:986): avc: denied { mount } for pid=10791 comm="syz.1.1279" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 422.610014][ T1947] usb 5-1: Using ep0 maxpacket: 8 [ 422.617403][ T1947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.630149][ T1947] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 422.650492][ T1947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.673532][ T1947] usb 5-1: config 0 descriptor?? [ 422.695389][ T30] audit: type=1400 audit(1761260420.212:987): avc: denied { remount } for pid=10791 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 422.860186][ T30] audit: type=1400 audit(1761260420.292:988): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 422.887413][ T1947] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 422.948436][ T1947] usb 5-1: USB disconnect, device number 35 [ 423.429241][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 423.551387][ T911] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 423.831301][ T911] usb 4-1: Using ep0 maxpacket: 32 [ 424.357760][ T911] usb 4-1: config 0 has no interfaces? [ 424.365166][ T911] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 424.404653][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.422461][ T911] usb 4-1: Product: syz [ 424.428554][ T911] usb 4-1: Manufacturer: syz [ 424.433670][ T911] usb 4-1: SerialNumber: syz [ 424.544651][ T911] usb 4-1: config 0 descriptor?? [ 425.023955][T10817] vivid-007: disconnect [ 425.032986][T10817] FAULT_INJECTION: forcing a failure. [ 425.032986][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 425.046061][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.3.1287 Not tainted syzkaller #0 PREEMPT(full) [ 425.046077][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.046083][T10817] Call Trace: [ 425.046087][T10817] [ 425.046090][T10817] dump_stack_lvl+0x16c/0x1f0 [ 425.046112][T10817] should_fail_ex+0x512/0x640 [ 425.046135][T10817] should_failslab+0xc2/0x120 [ 425.046154][T10817] __kmalloc_noprof+0xdd/0x880 [ 425.046177][T10817] ? io_alloc_ocqe+0xd2/0x660 [ 425.046195][T10817] ? io_alloc_ocqe+0xd2/0x660 [ 425.046213][T10817] io_alloc_ocqe+0xd2/0x660 [ 425.046236][T10817] __io_submit_flush_completions+0x1049/0x1980 [ 425.046262][T10817] ? find_held_lock+0x2b/0x80 [ 425.046287][T10817] ctx_flush_and_put+0x9a/0x410 [ 425.046303][T10817] io_handle_tw_list+0x3c1/0x500 [ 425.046318][T10817] ? __pfx_io_handle_tw_list+0x10/0x10 [ 425.046336][T10817] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 425.046355][T10817] tctx_task_work_run+0xac/0x380 [ 425.046369][T10817] tctx_task_work+0x7a/0xd0 [ 425.046382][T10817] ? __pfx_tctx_task_work+0x10/0x10 [ 425.046395][T10817] ? rcu_is_watching+0x12/0xc0 [ 425.046409][T10817] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.046422][T10817] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.046437][T10817] task_work_run+0x150/0x240 [ 425.046449][T10817] ? __pfx_task_work_run+0x10/0x10 [ 425.046460][T10817] ? __might_fault+0xe3/0x190 [ 425.046474][T10817] ? __might_fault+0xe3/0x190 [ 425.046487][T10817] ? __might_fault+0x13b/0x190 [ 425.046503][T10817] get_signal+0x1d0/0x26d0 [ 425.046519][T10817] ? video_usercopy+0x7aa/0x1720 [ 425.046540][T10817] ? video_usercopy+0x7af/0x1720 [ 425.046562][T10817] ? __pfx_get_signal+0x10/0x10 [ 425.046574][T10817] ? selinux_kernel_read_file+0xc0/0x130 [ 425.046588][T10817] ? __pfx_video_usercopy+0x10/0x10 [ 425.046605][T10817] arch_do_signal_or_restart+0x8f/0x7c0 [ 425.046619][T10817] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 425.046639][T10817] exit_to_user_mode_loop+0x85/0x130 [ 425.046651][T10817] do_syscall_64+0x426/0xfa0 [ 425.046666][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.046677][T10817] RIP: 0033:0x7fa1d738efc9 [ 425.046685][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.046695][T10817] RSP: 002b:00007fa1d81f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.046705][T10817] RAX: 0000000000000000 RBX: 00007fa1d75e5fa0 RCX: 00007fa1d738efc9 [ 425.046711][T10817] RDX: 0000200000000080 RSI: 00000000c008561c RDI: 0000000000000004 [ 425.046717][T10817] RBP: 00007fa1d81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 425.046723][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.046729][T10817] R13: 00007fa1d75e6038 R14: 00007fa1d75e5fa0 R15: 00007ffdb98efa58 [ 425.046742][T10817] [ 425.373076][T10816] vivid-007: reconnect [ 425.378675][ T911] usb 4-1: USB disconnect, device number 40 [ 426.284865][T10848] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1292'. [ 427.361413][ T5899] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 428.036489][T10873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 428.074688][ T5899] usb 4-1: device