last executing test programs: 10.759475529s ago: executing program 2 (id=347): syz_usb_connect(0x5, 0x27, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000b75c7f404705010264110102030109"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b"], 0x14) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f6361ec3d72656c61746976652c646566636f6e74657874b6"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.421010655s ago: executing program 4 (id=351): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x10, 0x0, 0x0, 0x920, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xe, 0xbf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240), 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(0xffffffffffffffff, &(0x7f00000026c0), 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r5, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r6, 0x0, 0x3fff, 0x2, &(0x7f0000000100)="00b2", 0x4}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000000180)) write(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.417722404s ago: executing program 0 (id=354): syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) write(r1, &(0x7f0000000380)="8e86a4a12cbed1c953ae8de6ea884e2c3690dcfb6ee2af9f4e16d3047b3d1c39188ec3d40be30b581fa0392a15eada37b583e4a7ae8497a532a3dd6a9b5279ce0d810b4b5d89fce13277c673f4cbad885fc07468d6fc03d21f38d5a8a24ae72baab00ea145f2b24b39901bbbe27886fa594b8defa684185e6edb75be871f1c1791a8683816b86c29808453bd00e59f017d29f1a5277f92", 0x97) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u8=&(0x7f0000000040)}}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004f40)={'vlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYBLOB="aa38d1b246f4947833d23c0f9fb45d2b2a749a387b6654ad7453b1dc3b46e3f2ca00afa7b9e2a8546a83b6b477af75b6eb9edb16c58b516dd286e363f9224b49b9e57eeaae11f4cb15290a0a4becd699129b1b982d9bf0218d18aca1455eb18f03a29d0a4c5abd723d24a2147b3ff0454aad49e42c2145adbfc055daa4c462d3207a5a29d4f3202cd8ab", @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 8.394004025s ago: executing program 0 (id=355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r1, 0x852dd6c070cd7e4d, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x11, 0x36, 0x1}]}, 0x44}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x8850) 8.30595313s ago: executing program 0 (id=356): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$phonet(0x23, 0x2, 0x1) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) bind$unix(r2, &(0x7f00000002c0)=@abs={0xa, 0x2}, 0x6e) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0xe, &(0x7f0000000200)={0xfffffffffffffffc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0xd0ff}) 8.15332847s ago: executing program 4 (id=357): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r1, 0x400, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x55b, @mcast2, 0x8}}}, 0x118) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000240)={0xf9, "dca32cd46cafa2a8f5eebd1026b016c97f7dd341c30cf1ac86a7f7e3201f378059af1cd9b0ebae536b50a1cb6962b9a02144b2f5dc94786f99b70441c5f15f166c504cbc3025d9331db1f17cfbcce1ef62c6a79f8f98f63036477428402a395423a49548a3b7ee25399d294fb8b12a12ffb496d9125815ae006dfed83750edf395bbb8fbde9cab19750408fed468e7301427a9e0e0884e5ae94ef017c7509c6940ed9da948c1303969560e10538abce3a1ce9eb8e37ec6fb731997fd96d55b5e1ca17fb7c50a0a5c3a7cecf724b582275b101a90d8227e2446023da933f9bf30636fc88a4d09a5599203fe0c5ba351b38f629a3b8f2fa7faf56d5dbd963c088a45164c7f67de8db82718d3eb622765f34a578550a7d3a6b2a6ca467f51757cf014299b8b4eaa03cae82d3be34313bd712630592666e92abf2f43a9f993744a0306f9fa71ec5fd5c592bc91e8223f3b15bd7f5c016fc1bf6281ec024c19609bb068ffe060db2f5feb53420555a7ce7dee89f3eb69811355ca92ff5753143bc0570cd067f06e10c8603987f4f1768bf8f14163ad407532c1e9df6d2cf1920ebf490e961a2ef293a3e556bf138a749836e64ff21e9c99f15766968cc5b5be9f00a065e1b3360bef84be958c53c8ede8e0c2baa0098ab5c3ba65373c116e03b8e0bc5b4dc94ad003e64c0c64c7c893adcd33ec123c67a31f765d654f0bcc0210d019"}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000480)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000015c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001580), 0x106, 0x8}}, 0x20) ioctl(r2, 0x9, &(0x7f0000001600)="36a9c6e8c4d92dcae854b5aeec598be53bc25388179103bfdb7e66e8b20055fcbbc58e219e842b94648b19dadb757d729ce82760dd2f6a403be5d7ebe8f4e3042eaad31e5ed09afc7c8e182f170e208abb8428d458e0b4745f5f57bef472e7cc79cf87f7726770f8d450c5cfd1cff3d10cd85b9ac2427d098cad15d93d83ca39c09c48f476137cf94d8dd46274065a7c281dd7ac3c081b166d4b93c687eb3d7ad7c64e150de990d5f1ab125365640314e500dda434") r5 = syz_open_dev$mouse(&(0x7f00000016c0), 0x3, 0x62080) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000001700)={0x3}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) prlimit64(r6, 0x8, &(0x7f00000017c0)={0x10001, 0x8}, &(0x7f0000001800)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000001840)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) write(r4, &(0x7f0000001880)="2740bfd0bced29d65782d80c1f85da1611cc1cd82bb2111ae949bd9c9631cdf49634f78bfe32203d7604b58fae87f0274f1566003f2655757f3aef6d79291efe585f5a539a0385bf0bb607f4c3c1c238a5928c6ffc5cc19c1500fa7f8f789066f59698d0948491a02e40827744c1e03ba195611896e4cb3c4e09a15727e3705c63dfb5ac2982083c436c6ec049c6651ec5a5b7b916667566e5a55136c50c3def6756cd423365b14e68d280b3d87161924265d3db1497cd72c2", 0xb9) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000001940)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r3, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001b00)={'syztnl2\x00', &(0x7f0000001a80)={'ip6_vti0\x00', 0x0, 0x0, 0x7, 0x81, 0xff, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x80, 0x200}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001c40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040) sendmsg(r5, &(0x7f0000001ec0)={&(0x7f0000001c80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d00)="c4aecda0b8efae2c7572eb62c0bc33f27001fb53d2a5e58635039965185798e416659551efba1a69f1e0f4777a1f348fab91cac0e71232e84c9a22dcd26e330cba50c99077e672ad48a4cebc69d8463dbfd2869c185cac3a87a83c11669382ac88464a6459d934c3d5811fdc196c65a00726703c8af6179af9d7243036a298c13ab2b846702971443836e929369d01203366ec6930f33bb21d006d6c37e1026c886ae6af467678d01f7ccdb3b48e8a06e4fa2824b9b0f6112a918c", 0xbb}, {&(0x7f0000001dc0)="373fd585928eaa296185abb715b6b69fa02757d232c77c0596e5888cd61023a7b3d353da17adc4bcb68b9470dbe647f3933ae1a1e65967615634ce6dbd835022caa903aab4497a2d742df141a9bdc3247b0321e3747358720614a2dc5891b3f78140305f68522115d84a37846c6ce6cc300945a8a8fa25caceb13764a37c269f22f232e927d8f1f85049239315c4439c87ce86f5a5b629bf5b07f477c2", 0x9d}], 0x2}, 0x8000) socket(0x2b, 0x800, 0xffffffff) bpf$ENABLE_STATS(0x20, &(0x7f0000001f00), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000001f40), 0x4) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000001f80)={0x7fff, 0x3, 0x4, 0x0, 0x9}) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000001fc0)) sendmsg$nl_route_sched_retired(r5, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f0000002040)=@newtclass={0xc8, 0x28, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x0, 0x10}, {0xfff3}}, [@c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xa}, 0xffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0xf, 0x8, 0x0, 0xb22d}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0xa, 0x8, 0x6, 0xffff061d, 0x3, 0x80}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x6}}}, @c_atm={{0x8}, {0x40, 0x2, [@TCA_ATM_HDR={0x3a, 0x3, "377e8ea9905cc561c2e6fdd222b8045389bfa8959c08158605f57a0b8a31ac0f8037bf231673ed0690e7c9d372ef06a72db77827b60e"}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000002200)={0x73622a85, 0x1000, 0x3}) 7.79733911s ago: executing program 4 (id=358): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) fcntl$dupfd(r1, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = msgget(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000000c0)=""/173) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) syz_clone(0x53200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.935449281s ago: executing program 2 (id=359): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) creat(&(0x7f0000000300)='./bus\x00', 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000280)) close(0x3) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000c40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="d3f2a90a2c5e4da96aa3e84df223f1e75c60b2e4dc08dda59545f62cf573dd9547aaa37c51502e482e4c8bfc87807daeff30538716571e161f76aea78e9e09", 0x3f}, {&(0x7f0000000380)="ec5eaedbef80c043bda7be089418b64c10bb33542ede3174ee33c0", 0x1b}], 0x2, &(0x7f00000004c0)=[@dstopts_2292={{0x150, 0x29, 0x4, {0x3c, 0x26, '\x00', [@pad1, @pad1, @generic={0x93, 0x7a, "38ae9c92a0f2b80a1fcbd56083cf813ddf8f9beb01eb912ee876d6cd009e36d9791ceb71e58cddabf86f8672d7cacc85e3581c7e08eec746ee3cee21b9874b34c2f51db845c8b21931f3e65f0eb52f3e95c8e906cb44373f2ee931e07f87eb3174fa3a2204e580efe4fdcad8e1f1ecf7f686e350118d4da29375"}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @generic={0x10, 0x92, "9a1fb360bd27fcd581650b2c56e70c4bbce6b6ef619b208b649575dba9b0f6c4b3830449fd27eabe5dce9fcf0686fa250a5c0bec476c6f68a5d06543a0bd310fd0e64501a3e708c97bb6e8cd0ab6d11b426b0d3234d0fddec0595803aceae37bf43836ccf218d7f9bddc32097a5cb1f32a31f03f34dda6ee6da2c5900c3c68f14214c38b81ecdb3bcf9ba28722253c7dafed"}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x150}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @mcast1, 0xffff5bd7}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)}}, {{&(0x7f0000000900)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000940)="88cc39ce314d537f299b033cac62994f9412e28f23517251851cff64db58e788d60db412b8bb697326ef621c94c064b933409912f73b4fc8c74a2bc9de221f66815265660655da34eb6386e19c3f05a07af27416da0a40c1a995f5620b87df5c7ef0f89e23d67ff4b066a0c057cde1f299e93adc51ca09ab1fbd09be3eccdc941310590d1bd2e5942f237a77a51199aa914f45e5e882d4d619655f70eb2357dbb6d0c4e8fb85fa51fea91aa527cab84f8d50b6cd4b040188", 0xb8}], 0x1, &(0x7f00000004c0)=ANY=[], 0x1c0}}], 0x3, 0x4048000) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0)="3af8dde1c40e4b6f4661cb7724b0c06f75a748ae80a4a13d493662a3774f7c2ac52dd82e13b1bd35b71559acddf7ae3ef6aaeb8feed9c7f4fa3ba522f8800132695d19b09866cd48cea093dcbec010e921d561143639bb06d975dfd7afaa99ba13f8593d2e0e5a8de36a41a7b8ba11a6b35f20993f3541499d2d073dc6f264b6050ad7225bc2dcc5a69afab75bf6cc409ed13a40b2860c983db6a9db4f1f133f35ede30e31b0e6f5e8b00c33cf208e5f0d8021ec84260c7c8a6d2f6bdef3321035de910fd62e4ddb2cf8f1942b33754edde84a483dd10cf8b0ce3119", 0xdc, r0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet(0x2, 0x2, 0x1) 6.309879183s ago: executing program 0 (id=360): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x700, 0x1f00c00e}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x545) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="16220000cc90782e2a0b1c781461be7219fbff0600fffffffc0300000085000000bc0200809500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba", 0x29}], 0x1}, 0x0) 6.293345824s ago: executing program 3 (id=361): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x2, 0x7ffffdbd}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000000, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.138983408s ago: executing program 3 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a92e"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3446ceb1c5a6525e8f56e2add"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0xe000000) 6.007898891s ago: executing program 3 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f00000001c0)={0x8, 0x2000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="15e310790689ad866bbdde000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x2b}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {0x0, 0x400b}, {0x14, 0x19, {0xbea, 0xfffffff9, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x200010d4) recvmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}, {{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f00000084c0)=""/177, 0xb1}], 0x1}, 0x7}], 0x2, 0x10101, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001680)="6ed351825c451ba1f97ef0d04d4ed9f2333d230e086c135bf3a594f9f4ee47445b9ffe1a5745ea4073cf839b2212a41fd94cd8f8ee783e8e1241f3d3ae9dbb056994c6da0680cbfbf23815c5923829e46897b5af6556e4a495f3a59b74d25bff832f00ce9843e63ee3cf2391a887ffa05f4d6429358740fef4372e616db9e645e6ed8c4aa4396c6d4d5b153f37928370b091030799a2438e0d4d0fae76546468c2ee3dd7de2f39f7a3fe8225d22484532c9d411133dc4430ac2bf1acf49b0184be88", 0xc2}], 0x1}}], 0x1, 0x80) 5.752019893s ago: executing program 3 (id=364): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x60, 0x9, 0x85, {0x85, 0x31, "af18265768d1c1a4f8a12bbca4b4729e91a6c7817e0473833c8cb2171e50450e9be60242007ff233103223f8854ab0aaa00a595a49759bbf4af0cd04bd36c8b1ee6edbcea28ea05726c2933acddf3257fc0962765f278d42bf5e9f35510f1298bbb07acf5a511ad38455672a393b26c20b32c878b483377111842350b6ce4811062d8d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x16, 0x1a, "3989cfa853a3d4fcfd79b095a0e1b7553fa68a1b137eb7c9aa62"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000300)={0x20, 0x81, 0x3, "458c4c"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "0343"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "a048f9"}, &(0x7f00000003c0)={0x20, 0x84, 0x4, "d81ba252"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "73409f"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.67102228s ago: executing program 1 (id=365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x88}}, 0x0) (fail_nth: 1) 5.401411757s ago: executing program 4 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4f, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r6) keyctl$read(0xb, r6, &(0x7f0000002e40)=""/72, 0x4) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) 5.301672405s ago: executing program 1 (id=367): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaef}, 0x8) bind$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0x360}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000140)=0x3, 0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) open(&(0x7f0000000300)='./file0\x00', 0x183383, 0xb0) write$dsp(r0, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) close(r0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(&(0x7f0000000040)='./file0\x00', 0x0) 4.516580556s ago: executing program 2 (id=368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x5, 0x3}, 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f00000044c0)=0xfffffffffffffe7e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0x9, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x5}}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) 4.454922973s ago: executing program 4 (id=369): socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000001, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.081763146s ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x4800, 0x10) r1 = fsmount(0xffffffffffffffff, 0x0, 0x74) mount_setattr(r0, &(0x7f0000000300)='./file1\x00', 0x100, &(0x7f0000000340)={0x72, 0x2, 0x90000, {r1}}, 0x20) open$dir(&(0x7f0000000100)='./file1\x00', 0x20741, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0xa, 0x1000, 0x0, 0x0}, {0x6, 0x6808, 0xfe, &(0x7f00000009c0)="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"}], 0x2}) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x3, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r7, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r6}, 0x0) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582020002"], 0x0) 4.032780715s ago: executing program 2 (id=371): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000ffe00000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_setup(0x4562, &(0x7f0000000000)={0x0, 0xc95e, 0x1, 0x2, 0x30f}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x14, 0x18, {0x1}}], 0x18}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r12 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r12, 0x80044dfb, 0xffffffffffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r11, 0x6) 3.63281034s ago: executing program 0 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) 2.645661981s ago: executing program 0 (id=373): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200d9564083ca10f0d13efb17a83567c00000000"], 0x0, 0x0, 0x0, 0x0}) 2.516903419s ago: executing program 4 (id=374): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000300)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4804}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x85, &(0x7f0000000100)=""/133, 0x41100}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xffffff1d) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.383234302s ago: executing program 3 (id=375): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x11, 0x24, 0x3}}], 0x18}, 0x0) 2.041592713s ago: executing program 3 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4000, @fd_index, 0xb8, 0x8, 0x5, 0x1a, 0x1, {0x2, r5}}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) 1.771140087s ago: executing program 2 (id=377): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8105ddffffff0000"], 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019480)=@newqdisc={0x140, 0x24, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xc, 0xb}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1fd}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x95, 0x4f, 0x3, 0x7, 0x1, 0xe, 0x5, 0x8}}, {0x14, 0x2, [0x8000, 0xad46, 0x8000, 0x2, 0xfffb, 0x102, 0x40, 0x9]}}, {{0x1c, 0x1, {0x4, 0x8, 0x0, 0x5, 0x2, 0xb8, 0x316, 0x5}}, {0xe, 0x2, [0x9, 0x81, 0xfff8, 0x3, 0x26d]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80001}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x2, 0x1, 0x1, 0xe95, 0x6, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x5, 0x2, 0x8, 0x40008, 0x2, 0x1000000, 0xd65, 0x3}}, {0xa, 0x2, [0x9, 0xf000, 0x6]}}, {{0x1c, 0x1, {0xc, 0x8e, 0x2, 0xb, 0x2, 0x5, 0x3, 0x9}}, {0x16, 0x2, [0x40, 0x81, 0x6, 0x3ff, 0x4, 0x6, 0x8001, 0x200, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0xd12c, 0x3, 0x3, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x7ff, 0x7, 0x2]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x88c0}, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102380, 0x18fec) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x4000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) 825.213449ms ago: executing program 1 (id=378): socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xff, &(0x7f0000000080)={@local, @random="7a08240ad356", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf1, 0x67, 0x0, 0x3, 0x84, 0x0, @remote, @broadcast}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2b"}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000014c0)={0xf}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000100)={0x4000000, 0x92, 0x0, 0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20ffffff6800e978ffff0b000000000000000000000000000000000091dc9c14c2330d6f75c0d014e8ec0fec7872cdb79e74ed33fea36aa0bc26d122e559b0935b82de7385ad2b9379180766c9746d8468ea1a95ef7abd8eb95c2ecae9fa95b5e71dd8adfc06f7e9172885cf343c5b44351eec1ba86facadd6570ba471ab9a7b667f268587b34140ab1bb0804db212e2faa3b338"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000080000000008001e0001000000328656736e7c27f004202e91569be5f3454d8b1136af6cbd78e393277f11cd2af7265b90c070704242ee7d0ae841fbd8237675f80cdec7fed39b4c4d5939139357262961f60d231c0620a45b08daef5a58ec5225684f063466b1eaf54e7dba155601c09231f4cee763351fc0d171b76b5bec47ff07d140c1a0a30b8ede4db710c7d7588fb8e68daba375b41d96f9ac283847f4b77bdf2109afb9c677a12e889d83fda5"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000800004400127875bc59da1ec53f800e000100697036657273700000000000300002801400060020010000000000000000000100741df53f000700fc0200000000000000000000000000000400e3bcf4"], 0x64}}, 0x0) write(r1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265020c000280060001000000cc634de336b25c319a321366cda9908ef693bcc738cf018a4565f462e7f50bc14acdae8db444248c12a92fa4ffdab8b5b2d4a15eb89ca346119f3dd956ec12592d5a2c5be0cf01faf296cd8ed70268c7ce2ba342b64e1e5d38f50afa5d68763a12dd6d4ae53f1549c90780885e015dd7329a68fced63c3beb70187c74580c717fb6f400cb218"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 353.592052ms ago: executing program 2 (id=379): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2, 