descriptor read/64, error -71 [ 428.107760][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 428.227560][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 428.551181][ T5899] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 428.767239][ T5899] usb 4-1: device descriptor read/64, error -71 [ 428.996347][ T5899] usb usb4-port1: attempt power cycle [ 429.341158][ T5899] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 429.361799][ T5899] usb 4-1: device descriptor read/8, error -71 [ 429.611322][ T5899] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 429.620275][ T30] audit: type=1400 audit(1761260427.312:989): avc: denied { firmware_load } for pid=10895 comm="syz.2.1306" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 429.647033][ T5899] usb 4-1: device descriptor read/8, error -71 [ 429.762732][ T5899] usb usb4-port1: unable to enumerate USB device [ 430.092866][T10904] FAULT_INJECTION: forcing a failure. [ 430.092866][T10904] name failslab, interval 1, probability 0, space 0, times 0 [ 430.106146][T10904] CPU: 1 UID: 0 PID: 10904 Comm: syz.1.1308 Not tainted syzkaller #0 PREEMPT(full) [ 430.106171][T10904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.106182][T10904] Call Trace: [ 430.106188][T10904] [ 430.106194][T10904] dump_stack_lvl+0x16c/0x1f0 [ 430.106225][T10904] should_fail_ex+0x512/0x640 [ 430.106246][T10904] ? __kmalloc_cache_noprof+0x5f/0x780 [ 430.106279][T10904] should_failslab+0xc2/0x120 [ 430.106300][T10904] __kmalloc_cache_noprof+0x72/0x780 [ 430.106326][T10904] ? fuse_dev_alloc+0x48/0x280 [ 430.106354][T10904] ? fuse_dev_alloc+0x48/0x280 [ 430.106373][T10904] ? fuse_fill_super_common+0x304/0x1210 [ 430.106397][T10904] fuse_dev_alloc+0x48/0x280 [ 430.106422][T10904] fuse_fill_super_common+0x493/0x1210 [ 430.106450][T10904] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 430.106475][T10904] ? lockdep_init_map_type+0x5c/0x280 [ 430.106493][T10904] ? __init_swait_queue_head+0xca/0x150 [ 430.106517][T10904] ? shrinker_register+0x1a8/0x260 [ 430.106544][T10904] ? sget_fc+0x808/0xc20 [ 430.106562][T10904] ? __pfx_fuse_fill_super+0x10/0x10 [ 430.106585][T10904] fuse_fill_super+0x1f2/0x2e0 [ 430.106611][T10904] get_tree_nodev+0xdd/0x190 [ 430.106629][T10904] fuse_get_tree+0x271/0x650 [ 430.106656][T10904] vfs_get_tree+0x8e/0x340 [ 430.106680][T10904] path_mount+0x7b9/0x23a0 [ 430.106706][T10904] ? __pfx_path_mount+0x10/0x10 [ 430.106728][T10904] ? kmem_cache_free+0x2d4/0x6c0 [ 430.106742][T10904] ? putname+0x154/0x1a0 [ 430.106768][T10904] ? putname+0x154/0x1a0 [ 430.106785][T10904] ? putname+0x154/0x1a0 [ 430.106809][T10904] ? __x64_sys_mount+0x293/0x310 [ 430.106827][T10904] __x64_sys_mount+0x293/0x310 [ 430.106847][T10904] ? __pfx___x64_sys_mount+0x10/0x10 [ 430.106877][T10904] do_syscall_64+0xcd/0xfa0 [ 430.106904][T10904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.106921][T10904] RIP: 0033:0x7f39c638efc9 [ 430.106936][T10904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.106952][T10904] RSP: 002b:00007f39c7258038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.106970][T10904] RAX: ffffffffffffffda RBX: 00007f39c65e6180 RCX: 00007f39c638efc9 [ 430.106981][T10904] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 430.106992][T10904] RBP: 00007f39c7258090 R08: 0000200000000840 R09: 0000000000000000 [ 430.107002][T10904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.107012][T10904] R13: 00007f39c65e6218 R14: 00007f39c65e6180 R15: 00007ffd815a70e8 [ 430.107037][T10904] [ 430.400774][T10897] syz.2.1306 (10897) used greatest stack depth: 18968 bytes left [ 431.443622][T10922] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 431.742647][T10920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10920 comm=syz.1.1313 [ 431.763812][T10920] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 431.772266][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 431.788583][T10927] input: syz1 as /devices/virtual/input/input25 [ 431.796710][T10929] xt_l2tp: invalid flags combination: 0 [ 431.831281][T10925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10925 comm=syz.1.1313 [ 431.892586][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1313'. [ 431.925864][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'. [ 431.953238][T10920] netlink: 'syz.1.1313': attribute type 21 has an invalid length. [ 431.969812][T10920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1313'. [ 432.243186][T10937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1319'. [ 432.287848][T10940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.298870][T10940] block device autoloading is deprecated and will be removed. [ 432.644036][ T911] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 