0x0, 0x0, 0x0, 0x8], [0x0, 0x3, 0x6, 0x0, 0x8, 0x0, 0x2], [0x105, 0xfffffffb, 0x3, 0x8e, 0x2000000a, 0x1, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0x10000000, 0x590, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {}, {0x4}, {0xffffffff}, {0xfffffff8, 0x2}], '\x00', 0x1, 0x0, 0x0, 0xf8}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1ffffff, 0x0, 0x8, 0x8, 0x200}, 0x6, 0x1, 0x0, 0x0, 0x8, 0x4, 0x1f, 0x20, 0x8, 0x4, {0x5, 0x7, 0x1, 0x5, 0x9, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x44080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', r2, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000300)) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000140)=0xa, 0x4) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 241.423846ms ago: executing program 1 (id=380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x20000000, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@local, 0x1, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x500}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) 0s ago: executing program 1 (id=381): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x6, 0x1, 0x7d, 0x7, 0x0, 0x2b, 0x9}, {0xeeef0000, 0x8080000, 0x0, 0xfc, 0x40, 0x9, 0x75, 0x3, 0x6, 0x0, 0x3}, {0x5000, 0x1000, 0xe, 0x2, 0x1, 0xff, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x85}, {0x1, 0xeeef0000, 0xb, 0xe7, 0x3, 0x2, 0x1, 0xfc, 0x4, 0x7, 0xe, 0x8}, {0xdddd0000, 0x2000, 0xf, 0x7f, 0x5, 0x87, 0xc, 0x3, 0x9, 0x8, 0xf7}, {0xeeef0000, 0x8080000, 0xb, 0x2, 0xb1, 0x5, 0x4, 0x80, 0x4, 0xf, 0x1, 0x3}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x0, 0x1, 0x4, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x8000000, 0xb, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x0, 0x9, 0xa}, {0xe6e50000, 0x70}, {0xdddd0000, 0x407}, 0x80000037, 0x0, 0xdddd0000, 0x2000, 0x20000000000f, 0xb800, 0x8000000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x1]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = dup2(r0, r0) ioctl$TIOCGWINSZ(r7, 0x4008af23, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.198527][ T6046] netlink: 'syz.3.25': attribute type 2 has an invalid length. [ 85.206456][ T6046] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 85.222357][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 85.582611][ T5884] DVB: Unable to find symbol tda10046_attach() [ 85.605514][ T5884] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 85.616603][ T30] audit: type=1400 audit(1761650785.032:204): avc: denied { open } for pid=6043 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.668718][ T5884] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 85.739229][ T30] audit: type=1400 audit(1761650785.032:205): avc: denied { getattr } for pid=6043 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.764408][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.888255][ T30] audit: type=1400 audit(1761650785.762:206): avc: denied { write } for pid=6050 comm="syz.4.27" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.264478][ T30] audit: type=1400 audit(1761650786.142:207): avc: denied { create } for pid=6038 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.429588][ T30] audit: type=1400 audit(1761650786.142:208): avc: denied { write } for pid=6038 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=2057 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.456802][ T30] audit: type=1400 audit(1761650786.142:209): avc: denied { append } for pid=6038 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2057 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.536996][ T30] audit: type=1400 audit(1761650786.412:210): avc: denied { unlink } for pid=6067 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=2057 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.029480][ T30] audit: type=1400 audit(1761650786.892:211): avc: denied { create } for pid=6068 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.147435][ T6071] xt_hashlimit: max too large, truncated to 1048576 [ 87.169396][ T30] audit: type=1400 audit(1761650786.902:212): avc: denied { ioctl } for pid=6068 comm="syz.0.32" path="socket:[9062]" dev="sockfs" ino=9062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.173887][ T5884] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 87.252952][ T6071] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 87.313887][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 87.327668][ T5884] usb 4-1: USB disconnect, device number 2 [ 87.502538][ T979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.662558][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.673968][ T979] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 87.684568][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.742297][ T6091] random: crng reseeded on system resumption [ 87.771296][ T979] usb 1-1: config 0 descriptor?? [ 87.821001][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.854490][ T6094] Zero length message leads to an empty skb [ 87.970956][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 87.979168][ T5884] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 87.988816][ T5884] usb 4-1: config 0 has no interface number 0 [ 87.995173][ T5884] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 88.006590][ T5884] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 88.020383][ T5884] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 88.029740][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.038400][ T5884] usb 4-1: Product: syz [ 88.047712][ T5884] usb 4-1: Manufacturer: syz [ 88.053820][ T5884] usb 4-1: SerialNumber: syz [ 88.060421][ T5884] usb 4-1: config 0 descriptor?? [ 88.448111][ T6099] FAULT_INJECTION: forcing a failure. [ 88.448111][ T6099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.470679][ T979] steelseries 0003:1038:12B6.0001: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 88.497293][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT(full) [ 88.497322][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.497336][ T6099] Call Trace: [ 88.497342][ T6099] [ 88.497349][ T6099] dump_stack_lvl+0x16c/0x1f0 [ 88.497387][ T6099] should_fail_ex+0x512/0x640 [ 88.497413][ T6099] _copy_from_user+0x2e/0xd0 [ 88.497439][ T6099] kstrtouint_from_user+0xd6/0x1d0 [ 88.497466][ T6099] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 88.497494][ T6099] ? __lock_acquire+0xb8a/0x1c90 [ 88.497537][ T6099] proc_fail_nth_write+0x83/0x220 [ 88.497558][ T6099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.497587][ T6099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.497606][ T6099] vfs_write+0x2a0/0x11d0 [ 88.497631][ T6099] ? __pfx___mutex_lock+0x10/0x10 [ 88.497648][ T6099] ? __pfx_vfs_write+0x10/0x10 [ 88.497673][ T6099] ? __fget_files+0x20e/0x3c0 [ 88.497697][ T6099] ksys_write+0x12a/0x250 [ 88.497713][ T6099] ? __pfx_ksys_write+0x10/0x10 [ 88.497737][ T6099] do_syscall_64+0xcd/0xfa0 [ 88.497763][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.497780][ T6099] RIP: 0033:0x7f498d78da7f [ 88.497795][ T6099] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 88.497809][ T6099] RSP: 002b:00007f498e5a5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 88.497827][ T6099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f498d78da7f [ 88.497839][ T6099] RDX: 0000000000000001 RSI: 00007f498e5a50a0 RDI: 0000000000000004 [ 88.497850][ T6099] RBP: 00007f498e5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 88.497862][ T6099] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000000001 [ 88.497872][ T6099] R13: 00007f498d9e6128 R14: 00007f498d9e6090 R15: 00007ffd1cf6d848 [ 88.497899][ T6099] [ 88.684205][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.716397][ T979] steelseries 0003:1038:12B6.0001: hid_hw_raw_request() failed with -71 [ 88.730848][ T979] usb 1-1: USB disconnect, device number 2 [ 89.669637][ T6110] fido_id[6110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.711102][ T6113] nvme_fabrics: missing parameter 'transport=%s' [ 89.717627][ T6113] nvme_fabrics: missing parameter 'nqn=%s' [ 89.756785][ T5884] usb 4-1: USB disconnect, device number 3 [ 89.794460][ T6118] process 'syz.2.44' launched './file0' with NULL argv: empty string added [ 89.842734][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.131256][ T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.337837][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 90.337869][ T30] audit: type=1400 audit(1761650790.212:227): avc: denied { setattr } for pid=6128 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.705932][ T30] audit: type=1400 audit(1761650790.272:228): avc: denied { unlink } for pid=6128 comm="syz.4.48" name="#1" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.729482][ T30] audit: type=1400 audit(1761650790.282:229): avc: denied { mount } for pid=6128 comm="syz.4.48" name="/" dev="overlay" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 90.741001][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 90.762312][ T30] audit: type=1400 audit(1761650790.642:230): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.784089][ T979] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 90.793406][ T979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.823461][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.869001][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.909131][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.942433][ T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.090673][ T6136] kvm_intel: kvm [6135]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 91.182459][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.237751][ T6142] CUSE: unknown device info "" [ 91.242918][ T6142] CUSE: unknown device info "`" [ 91.247905][ T6142] CUSE: unknown device info "" [ 91.252956][ T6142] CUSE: unknown device info "€" [ 91.258064][ T6142] CUSE: DEVNAME unspecified [ 91.562865][ T30] audit: type=1400 audit(1761650791.432:231): avc: denied { create } for pid=6140 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.631739][ T979] usb 2-1: config 0 descriptor?? [ 91.665817][ T6122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.686952][ T30] audit: type=1400 audit(1761650791.462:232): avc: denied { write } for pid=6140 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.867032][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.057707][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.068164][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.226804][ T979] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 92.271956][ T5937] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.495807][ T5862] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 92.505329][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.513519][ T5862] usb 5-1: SerialNumber: syz [ 92.604904][ T979] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.639288][ T979] usb 2-1: USB disconnect, device number 2 [ 92.828408][ T5937] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 92.879028][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.900276][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.919475][ T6153] fido_id[6153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.951589][ T30] audit: type=1400 audit(1761650792.812:233): avc: denied { create } for pid=6155 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.974774][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.025110][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.041359][ T5937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.050537][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.089825][ T5937] usb 4-1: config 0 descriptor?? [ 93.116374][ T6149] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 93.541123][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.627538][ T6161] fuse: Invalid rootmode [ 93.721164][ T30] audit: type=1400 audit(1761650793.512:234): avc: denied { bind } for pid=6158 comm="syz.1.57" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.051162][ T30] audit: type=1400 audit(1761650793.512:235): avc: denied { name_bind } for pid=6158 comm="syz.1.57" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.072322][ T30] audit: type=1400 audit(1761650793.522:236): avc: denied { node_bind } for pid=6158 comm="syz.1.57" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 94.099512][ T6149] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 94.491395][ T5937] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 94.509242][ T5937] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.734492][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.742675][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.844172][ T6172] can: request_module (can-proto-0) failed. [ 95.013936][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 95.101585][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.122070][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.224097][ T5862] usb 5-1: 0:2 : does not exist [ 95.267516][ T5862] usb 5-1: USB disconnect, device number 3 [ 95.338444][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.577492][ T6183] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 95.601823][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 95.608885][ T5135] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.793365][ T5862] usb 4-1: USB disconnect, device number 4 [ 95.836574][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 95.836590][ T30] audit: type=1400 audit(1761650795.712:242): avc: denied { read write } for pid=6185 comm="syz.4.64" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.869631][ T30] audit: type=1400 audit(1761650795.742:243): avc: denied { open } for pid=6185 comm="syz.4.64" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.908435][ T3475] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.940518][ T6183] 9: entered promiscuous mode [ 95.941419][ T30] audit: type=1400 audit(1761650795.742:244): avc: denied { ioctl } for pid=6185 comm="syz.4.64" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.986020][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 96.027154][ T30] audit: type=1400 audit(1761650795.852:245): avc: denied { create } for pid=6188 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.041091][ T6191] netlink: 176 bytes leftover after parsing attributes in process `syz.3.65'. [ 96.113707][ T30] audit: type=1400 audit(1761650795.852:246): avc: denied { append } for pid=6185 comm="syz.4.64" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.149322][ T30] audit: type=1400 audit(1761650795.852:247): avc: denied { getopt } for pid=6188 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.179182][ T30] audit: type=1400 audit(1761650795.852:248): avc: denied { read write } for pid=6188 comm="syz.3.65" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.184223][ T6191] fuse: Bad value for 'fd' [ 96.235248][ T3475] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.281020][ T3475] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.300995][ T30] audit: type=1400 audit(1761650795.852:249): avc: denied { open } for pid=6188 comm="syz.3.65" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 96.367983][ T3475] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.386505][ T30] audit: type=1400 audit(1761650795.862:250): avc: denied { unmount } for pid=6188 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.407949][ T30] audit: type=1400 audit(1761650796.182:251): avc: denied { ioctl } for pid=6199 comm="syz.2.69" path="socket:[9428]" dev="sockfs" ino=9428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.433190][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.762260][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 96.768685][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 97.030311][ T6208] ceph: No mds server is up or the cluster is laggy [ 97.181430][ T5876] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.304221][ T5862] libceph: connect (1)[c::]:6789 error -101 [ 97.312273][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 97.611080][ T5876] usb 2-1: device descriptor read/64, error -71 [ 97.851034][ T5876] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 98.003034][ T5876] usb 2-1: device descriptor read/64, error -71 [ 98.281540][ T5876] usb usb2-port1: attempt power cycle [ 98.641207][ T5876] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 98.671485][ T5876] usb 2-1: device descriptor read/8, error -71 [ 98.938002][ T5876] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 98.972692][ T5876] usb 2-1: device descriptor read/8, error -71 [ 99.211361][ T5876] usb usb2-port1: unable to enumerate USB device [ 101.479940][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.487678][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.557712][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 101.571038][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 101.689475][ T6271] ceph: No mds server is up or the cluster is laggy [ 101.794560][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 101.794575][ T30] audit: type=1400 audit(1761650801.672:263): avc: denied { map } for pid=6276 comm="syz.1.86" path="socket:[10496]" dev="sockfs" ino=10496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 102.376701][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.423646][ T43] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 102.435644][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.611631][ T43] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 102.619830][ T43] usb 2-1: config 0 has no interface number 0 [ 102.630873][ T43] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 102.755126][ T43] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.944834][ T43] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 102.949869][ T6294] 9pnet_fd: Insufficient options for proto=fd [ 102.975928][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.984828][ T43] usb 2-1: Product: syz [ 102.989390][ T43] usb 2-1: Manufacturer: syz [ 102.997515][ T43] usb 2-1: SerialNumber: syz [ 103.037214][ T43] usb 2-1: config 0 descriptor?? [ 103.057427][ T6280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.094084][ T43] usb-storage 2-1:0.20: USB Mass Storage device detected [ 103.135368][ T43] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 103.331031][ T1144] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.348917][ T1144] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.374951][ T1144] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.419468][ T43] scsi host1: usb-storage 2-1:0.20 [ 103.422572][ T1144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.481902][ T43] usb 2-1: USB disconnect, device number 7 [ 104.174052][ T30] audit: type=1400 audit(1761650804.042:264): avc: denied { execute } for pid=6315 comm="syz.0.93" name="file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.575683][ T30] audit: type=1400 audit(1761650804.452:265): avc: denied { create } for pid=6321 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.803121][ T6330] capability: warning: `syz.4.95' uses 32-bit capabilities (legacy support in use) [ 104.827231][ T30] audit: type=1400 audit(1761650804.562:266): avc: denied { connect } for pid=6321 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.870383][ T30] audit: type=1400 audit(1761650804.742:267): avc: denied { create } for pid=6321 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.935794][ T6329] capability: warning: `syz.0.97' uses deprecated v2 capabilities in a way that may be insecure [ 105.128599][ T30] audit: type=1400 audit(1761650804.772:268): avc: denied { ioctl } for pid=6319 comm="syz.0.97" path="socket:[10648]" dev="sockfs" ino=10648 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.375668][ T30] audit: type=1400 audit(1761650804.772:269): avc: denied { override_creds } for pid=6319 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.890984][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.021053][ T5945] usb 2-1: device descriptor read/64, error -71 [ 106.247954][ T6352] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 106.700949][ T30] audit: type=1400 audit(1761650806.122:270): avc: denied { read append } for pid=6343 comm="syz.2.101" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 106.883052][ T5945] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.966611][ T30] audit: type=1400 audit(1761650806.122:271): avc: denied { open } for pid=6343 comm="syz.2.101" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 107.051947][ T30] audit: type=1400 audit(1761650806.642:272): avc: denied { read write } for pid=6353 comm="syz.2.102" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.076675][ T30] audit: type=1400 audit(1761650806.642:273): avc: denied { open } for pid=6353 comm="syz.2.102" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.376562][ T30] audit: type=1400 audit(1761650806.642:274): avc: denied { append } for pid=6353 comm="syz.2.102" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.401651][ T5945] usb 2-1: device descriptor read/64, error -71 [ 107.443102][ T30] audit: type=1400 audit(1761650806.642:275): avc: denied { ioctl } for pid=6353 comm="syz.2.102" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 107.495117][ T30] audit: type=1400 audit(1761650806.882:276): avc: denied { read } for pid=6358 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.516019][ T30] audit: type=1326 audit(1761650807.242:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6362 comm="syz.2.104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f396938efc9 code=0x0 [ 107.541653][ T5945] usb usb2-port1: attempt power cycle [ 107.891075][ T5945] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 107.985638][ T5945] usb 2-1: device descriptor read/8, error -71 [ 108.086722][ T30] audit: type=1400 audit(1761650807.962:278): avc: denied { execute_no_trans } for pid=6366 comm="syz.4.105" path="/23/file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.147660][ T30] audit: type=1400 audit(1761650807.992:279): avc: denied { remount } for pid=6366 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.001828][ T5945] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 109.051318][ T5945] usb 2-1: device descriptor read/8, error -71 [ 109.144765][ T30] audit: type=1400 audit(1761650809.022:280): avc: denied { read } for pid=6387 comm="syz.3.110" path="socket:[10722]" dev="sockfs" ino=10722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.196098][ T5945] usb usb2-port1: unable to enumerate USB device [ 109.269203][ T6393] FAULT_INJECTION: forcing a failure. [ 109.269203][ T6393] name failslab, interval 1, probability 0, space 0, times 1 [ 109.282026][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 109.282051][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.282063][ T6393] Call Trace: [ 109.282069][ T6393] [ 109.282077][ T6393] dump_stack_lvl+0x16c/0x1f0 [ 109.282110][ T6393] should_fail_ex+0x512/0x640 [ 109.282137][ T6393] should_failslab+0xc2/0x120 [ 109.282161][ T6393] kmem_cache_alloc_noprof+0x75/0x6e0 [ 109.282191][ T6393] ? dst_alloc+0x99/0x1a0 [ 109.282219][ T6393] ? __pfx_ip6_dst_gc+0x10/0x10 [ 109.282244][ T6393] ? dst_alloc+0x99/0x1a0 [ 109.282264][ T6393] dst_alloc+0x99/0x1a0 [ 109.282290][ T6393] ip6_pol_route+0x96b/0x1230 [ 109.282317][ T6393] ? __pfx_ip6_pol_route+0x10/0x10 [ 109.282339][ T6393] ? widen_string+0xdc/0x2d0 [ 109.282360][ T6393] ? kernel_text_address+0x8d/0x100 [ 109.282384][ T6393] ? __pfx_widen_string+0x10/0x10 [ 109.282404][ T6393] ? unwind_get_return_address+0x59/0xa0 [ 109.282440][ T6393] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 109.282463][ T6393] fib6_rule_lookup+0x24c/0x720 [ 109.282489][ T6393] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 109.282508][ T6393] ? put_dec_trunc8+0x28b/0x370 [ 109.282543][ T6393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.282574][ T6393] ip6_route_output_flags+0x1d0/0x640 [ 109.282598][ T6393] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 109.282635][ T6393] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 109.282663][ T6393] ? __pfx_vsnprintf+0x10/0x10 [ 109.282693][ T6393] ? __lock_acquire+0x622/0x1c90 [ 109.282727][ T6393] ? snprintf+0xc7/0x100 [ 109.282752][ T6393] ? __pfx_snprintf+0x10/0x10 [ 109.282782][ T6393] ip6_dst_lookup_flow+0x99/0x1d0 [ 109.282806][ T6393] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 109.282828][ T6393] ? find_held_lock+0x2b/0x80 [ 109.282853][ T6393] ? rawv6_sendmsg+0xb68/0x4860 [ 109.282878][ T6393] rawv6_sendmsg+0xe86/0x4860 [ 109.282912][ T6393] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 109.282932][ T6393] ? avc_has_perm_noaudit+0x149/0x3b0 [ 109.282964][ T6393] ? avc_has_perm+0x144/0x1f0 [ 109.282991][ T6393] ? __pfx_avc_has_perm+0x10/0x10 [ 109.283047][ T6393] ? __import_iovec+0x1dd/0x650 [ 109.283073][ T6393] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 109.283096][ T6393] ? inet_sendmsg+0x11c/0x140 [ 109.283117][ T6393] inet_sendmsg+0x11c/0x140 [ 109.283141][ T6393] ____sys_sendmsg+0x973/0xc70 [ 109.283173][ T6393] ? copy_msghdr_from_user+0x10a/0x160 [ 109.283198][ T6393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.283244][ T6393] ___sys_sendmsg+0x134/0x1d0 [ 109.283272][ T6393] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.283295][ T6393] ? __lock_acquire+0x622/0x1c90 [ 109.283365][ T6393] __sys_sendmsg+0x16d/0x220 [ 109.283391][ T6393] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.283439][ T6393] do_syscall_64+0xcd/0xfa0 [ 109.283470][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.283490][ T6393] RIP: 0033:0x7f3baed8efc9 [ 109.283506][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.283524][ T6393] RSP: 002b:00007f3bafbba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.283543][ T6393] RAX: ffffffffffffffda RBX: 00007f3baefe5fa0 RCX: 00007f3baed8efc9 [ 109.283557][ T6393] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.283569][ T6393] RBP: 00007f3bafbba090 R08: 0000000000000000 R09: 0000000000000000 [ 109.283581][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.283593][ T6393] R13: 00007f3baefe6038 R14: 00007f3baefe5fa0 R15: 00007ffef67014a8 [ 109.283623][ T6393] [ 109.971092][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.130976][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 110.138026][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.156037][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.203779][ T5945] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 110.233561][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.276960][ T5945] usb 3-1: config 0 descriptor?? [ 110.317185][ T5945] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 112.247455][ T30] audit: type=1400 audit(1761650812.102:281): avc: denied { kexec_image_load } for pid=6394 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 112.561737][ T6267] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.048016][ T30] audit: type=1326 audit(1761650812.552:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.053766][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.133006][ T30] audit: type=1326 audit(1761650812.552:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.159713][ T6267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.170560][ T6267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.183211][ T30] audit: type=1326 audit(1761650812.552:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.183687][ T6267] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.206653][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.232203][ T30] audit: type=1326 audit(1761650812.562:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.336341][ T6267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.351524][ T30] audit: type=1326 audit(1761650812.562:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.378053][ T6267] usb 4-1: config 0 descriptor?? [ 113.401246][ T5812] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.446509][ T30] audit: type=1326 audit(1761650812.562:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.498659][ T30] audit: type=1326 audit(1761650812.562:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.641861][ T5812] usb 2-1: device descriptor read/64, error -71 [ 113.648839][ T30] audit: type=1326 audit(1761650812.562:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.673452][ T30] audit: type=1326 audit(1761650812.562:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6424 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 113.726960][ T43] usb 3-1: USB disconnect, device number 3 [ 113.890940][ T6267] usbhid 4-1:0.0: can't add hid device: -71 [ 114.221045][ T6267] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.259643][ T6267] usb 4-1: USB disconnect, device number 5 [ 114.331351][ T5812] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 114.425983][ T43] libceph: connect (1)[c::]:6789 error -101 [ 114.432385][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 114.471646][ T5812] usb 2-1: device descriptor read/64, error -71 [ 114.532025][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.558835][ T6440] ceph: No mds server is up or the cluster is laggy [ 114.621927][ T5812] usb usb2-port1: attempt power cycle [ 114.713914][ T43] libceph: connect (1)[c::]:6789 error -101 [ 114.724519][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 114.743909][ T5945] usb 5-1: config 143 contains an unexpected descriptor of type 0x2, skipping [ 114.753032][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 114.759210][ T5945] usb 5-1: config 143 has an invalid descriptor of length 0, skipping remainder of the config [ 114.769754][ T5945] usb 5-1: config 143 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 114.969498][ T5945] usb 5-1: config 143 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.999845][ T6447] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.124'. [ 115.012463][ T5812] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 115.023144][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.124'. [ 115.052945][ T5812] usb 2-1: device descriptor read/8, error -71 [ 115.060028][ T5945] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 115.080504][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.095790][ T5945] usb 5-1: Product: syz [ 115.100698][ T5945] usb 5-1: Manufacturer: syz [ 