432.821254][ T911] usb 1-1: Using ep0 maxpacket: 16 [ 432.826851][T10943] tipc: Enabled bearer , priority 0 [ 432.877962][ T911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.889493][T10944] syzkaller0: entered promiscuous mode [ 432.896879][T10944] syzkaller0: entered allmulticast mode [ 432.903403][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.918519][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.928752][ T911] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.963522][ T911] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.994352][ T911] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.994879][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 433.003695][ T911] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.021036][ T911] usb 1-1: Manufacturer: syz [ 433.022298][T10943] tipc: Resetting bearer [ 433.028331][ T911] usb 1-1: config 0 descriptor?? [ 433.041566][ T30] audit: type=1400 audit(1761260430.752:990): avc: denied { lock } for pid=10942 comm="syz.1.1320" path="socket:[32018]" dev="sockfs" ino=32018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.065467][T10942] tipc: Resetting bearer [ 433.079831][T10942] tipc: Disabling bearer [ 433.221912][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 433.281187][ T5891] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 433.301994][T10962] FAULT_INJECTION: forcing a failure. [ 433.301994][T10962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.315856][ T911] rc_core: IR keymap rc-hauppauge not found [ 433.322055][T10962] CPU: 0 UID: 0 PID: 10962 Comm: syz.1.1327 Not tainted syzkaller #0 PREEMPT(full) [ 433.322079][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.322089][T10962] Call Trace: [ 433.322095][T10962] [ 433.322102][T10962] dump_stack_lvl+0x16c/0x1f0 [ 433.322134][T10962] should_fail_ex+0x512/0x640 [ 433.322158][T10962] _copy_to_user+0x32/0xd0 [ 433.322183][T10962] simple_read_from_buffer+0xcb/0x170 [ 433.322213][T10962] proc_fail_nth_read+0x197/0x240 [ 433.322235][T10962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.322257][T10962] ? rw_verify_area+0xcf/0x6c0 [ 433.322288][T10962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.322308][T10962] vfs_read+0x1e4/0xcf0 [ 433.322328][T10962] ? __pfx___mutex_lock+0x10/0x10 [ 433.322345][T10962] ? __pfx_vfs_read+0x10/0x10 [ 433.322368][T10962] ? __fget_files+0x20e/0x3c0 [ 433.322394][T10962] ksys_read+0x12a/0x250 [ 433.322409][T10962] ? __pfx_ksys_read+0x10/0x10 [ 433.322433][T10962] do_syscall_64+0xcd/0xfa0 [ 433.322461][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.322478][T10962] RIP: 0033:0x7f39c638d9dc [ 433.322493][T10962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.322509][T10962] RSP: 002b:00007f39c729a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.322529][T10962] RAX: ffffffffffffffda RBX: 00007f39c65e5fa0 RCX: 00007f39c638d9dc [ 433.322540][T10962] RDX: 000000000000000f RSI: 00007f39c729a0a0 RDI: 0000000000000005 [ 433.322550][T10962] RBP: 00007f39c729a090 R08: 0000000000000000 R09: 0000000000000000 [ 433.322560][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.322569][T10962] R13: 00007f39c65e6038 R14: 00007f39c65e5fa0 R15: 00007ffd815a70e8 [ 433.322595][T10962] [ 433.329248][ T911] Registered IR keymap rc-empty [ 433.524484][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.546221][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 433.555704][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.562939][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.573550][ T9] usb 4-1: Product: syz [ 433.577876][ T9] usb 4-1: Manufacturer: syz [ 433.584635][ T9] usb 4-1: SerialNumber: syz [ 433.591632][ T9] usb 4-1: config 0 descriptor?? [ 433.601163][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 433.607567][ T911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 433.622908][ T911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 433.644866][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.657879][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.669336][ T5891] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 433.679214][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 433.688514][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.696105][ T5891] usb 3-1: Product: syz [ 433.700607][ T5891] usb 3-1: Manufacturer: syz [ 433.706023][ T5891] usb 3-1: SerialNumber: syz [ 433.711305][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.720685][ T5891] usb 3-1: config 0 descriptor?? [ 433.727624][ T5891] hub 3-1:0.0: bad descriptor, ignoring hub [ 433.733805][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.741026][ T5891] hub 3-1:0.0: probe with driver hub failed with error -5 [ 433.761565][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 433.829976][T10975] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 433.962305][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.971331][T10948] syzkaller0: entered promiscuous mode [ 433.977669][T10948] syzkaller0: entered allmulticast mode [ 433.986322][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.023966][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.184991][ T1947] usb 3-1: USB disconnect, device number 32 [ 434.328750][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.352126][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.372977][ T911] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.390350][T10979] netlink: 'syz.4.1331': attribute type 6 has an invalid length. [ 434.530370][ T911] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 434.541259][ T911] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 434.775995][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 434.795121][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'. [ 434.993502][T10987] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 435.332938][ T9] usb 1-1: USB disconnect, device number 32 [ 435.499447][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 435.964479][ T5899] usb 4-1: USB disconnect, device number 45 [ 435.988423][T11010] FAULT_INJECTION: forcing a failure. [ 435.988423][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.031904][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.1.1340 Not tainted syzkaller #0 PREEMPT(full) [ 436.031922][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.031928][T11010] Call Trace: [ 436.031931][T11010] [ 436.031936][T11010] dump_stack_lvl+0x16c/0x1f0 [ 436.031956][T11010] should_fail_ex+0x512/0x640 [ 436.031971][T11010] _copy_from_user+0x2e/0xd0 [ 436.031984][T11010] copy_from_sockptr_offset+0x15c/0x1b0 [ 436.031998][T11010] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 436.032013][T11010] do_ipt_set_ctl+0x544/0xae0 [ 436.032025][T11010] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 436.032044][T11010] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 436.032055][T11010] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.032071][T11010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.032094][T11010] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 436.032111][T11010] nf_setsockopt+0x8d/0xf0 [ 436.032128][T11010] ip_setsockopt+0xcb/0xf0 [ 436.032141][T11010] ipv6_setsockopt+0x155/0x170 [ 436.032155][T11010] tcp_setsockopt+0xa7/0x100 [ 436.032168][T11010] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 436.032186][T11010] do_sock_setsockopt+0xf3/0x1d0 [ 436.032202][T11010] __sys_setsockopt+0x1a0/0x230 [ 436.032217][T11010] __x64_sys_setsockopt+0xbd/0x160 [ 436.032229][T11010] ? do_syscall_64+0x91/0xfa0 [ 436.032244][T11010] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.032258][T11010] do_syscall_64+0xcd/0xfa0 [ 436.032274][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.032285][T11010] RIP: 0033:0x7f39c638efc9 [ 436.032300][T11010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.032310][T11010] RSP: 002b:00007f39c729a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.032320][T11010] RAX: ffffffffffffffda RBX: 00007f39c65e5fa0 RCX: 00007f39c638efc9 [ 436.032327][T11010] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 436.032333][T11010] RBP: 00007f39c729a090 R08: 00000000000004f0 R09: 0000000000000000 [ 436.032339][T11010] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.032345][T11010] R13: 00007f39c65e6038 R14: 00007f39c65e5fa0 R15: 00007ffd815a70e8 [ 436.032358][T11010] [ 436.384760][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 436.455092][T11017] FAULT_INJECTION: forcing a failure. [ 436.455092][T11017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.500953][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.1.1342 Not tainted syzkaller #0 PREEMPT(full) [ 436.500976][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.500986][T11017] Call Trace: [ 436.500992][T11017] [ 436.500998][T11017] dump_stack_lvl+0x16c/0x1f0 [ 436.501028][T11017] should_fail_ex+0x512/0x640 [ 436.501052][T11017] _copy_to_user+0x32/0xd0 [ 436.501076][T11017] simple_read_from_buffer+0xcb/0x170 [ 436.501102][T11017] proc_fail_nth_read+0x197/0x240 [ 436.501123][T11017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.501144][T11017] ? rw_verify_area+0xcf/0x6c0 [ 436.501165][T11017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.501185][T11017] vfs_read+0x1e4/0xcf0 [ 436.501203][T11017] ? __pfx___mutex_lock+0x10/0x10 [ 436.501218][T11017] ? __pfx_vfs_read+0x10/0x10 [ 436.501238][T11017] ? __fget_files+0x20e/0x3c0 [ 436.501261][T11017] ksys_read+0x12a/0x250 [ 436.501275][T11017] ? __pfx_ksys_read+0x10/0x10 [ 436.501298][T11017] do_syscall_64+0xcd/0xfa0 [ 436.501324][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.501340][T11017] RIP: 0033:0x7f39c638d9dc [ 436.501355][T11017] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.501372][T11017] RSP: 002b:00007f39c729a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.501388][T11017] RAX: ffffffffffffffda RBX: 00007f39c65e5fa0 RCX: 00007f39c638d9dc [ 436.501399][T11017] RDX: 000000000000000f RSI: 00007f39c729a0a0 RDI: 0000000000000005 [ 436.501409][T11017] RBP: 00007f39c729a090 R08: 0000000000000000 R09: 0000000000000000 [ 436.501419][T11017] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 436.501428][T11017] R13: 00007f39c65e6038 R14: 00007f39c65e5fa0 R15: 00007ffd815a70e8 [ 436.501453][T11017] [ 436.901237][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 436.906482][ T154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.930727][ T154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.939682][T11024] 8021q: VLANs not supported on ip6_vti0 [ 436.948997][ T154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.961009][ T154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 437.061151][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 437.063696][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 437.074505][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.088697][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 437.099031][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 437.107736][ T9] usb 3-1: Product: syz [ 437.112344][ T9] usb 3-1: Manufacturer: syz [ 437.117091][ T9] usb 3-1: SerialNumber: syz [ 437.130272][ T9] usb 3-1: config 0 descriptor?? [ 437.144837][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 437.157495][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 437.212009][T11039] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1349'. [ 437.356026][T11014] syzkaller0: entered promiscuous mode [ 437.368561][T11014] syzkaller0: entered allmulticast mode [ 437.721542][ T9] usb 3-1: USB disconnect, device number 33 [ 438.540816][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1359'. [ 438.696174][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 439.011368][ T5899] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 439.020139][ T1947] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 439.027079][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 439.271361][ T911] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 439.441514][ T911] usb 1-1: Using ep0 maxpacket: 32 [ 439.476256][ T911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.568109][ T911] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.586846][ T911] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.633932][ T911] usb 1-1: Product: syz [ 439.651663][ T911] usb 1-1: Manufacturer: syz [ 439.656893][ T911] usb 1-1: SerialNumber: syz [ 439.663373][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 439.664659][ T911] usb 1-1: config 0 descriptor?? [ 439.670005][ T1947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.675718][ T911] hub 1-1:0.0: bad descriptor, ignoring hub [ 439.690919][ T911] hub 1-1:0.0: probe with driver hub failed with error -5 [ 439.690992][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.712531][ T1947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.721381][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.728622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.732261][ T1947] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 439.746317][ T5899] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.756462][ T1947] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 439.769794][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.779176][ T1947] usb 4-1: Manufacturer: syz [ 439.789538][ T1947] usb 4-1: config 0 descriptor?? [ 439.795647][ T5899] usb 3-1: Product: syz [ 439.803025][ T5899] usb 3-1: Manufacturer: syz [ 439.812153][ T5899] usb 3-1: SerialNumber: syz [ 439.823348][ T5899] usb 3-1: config 0 descriptor?? [ 439.833853][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 439.846971][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 439.893305][T11092] syzkaller0: entered promiscuous mode [ 439.899058][T11092] syzkaller0: entered allmulticast mode [ 440.054954][T11081] syzkaller0: entered promiscuous mode [ 440.060488][T11081] syzkaller0: entered allmulticast mode [ 440.082325][T11102] usb 1-1: USB disconnect, device number 33 [ 440.090312][T11104] sctp: [Deprecated]: syz.1.1370 (pid 11104) Use of int in max_burst socket option. [ 440.090312][T11104] Use struct sctp_assoc_value instead [ 440.196217][T11105] hub 1-0:1.0: USB hub found [ 440.204631][T11105] hub 1-0:1.0: 1 port detected [ 440.358830][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.370417][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.518195][ T9] usb 3-1: USB disconnect, device number 34 [ 440.631891][ T30] audit: type=1400 audit(1761260438.352:991): avc: denied { setopt } for pid=11112 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.657513][ T30] audit: type=1400 audit(1761260438.352:992): avc: denied { write } for pid=11112 comm="syz.4.1373" path="socket:[32371]" dev="sockfs" ino=32371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.821647][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 441.024706][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.035422][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.043568][ T9] usb 2-1: Product: syz [ 441.047855][ T9] usb 2-1: Manufacturer: syz [ 441.052504][ T9] usb 2-1: SerialNumber: syz [ 441.059351][ T9] usb 2-1: config 0 descriptor?? [ 441.194842][ T1947] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71 [ 441.221028][ T1947] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 441.248094][ T1947] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71 [ 441.256915][ T1947] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 441.264754][ T1947] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 441.273776][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 441.329197][ T1947] usb 4-1: USB disconnect, device number 46 [ 441.360169][T11127] FAULT_INJECTION: forcing a failure. [ 441.360169][T11127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.383984][T11129] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 441.390526][T11129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.402591][T11129] vhci_hcd vhci_hcd.0: Device attached [ 441.416098][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.0.1378 Not tainted syzkaller #0 PREEMPT(full) [ 441.416121][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.416131][T11127] Call Trace: [ 441.416137][T11127] [ 441.416143][T11127] dump_stack_lvl+0x16c/0x1f0 [ 441.416176][T11127] should_fail_ex+0x512/0x640 [ 441.416199][T11127] _copy_from_user+0x2e/0xd0 [ 441.416219][T11127] drm_ioctl+0x4fb/0xc30 [ 441.416239][T11127] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 441.416262][T11127] ? __pfx_drm_ioctl+0x10/0x10 [ 441.416286][T11127] ? selinux_file_ioctl+0x180/0x270 [ 441.416302][T11127] ? selinux_file_ioctl+0xb4/0x270 [ 441.416320][T11127] ? __pfx_drm_ioctl+0x10/0x10 [ 441.416335][T11127] __x64_sys_ioctl+0x18e/0x210 [ 441.416358][T11127] do_syscall_64+0xcd/0xfa0 [ 441.416382][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.416397][T11127] RIP: 0033:0x7fe75698efc9 [ 441.416410][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.416424][T11127] RSP: 002b:00007fe757751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.416440][T11127] RAX: ffffffffffffffda RBX: 00007fe756be5fa0 RCX: 00007fe75698efc9 [ 441.416451][T11127] RDX: 00002000000011c0 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 441.416466][T11127] RBP: 00007fe757751090 R08: 0000000000000000 R09: 0000000000000000 [ 441.416476][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.416485][T11127] R13: 00007fe756be6038 R14: 00007fe756be5fa0 R15: 00007ffd99630fe8 [ 441.416508][T11127] [ 441.589968][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 441.614632][T11134] fuse: Unknown parameter 'nro' [ 441.721316][ T5892] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 441.734584][ T911] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 441.791633][ T30] audit: type=1400 audit(1761260439.502:993): avc: denied { write } for pid=11132 comm="syz.0.1382" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 442.077926][T11140] hub 1-0:1.0: USB hub found [ 442.085711][T11140] hub 1-0:1.0: 1 port detected [ 442.121214][ T911] usb 5-1: Using ep0 maxpacket: 16 [ 442.275316][ T911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.283057][ T911] usb 5-1: can't read configurations, error -61 [ 442.411893][ T911] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 442.413988][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 442.421615][T11148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 442.681243][ T911] usb 5-1: Using ep0 maxpacket: 16 [ 442.708713][ T911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.747548][ T911] usb 5-1: can't read configurations, error -61 [ 442.768954][ T911] usb usb5-port1: attempt power cycle [ 442.801300][ T1947] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 443.031233][ T1947] usb 1-1: Using ep0 maxpacket: 32 [ 443.038513][ T1947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.051500][ T1947] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 443.060808][ T1947] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 443.069947][ T1947] usb 1-1: Product: syz [ 443.078502][ T1947] usb 1-1: Manufacturer: syz [ 443.083219][ T1947] usb 1-1: SerialNumber: syz [ 443.089015][ T1947] usb 1-1: config 0 descriptor?? [ 443.095203][ T1947] hub 1-1:0.0: bad descriptor, ignoring hub [ 443.101522][ T1947] hub 1-1:0.0: probe with driver hub failed with error -5 [ 443.498952][T11163] ------------[ cut here ]------------ [ 443.499020][T11163] WARNING: CPU: 0 PID: 11163 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.499061][T11163] Modules linked in: [ 443.499114][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.2.1388 Not tainted syzkaller #0 PREEMPT(full) [ 443.499136][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.499149][T11163] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.499174][T11163] Code: e8 fb e8 ec f3 d5 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 ea c7 e8 fb 90 <0f> 0b 90 eb b5 e8 bf 53 51 fc e9 dc fe ff ff e8 45 54 51 fc e9 14 [ 443.499210][T11163] RSP: 0018:ffffc900055cf500 EFLAGS: 00010246 [ 443.499228][T11163] RAX: 0000000000080000 RBX: ffff888142768028 RCX: ffffc9000ef61000 [ 443.499242][T11163] RDX: 0000000000080000 RSI: ffffffff85d44266 RDI: 0000000000000006 [ 443.499254][T11163] RBP: 00000067414f8d1e R08: 0000000000000006 R09: 00000067414f8d1e [ 443.499267][T11163] R10: 00000067414f8d1e R11: 0000000000000001 R12: ffffc900055cf668 [ 443.499280][T11163] R13: 00000067414f8d1e R14: 0000000000004e20 R15: ffffffff85d44100 [ 443.499293][T11163] FS: 00007f7e47f946c0(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 443.499312][T11163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.499325][T11163] CR2: 000000110c39e30a CR3: 000000007bee0000 CR4: 00000000003526f0 [ 443.499338][T11163] Call Trace: [ 443.499346][T11163] [ 443.499359][T11163] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 443.499388][T11163] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 443.499430][T11163] drm_crtc_next_vblank_start+0x182/0x300 [ 443.499460][T11163] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 443.499489][T11163] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 443.499512][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.499558][T11163] ? read_tsc+0x9/0x20 [ 443.499581][T11163] ? ktime_get+0x1a7/0x310 [ 443.499612][T11163] commit_tail+0x83/0x400 [ 443.499639][T11163] drm_atomic_helper_commit+0x2fd/0x380 [ 443.499661][T11163] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 443.499684][T11163] drm_atomic_commit+0x234/0x300 [ 443.499706][T11163] ? __pfx_drm_atomic_commit+0x10/0x10 [ 443.499727][T11163] ? __pfx___drm_printfn_info+0x10/0x10 [ 443.499758][T11163] ? drm_client_rotation+0x4da/0x6a0 [ 443.499785][T11163] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 443.499817][T11163] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 443.499871][T11163] drm_client_modeset_commit_locked+0x14d/0x580 [ 443.499898][T11163] drm_fb_helper_pan_display+0x32d/0xa40 [ 443.499933][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.499967][T11163] fb_pan_display+0x47c/0x7d0 [ 443.499987][T11163] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 443.500021][T11163] bit_update_start+0x49/0x1f0 [ 443.500046][T11163] fbcon_modechanged+0x5ab/0x6b0 [ 443.500073][T11163] fbcon_set_all_vcs+0x1d6/0x450 [ 443.500098][T11163] fbcon_update_vcs+0x2c/0x50 [ 443.500119][T11163] do_fb_ioctl+0x787/0x7e0 [ 443.500146][T11163] ? __pfx_do_fb_ioctl+0x10/0x10 [ 443.500169][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.500209][T11163] ? do_vfs_ioctl+0x487/0x14f0 [ 443.500242][T11163] ? lockdep_hardirqs_on+0x71/0x110 [ 443.500291][T11163] ? selinux_file_ioctl+0x180/0x270 [ 443.500318][T11163] fb_ioctl+0xe5/0x150 [ 443.500342][T11163] ? __pfx_fb_ioctl+0x10/0x10 [ 443.500367][T11163] __x64_sys_ioctl+0x18e/0x210 [ 443.500397][T11163] do_syscall_64+0xcd/0xfa0 [ 443.500432][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.500452][T11163] RIP: 0033:0x7f7e4718efc9 [ 443.500469][T11163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.500486][T11163] RSP: 002b:00007f7e47f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.500506][T11163] RAX: ffffffffffffffda RBX: 00007f7e473e6180 RCX: 00007f7e4718efc9 [ 443.500536][T11163] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000a [ 443.500549][T11163] RBP: 00007f7e47211f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.500561][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.500573][T11163] R13: 00007f7e473e6218 R14: 00007f7e473e6180 R15: 00007ffff0019548 [ 443.500606][T11163] [ 443.500616][T11163] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 443.500627][T11163] CPU: 0 UID: 0 PID: 11163 Comm: syz.2.1388 Not tainted syzkaller #0 PREEMPT(full) [ 443.500647][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.500658][T11163] Call Trace: [ 443.500664][T11163] [ 443.500672][T11163] dump_stack_lvl+0x3d/0x1f0 [ 443.500700][T11163] vpanic+0x640/0x6f0 [ 443.500729][T11163] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.500753][T11163] panic+0xca/0xd0 [ 443.500780][T11163] ? __pfx_panic+0x10/0x10 [ 443.500823][T11163] check_panic_on_warn+0xab/0xb0 [ 443.500853][T11163] __warn+0xf6/0x3c0 [ 443.500869][T11163] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.500896][T11163] report_bug+0x3c3/0x580 [ 443.500921][T11163] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.500947][T11163] handle_bug+0x184/0x210 [ 443.500966][T11163] exc_invalid_op+0x17/0x50 [ 443.500985][T11163] asm_exc_invalid_op+0x1a/0x20 [ 443.501002][T11163] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 443.501026][T11163] Code: e8 fb e8 ec f3 d5 fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 ea c7 e8 fb 90 <0f> 0b 90 eb b5 e8 bf 53 51 fc e9 dc fe ff ff e8 45 54 51 fc e9 14 [ 443.501043][T11163] RSP: 0018:ffffc900055cf500 EFLAGS: 00010246 [ 443.501061][T11163] RAX: 0000000000080000 RBX: ffff888142768028 RCX: ffffc9000ef61000 [ 443.501071][T11163] RDX: 0000000000080000 RSI: ffffffff85d44266 RDI: 0000000000000006 [ 443.501080][T11163] RBP: 00000067414f8d1e R08: 0000000000000006 R09: 00000067414f8d1e [ 443.501090][T11163] R10: 00000067414f8d1e R11: 0000000000000001 R12: ffffc900055cf668 [ 443.501100][T11163] R13: 00000067414f8d1e R14: 0000000000004e20 R15: ffffffff85d44100 [ 443.501110][T11163] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 443.501138][T11163] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 443.501170][T11163] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 443.501196][T11163] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 443.501231][T11163] drm_crtc_next_vblank_start+0x182/0x300 [ 443.501259][T11163] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 443.501286][T11163] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 443.501307][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.501334][T11163] ? read_tsc+0x9/0x20 [ 443.501355][T11163] ? ktime_get+0x1a7/0x310 [ 443.501384][T11163] commit_tail+0x83/0x400 [ 443.501410][T11163] drm_atomic_helper_commit+0x2fd/0x380 [ 443.501437][T11163] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 443.501458][T11163] drm_atomic_commit+0x234/0x300 [ 443.501479][T11163] ? __pfx_drm_atomic_commit+0x10/0x10 [ 443.501498][T11163] ? __pfx___drm_printfn_info+0x10/0x10 [ 443.501527][T11163] ? drm_client_rotation+0x4da/0x6a0 [ 443.501552][T11163] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 443.501584][T11163] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 443.501635][T11163] drm_client_modeset_commit_locked+0x14d/0x580 [ 443.501662][T11163] drm_fb_helper_pan_display+0x32d/0xa40 [ 443.501695][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.501727][T11163] fb_pan_display+0x47c/0x7d0 [ 443.501745][T11163] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 443.501778][T11163] bit_update_start+0x49/0x1f0 [ 443.501801][T11163] fbcon_modechanged+0x5ab/0x6b0 [ 443.501827][T11163] fbcon_set_all_vcs+0x1d6/0x450 [ 443.501850][T11163] fbcon_update_vcs+0x2c/0x50 [ 443.501870][T11163] do_fb_ioctl+0x787/0x7e0 [ 443.501896][T11163] ? __pfx_do_fb_ioctl+0x10/0x10 [ 443.501919][T11163] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.501959][T11163] ? do_vfs_ioctl+0x487/0x14f0 [ 443.501988][T11163] ? lockdep_hardirqs_on+0x71/0x110 [ 443.502037][T11163] ? selinux_file_ioctl+0x180/0x270 [ 443.502061][T11163] fb_ioctl+0xe5/0x150 [ 443.502083][T11163] ? __pfx_fb_ioctl+0x10/0x10 [ 443.502108][T11163] __x64_sys_ioctl+0x18e/0x210 [ 443.502136][T11163] do_syscall_64+0xcd/0xfa0 [ 443.502165][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.502182][T11163] RIP: 0033:0x7f7e4718efc9 [ 443.502197][T11163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.502213][T11163] RSP: 002b:00007f7e47f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.502230][T11163] RAX: ffffffffffffffda RBX: 00007f7e473e6180 RCX: 00007f7e4718efc9 [ 443.502242][T11163] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 000000000000000a [ 443.502253][T11163] RBP: 00007f7e47211f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.502264][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.502275][T11163] R13: 00007f7e473e6218 R14: 00007f7e473e6180 R15: 00007ffff0019548 [ 443.502303][T11163] [ 443.502519][T11163] Kernel Offset: disabled