115.107673][ T5945] usb 5-1: SerialNumber: syz [ 115.373640][ T5812] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.405140][ T5812] usb 2-1: device descriptor read/8, error -71 [ 115.522097][ T5812] usb usb2-port1: unable to enumerate USB device [ 116.677896][ T5945] gs_usb 5-1:143.0: Required endpoints not found [ 116.708858][ T5945] usb 5-1: USB disconnect, device number 4 [ 116.761047][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.274825][ T6493] FAULT_INJECTION: forcing a failure. [ 117.274825][ T6493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.288180][ T6493] CPU: 1 UID: 0 PID: 6493 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 117.288211][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.288223][ T6493] Call Trace: [ 117.288230][ T6493] [ 117.288238][ T6493] dump_stack_lvl+0x16c/0x1f0 [ 117.288272][ T6493] should_fail_ex+0x512/0x640 [ 117.288300][ T6493] strncpy_from_user+0x3b/0x2e0 [ 117.288326][ T6493] __do_sys_add_key+0xce/0x470 [ 117.288356][ T6493] ? __pfx___do_sys_add_key+0x10/0x10 [ 117.288388][ T6493] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 117.288433][ T6493] do_syscall_64+0xcd/0xfa0 [ 117.288464][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.288485][ T6493] RIP: 0033:0x7f9a3158efc9 [ 117.288501][ T6493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.288519][ T6493] RSP: 002b:00007f9a2f7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 117.288538][ T6493] RAX: ffffffffffffffda RBX: 00007f9a317e6180 RCX: 00007f9a3158efc9 [ 117.288551][ T6493] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000000 [ 117.288564][ T6493] RBP: 00007f9a2f7f6090 R08: fffffffffffffff9 R09: 0000000000000000 [ 117.288576][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.288588][ T6493] R13: 00007f9a317e6218 R14: 00007f9a317e6180 R15: 00007fff85fcbbd8 [ 117.288618][ T6493] [ 117.429920][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.437134][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 117.437146][ T30] audit: type=1400 audit(1761650817.142:323): avc: denied { write } for pid=6489 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.468056][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 117.480695][ T30] audit: type=1400 audit(1761650817.362:324): avc: denied { ioctl } for pid=6478 comm="syz.2.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.482972][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.505422][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.523238][ T9] usb 3-1: config 0 has no interface number 0 [ 117.529760][ T9] usb 3-1: too many endpoints for config 0 interface 1 altsetting 130: 172, using maximum allowed: 30 [ 117.554603][ T9] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 117.569880][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 117.613467][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 117.737216][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.141270][ T9] usb 3-1: Product: syz [ 118.171645][ T9] usb 3-1: Manufacturer: syz [ 118.196575][ T9] usb 3-1: SerialNumber: syz [ 118.217563][ T9] usb 3-1: config 0 descriptor?? [ 118.365657][ T30] audit: type=1400 audit(1761650818.242:325): avc: denied { read write } for pid=6501 comm="syz.1.139" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.389008][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.395483][ T30] audit: type=1400 audit(1761650818.242:326): avc: denied { open } for pid=6501 comm="syz.1.139" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.512249][ T30] audit: type=1400 audit(1761650818.392:327): avc: denied { ioctl } for pid=6503 comm="syz.3.140" path="socket:[9934]" dev="sockfs" ino=9934 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.605276][ T5812] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.633640][ T9] usb 3-1: selecting invalid altsetting 2 [ 118.665094][ T9] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 118.709203][ T9] usb 3-1: USB disconnect, device number 4 [ 118.784335][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 118.801806][ T5812] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 118.818230][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.840963][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.845328][ T30] audit: type=1400 audit(1761650818.652:328): avc: denied { accept } for pid=6509 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.874727][ T5812] usb 2-1: config 0 has no interface number 0 [ 118.890612][ T5812] usb 2-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.913502][ T5812] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 118.926386][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.949623][ T5812] usb 2-1: config 0 descriptor?? [ 118.991812][ T6516] 9pnet_fd: p9_fd_create_tcp (6516): problem connecting socket to 127.0.0.1 [ 119.006790][ T6516] 9pnet_fd: p9_fd_create_tcp (6516): problem connecting socket to 127.0.0.1 [ 119.021841][ T6516] 9pnet_fd: p9_fd_create_tcp (6516): problem connecting socket to 127.0.0.1 [ 119.040357][ T6516] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.101631][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 119.115380][ T43] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 119.125427][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.144'. [ 119.131426][ T6517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.137939][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.182885][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 119.192386][ T30] audit: type=1400 audit(1761650819.052:329): avc: denied { connect } for pid=6518 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.224398][ T5812] usb 2-1: USB disconnect, device number 16 [ 119.255174][ T43] usb 4-1: Product: syz [ 119.260114][ T43] usb 4-1: Manufacturer: syz [ 119.265118][ T43] usb 4-1: SerialNumber: syz [ 119.267703][ T30] audit: type=1400 audit(1761650819.062:330): avc: denied { write } for pid=6518 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.579045][ T6524] bridge0: entered allmulticast mode [ 119.625977][ T30] audit: type=1400 audit(1761650819.442:331): avc: denied { mount } for pid=6521 comm="syz.2.145" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 119.948156][ T6506] syz.3.140 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.953272][ T43] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 119.974728][ T43] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 120.044451][ T30] audit: type=1400 audit(1761650819.442:332): avc: denied { search } for pid=6521 comm="syz.2.145" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.423930][ T6560] netlink: 104 bytes leftover after parsing attributes in process `syz.0.157'. [ 121.513918][ T6285] usb 4-1: USB disconnect, device number 6 [ 122.021796][ T43] libceph: connect (1)[c::]:6789 error -101 [ 122.027881][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 122.127225][ T6578] ceph: No mds server is up or the cluster is laggy [ 122.241551][ T5945] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.627035][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 122.627052][ T30] audit: type=1400 audit(1761650822.502:342): avc: denied { create } for pid=6581 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.692882][ T6586] 9pnet_virtio: no channels available for device syz [ 122.720624][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 122.872945][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.887808][ T5945] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.898847][ T5945] usb 4-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 122.921512][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.932699][ T6590] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.989631][ T5945] usb 4-1: config 0 descriptor?? [ 123.287730][ T5945] usb 4-1: USB disconnect, device number 7 [ 124.153306][ T6625] sctp: [Deprecated]: syz.1.171 (pid 6625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.153306][ T6625] Use struct sctp_sack_info instead [ 124.340993][ T5945] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.433963][ T30] audit: type=1400 audit(1761650824.312:343): avc: denied { getopt } for pid=6611 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.543569][ T30] audit: type=1400 audit(1761650824.422:344): avc: denied { map } for pid=6636 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.821070][ T30] audit: type=1400 audit(1761650825.692:345): avc: denied { ioctl } for pid=6636 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.870246][ T6284] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.892116][ T30] audit: type=1400 audit(1761650825.762:346): avc: denied { execute } for pid=6636 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.920650][ T30] audit: type=1400 audit(1761650825.762:347): avc: denied { cmd } for pid=6636 comm="syz.3.177" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 126.229122][ T6284] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.289091][ T6284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.215284][ T6284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.240956][ T6284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.357911][ T6655] FAULT_INJECTION: forcing a failure. [ 127.357911][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 127.370627][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 127.370651][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.370660][ T6655] Call Trace: [ 127.370665][ T6655] [ 127.370671][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 127.370700][ T6655] should_fail_ex+0x512/0x640 [ 127.370721][ T6655] ? __kmalloc_cache_noprof+0x5f/0x780 [ 127.370750][ T6655] should_failslab+0xc2/0x120 [ 127.370770][ T6655] __kmalloc_cache_noprof+0x72/0x780 [ 127.370793][ T6655] ? rtnl_newlink+0x11b/0x2000 [ 127.370819][ T6655] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.370838][ T6655] ? rtnl_newlink+0x11b/0x2000 [ 127.370862][ T6655] rtnl_newlink+0x11b/0x2000 [ 127.370896][ T6655] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.370918][ T6655] ? find_held_lock+0x2b/0x80 [ 127.370941][ T6655] ? avc_has_perm_noaudit+0x117/0x3b0 [ 127.370968][ T6655] ? avc_has_perm_noaudit+0x149/0x3b0 [ 127.370998][ T6655] ? __lock_acquire+0x622/0x1c90 [ 127.371036][ T6655] ? find_held_lock+0x2b/0x80 [ 127.371056][ T6655] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.371078][ T6655] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.371099][ T6655] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 127.371121][ T6655] ? __pfx_rtnl_newlink+0x10/0x10 [ 127.371144][ T6655] rtnetlink_rcv_msg+0x95e/0xe90 [ 127.371171][ T6655] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.371194][ T6655] ? __lock_acquire+0xb8a/0x1c90 [ 127.371229][ T6655] netlink_rcv_skb+0x158/0x420 [ 127.371255][ T6655] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.371281][ T6655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.371306][ T6655] ? rcu_is_watching+0x12/0xc0 [ 127.371356][ T6655] netlink_unicast+0x5aa/0x870 [ 127.371386][ T6655] ? __pfx_netlink_unicast+0x10/0x10 [ 127.371408][ T6655] ? netlink_autobind.isra.0+0xa8/0x370 [ 127.371441][ T6655] netlink_sendmsg+0x8c8/0xdd0 [ 127.371471][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.371508][ T6655] ____sys_sendmsg+0xa98/0xc70 [ 127.371537][ T6655] ? copy_msghdr_from_user+0x10a/0x160 [ 127.371558][ T6655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.371576][ T6655] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.371597][ T6655] ___sys_sendmsg+0x134/0x1d0 [ 127.371611][ T6655] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.371624][ T6655] ? __lock_acquire+0x622/0x1c90 [ 127.371658][ T6655] __sys_sendmsg+0x16d/0x220 [ 127.371672][ T6655] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.371695][ T6655] do_syscall_64+0xcd/0xfa0 [ 127.371712][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.371724][ T6655] RIP: 0033:0x7f3baed8efc9 [ 127.371733][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.371746][ T6655] RSP: 002b:00007f3bafb99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.371757][ T6655] RAX: ffffffffffffffda RBX: 00007f3baefe6090 RCX: 00007f3baed8efc9 [ 127.371764][ T6655] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 127.371771][ T6655] RBP: 00007f3bafb99090 R08: 0000000000000000 R09: 0000000000000000 [ 127.371777][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.371784][ T6655] R13: 00007f3baefe6128 R14: 00007f3baefe6090 R15: 00007ffef67014a8 [ 127.371799][ T6655] [ 127.923828][ T6284] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.932923][ T6284] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.940935][ T6284] usb 5-1: Product: syz [ 127.945086][ T6284] usb 5-1: Manufacturer: syz [ 128.051390][ T6284] usb 5-1: can't set config #1, error -71 [ 128.058582][ T6284] usb 5-1: USB disconnect, device number 5 [ 128.653314][ T30] audit: type=1400 audit(1761650828.522:348): avc: denied { ioctl } for pid=6661 comm="syz.4.182" path="socket:[10169]" dev="sockfs" ino=10169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.681995][ T6662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.746780][ T6657] nvme_fabrics: missing parameter 'transport=%s' [ 128.753211][ T6657] nvme_fabrics: missing parameter 'nqn=%s' [ 128.762794][ T6667] netlink: 25 bytes leftover after parsing attributes in process `syz.0.184'. [ 128.770455][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 128.781051][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.882986][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.000287][ T6671] FAULT_INJECTION: forcing a failure. [ 129.000287][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.015883][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 129.015910][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.015922][ T6671] Call Trace: [ 129.015929][ T6671] [ 129.015936][ T6671] dump_stack_lvl+0x16c/0x1f0 [ 129.015970][ T6671] should_fail_ex+0x512/0x640 [ 129.015998][ T6671] _copy_to_user+0x32/0xd0 [ 129.016025][ T6671] simple_read_from_buffer+0xcb/0x170 [ 129.016058][ T6671] proc_fail_nth_read+0x197/0x240 [ 129.016083][ T6671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.016109][ T6671] ? rw_verify_area+0xcf/0x6c0 [ 129.016137][ T6671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.016161][ T6671] vfs_read+0x1e4/0xcf0 [ 129.016184][ T6671] ? __pfx___mutex_lock+0x10/0x10 [ 129.016208][ T6671] ? __pfx_vfs_read+0x10/0x10 [ 129.016235][ T6671] ? __fget_files+0x20e/0x3c0 [ 129.016265][ T6671] ksys_read+0x12a/0x250 [ 129.016283][ T6671] ? __pfx_ksys_read+0x10/0x10 [ 129.016311][ T6671] do_syscall_64+0xcd/0xfa0 [ 129.016342][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.016363][ T6671] RIP: 0033:0x7f3baed8d9dc [ 129.016380][ T6671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.016398][ T6671] RSP: 002b:00007f3bafb99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.016417][ T6671] RAX: ffffffffffffffda RBX: 00007f3baefe6090 RCX: 00007f3baed8d9dc [ 129.016430][ T6671] RDX: 000000000000000f RSI: 00007f3bafb990a0 RDI: 0000000000000009 [ 129.016442][ T6671] RBP: 00007f3bafb99090 R08: 0000000000000000 R09: 0000000000000000 [ 129.016454][ T6671] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 129.016467][ T6671] R13: 00007f3baefe6128 R14: 00007f3baefe6090 R15: 00007ffef67014a8 [ 129.016498][ T6671] [ 129.363296][ T6285] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.711910][ T6676] trusted_key: syz.3.185 sent an empty control message without MSG_MORE. [ 129.836526][ T6285] usb 2-1: Using ep0 maxpacket: 16 [ 129.859822][ T6285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.259064][ T6285] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.277780][ T6285] usb 2-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 130.296556][ T6679] FAULT_INJECTION: forcing a failure. [ 130.296556][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 130.306520][ T6285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.316778][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 130.316804][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.316815][ T6679] Call Trace: [ 130.316822][ T6679] [ 130.316829][ T6679] dump_stack_lvl+0x16c/0x1f0 [ 130.316866][ T6679] should_fail_ex+0x512/0x640 [ 130.316888][ T6679] ? __kmalloc_cache_noprof+0x5f/0x780 [ 130.316918][ T6679] should_failslab+0xc2/0x120 [ 130.316940][ T6679] __kmalloc_cache_noprof+0x72/0x780 [ 130.316966][ T6679] ? netlbl_cipsov4_add+0x378/0x2440 [ 130.317001][ T6679] ? netlbl_cipsov4_add+0x378/0x2440 [ 130.317029][ T6679] netlbl_cipsov4_add+0x378/0x2440 [ 130.317060][ T6679] ? __nla_parse+0x40/0x60 [ 130.317085][ T6679] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 130.317115][ T6679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 130.317147][ T6679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 130.317183][ T6679] genl_family_rcv_msg_doit+0x209/0x2f0 [ 130.317214][ T6679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 130.317254][ T6679] ? bpf_lsm_capable+0x9/0x10 [ 130.317275][ T6679] ? security_capable+0x7e/0x260 [ 130.317309][ T6679] genl_rcv_msg+0x55c/0x800 [ 130.317331][ T6679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.317350][ T6679] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 130.317380][ T6679] ? __lock_acquire+0x622/0x1c90 [ 130.317411][ T6679] netlink_rcv_skb+0x158/0x420 [ 130.317436][ T6679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.317454][ T6679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.317489][ T6679] ? netlink_deliver_tap+0x1ae/0xd30 [ 130.317515][ T6679] genl_rcv+0x28/0x40 [ 130.317540][ T6679] netlink_unicast+0x5aa/0x870 [ 130.317570][ T6679] ? __pfx_netlink_unicast+0x10/0x10 [ 130.317608][ T6679] netlink_sendmsg+0x8c8/0xdd0 [ 130.317638][ T6679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.317675][ T6679] ____sys_sendmsg+0xa98/0xc70 [ 130.317706][ T6679] ? copy_msghdr_from_user+0x10a/0x160 [ 130.317730][ T6679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.317773][ T6679] ___sys_sendmsg+0x134/0x1d0 [ 130.317799][ T6679] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.317820][ T6679] ? __lock_acquire+0x622/0x1c90 [ 130.317890][ T6679] __sys_sendmsg+0x16d/0x220 [ 130.317915][ T6679] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.317958][ T6679] do_syscall_64+0xcd/0xfa0 [ 130.317987][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.318007][ T6679] RIP: 0033:0x7f396938efc9 [ 130.318023][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.318041][ T6679] RSP: 002b:00007f396a15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.318059][ T6679] RAX: ffffffffffffffda RBX: 00007f39695e5fa0 RCX: 00007f396938efc9 [ 130.318071][ T6679] RDX: 0000000000000012 RSI: 0000200000000140 RDI: 0000000000000004 [ 130.318083][ T6679] RBP: 00007f396a15a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.318094][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.318105][ T6679] R13: 00007f39695e6038 R14: 00007f39695e5fa0 R15: 00007ffc4793cf98 [ 130.318133][ T6679] [ 130.623110][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.713583][ T6285] usb 2-1: config 0 descriptor?? [ 130.792282][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 130.802272][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 130.929160][ T6687] evm: overlay not supported [ 131.269117][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 131.280032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.281623][ T24] usb 2-1: USB disconnect, device number 17 [ 131.288427][ T9] usb 1-1: Product: syz [ 131.299805][ T9] usb 1-1: Manufacturer: syz [ 131.305652][ T9] usb 1-1: SerialNumber: syz [ 131.312056][ T9] usb 1-1: config 0 descriptor?? [ 131.318601][ T6675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.326176][ T6675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.333450][ T6285] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.492364][ T6285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.502550][ T6285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.511518][ T6285] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.520585][ T6285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.536099][ T6285] usb 5-1: config 0 descriptor?? [ 131.543204][ T6675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.546949][ T6285] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.555119][ T6675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 131.560517][ T6285] dvb-usb: bulk message failed: -22 (3/0) [ 131.575106][ T6285] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.584739][ T6285] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.592696][ T6285] usb 5-1: media controller created [ 131.599370][ T6285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.623276][ T6285] dvb-usb: bulk message failed: -22 (6/0) [ 131.629795][ T6285] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.638947][ T6285] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 131.653649][ T6285] dvb-usb: schedule remote query interval to 150 msecs. [ 131.661116][ T6285] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.737116][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 131.744303][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 131.757282][ T30] audit: type=1400 audit(1761650831.632:349): avc: denied { create } for pid=6685 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.828481][ T6284] dvb-usb: bulk message failed: -22 (1/0) [ 131.857070][ T6284] dvb-usb: error while querying for an remote control event. [ 131.863167][ T6696] xt_socket: unknown flags 0x4 [ 131.872508][ T6692] ceph: No mds server is up or the cluster is laggy [ 132.013477][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 132.013684][ T9] Error reading MAC address [ 132.046622][ T6284] dvb-usb: bulk message failed: -22 (1/0) [ 132.060157][ T6284] dvb-usb: error while querying for an remote control event. [ 132.221123][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 132.286926][ T30] audit: type=1400 audit(1761650832.162:350): avc: denied { setopt } for pid=6685 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.415521][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 132.428900][ T9] dvb-usb: error while querying for an remote control event. [ 132.517172][ T6703] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 132.915228][ T30] audit: type=1400 audit(1761650832.412:351): avc: denied { listen } for pid=6700 comm="syz.1.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.934785][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949375][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.962272][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 132.964117][ T24] usb 1-1: USB disconnect, device number 3 [ 132.969124][ T9] dvb-usb: error while querying for an remote control event. [ 133.008466][ T30] audit: type=1400 audit(1761650832.412:352): avc: denied { ioctl } for pid=6700 comm="syz.1.192" path="socket:[11248]" dev="sockfs" ino=11248 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.112917][ T9] usb 5-1: USB disconnect, device number 6 [ 133.235426][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 133.452458][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 134.245483][ T6720] FAULT_INJECTION: forcing a failure. [ 134.245483][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.291028][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT(full) [ 134.291054][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.291064][ T6720] Call Trace: [ 134.291070][ T6720] [ 134.291076][ T6720] dump_stack_lvl+0x16c/0x1f0 [ 134.291110][ T6720] should_fail_ex+0x512/0x640 [ 134.291137][ T6720] _copy_from_user+0x2e/0xd0 [ 134.291163][ T6720] copy_msghdr_from_user+0x98/0x160 [ 134.291190][ T6720] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 134.291230][ T6720] ___sys_sendmsg+0xfe/0x1d0 [ 134.291256][ T6720] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.291279][ T6720] ? __lock_acquire+0x622/0x1c90 [ 134.291345][ T6720] __sys_sendmsg+0x16d/0x220 [ 134.291371][ T6720] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.291416][ T6720] do_syscall_64+0xcd/0xfa0 [ 134.291446][ T6720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.291466][ T6720] RIP: 0033:0x7f396938efc9 [ 134.291482][ T6720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.291500][ T6720] RSP: 002b:00007f396a15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.291519][ T6720] RAX: ffffffffffffffda RBX: 00007f39695e5fa0 RCX: 00007f396938efc9 [ 134.291533][ T6720] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 134.291545][ T6720] RBP: 00007f396a15a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.291557][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.291568][ T6720] R13: 00007f39695e6038 R14: 00007f39695e5fa0 R15: 00007ffc4793cf98 [ 134.291596][ T6720] [ 134.492290][ T30] audit: type=1400 audit(1761650834.372:353): avc: denied { create } for pid=6721 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.786576][ T30] audit: type=1400 audit(1761650834.392:354): avc: denied { connect } for pid=6721 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.261890][ T6735] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 135.276016][ T30] audit: type=1400 audit(1761650835.152:355): avc: denied { mounton } for pid=6736 comm="syz.1.203" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 135.283080][ T6738] SQUASHFS error: Failed to read block 0x0: -5 [ 135.283153][ T6738] unable to read squashfs_super_block [ 135.350547][ T6735] bond2: entered promiscuous mode [ 135.350774][ T6735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.780396][ T6739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.781044][ T6739] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 135.781067][ T6739] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 135.783735][ T6739] bond2: (slave vcan1): making interface the new active one [ 135.783759][ T6739] vcan1: entered promiscuous mode [ 135.801141][ T6739] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 136.356396][ T6757] overlayfs: failed lookup in lower (newroot/40, name='bus', err=-40): overlapping layers [ 136.639514][ T6761] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 137.151152][ T6772] warning: `syz.0.207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.524844][ T30] audit: type=1400 audit(1761650837.402:356): avc: denied { append } for pid=6775 comm="syz.3.209" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.670124][ T30] audit: type=1400 audit(1761650837.462:357): avc: denied { block_suspend } for pid=6768 comm="syz.4.208" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.707611][ T6776] loop6: detected capacity change from 0 to 524287999 [ 137.834637][ T5808] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 137.940256][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 137.961185][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 137.993502][ T5945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.171649][ T5945] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 138.196950][ T5945] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 138.239856][ T5945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.374575][ T30] audit: type=1400 audit(1761650838.242:358): avc: denied { append } for pid=6794 comm="syz.2.214" name="sg0" dev="devtmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.173503][ T5945] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 139.182645][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 139.190819][ T5945] usb 4-1: Product: syz [ 139.195849][ T30] audit: type=1400 audit(1761650838.242:359): avc: denied { ioctl } for pid=6794 comm="syz.2.214" path="/dev/sg0" dev="devtmpfs" ino=786 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.229021][ T5945] usb 4-1: Manufacturer: syz [ 139.245912][ T5945] usb 4-1: SerialNumber: syz [ 139.282020][ T5945] usb 4-1: config 0 descriptor?? [ 139.307733][ T5945] hub 4-1:0.0: bad descriptor, ignoring hub [ 139.326516][ T30] audit: type=1400 audit(1761650839.142:360): avc: denied { ioctl } for pid=6801 comm="syz.0.215" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.355354][ T5945] hub 4-1:0.0: probe with driver hub failed with error -5 [ 139.397243][ T5945] usb 4-1: selecting invalid altsetting 0 [ 139.548040][ T5945] usb 4-1: USB disconnect, device number 9 [ 139.679510][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.708534][ T6811] FAULT_INJECTION: forcing a failure. [ 139.708534][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.800561][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.2.218 Not tainted syzkaller #0 PREEMPT(full) [ 139.800588][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.800600][ T6811] Call Trace: [ 139.800607][ T6811] [ 139.800614][ T6811] dump_stack_lvl+0x16c/0x1f0 [ 139.800649][ T6811] should_fail_ex+0x512/0x640 [ 139.800676][ T6811] _copy_to_user+0x32/0xd0 [ 139.800702][ T6811] simple_read_from_buffer+0xcb/0x170 [ 139.800733][ T6811] proc_fail_nth_read+0x197/0x240 [ 139.800759][ T6811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.800784][ T6811] ? rw_verify_area+0xcf/0x6c0 [ 139.800810][ T6811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.800831][ T6811] vfs_read+0x1e4/0xcf0 [ 139.800853][ T6811] ? __pfx___mutex_lock+0x10/0x10 [ 139.800871][ T6811] ? __pfx_vfs_read+0x10/0x10 [ 139.800896][ T6811] ? __fget_files+0x20e/0x3c0 [ 139.800921][ T6811] ksys_read+0x12a/0x250 [ 139.800936][ T6811] ? __pfx_ksys_read+0x10/0x10 [ 139.800952][ T6811] ? fput+0x9b/0xd0 [ 139.800978][ T6811] do_syscall_64+0xcd/0xfa0 [ 139.801007][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.801027][ T6811] RIP: 0033:0x7f396938d9dc [ 139.801044][ T6811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.801062][ T6811] RSP: 002b:00007f396a15a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.801081][ T6811] RAX: ffffffffffffffda RBX: 00007f39695e5fa0 RCX: 00007f396938d9dc [ 139.801094][ T6811] RDX: 000000000000000f RSI: 00007f396a15a0a0 RDI: 0000000000000004 [ 139.801106][ T6811] RBP: 00007f396a15a090 R08: 0000000000000000 R09: 0000000000000000 [ 139.801117][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.801129][ T6811] R13: 00007f39695e6038 R14: 00007f39695e5fa0 R15: 00007ffc4793cf98 [ 139.801166][ T6811] [ 140.031002][ T6267] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.191252][ T6267] usb 1-1: Using ep0 maxpacket: 8 [ 140.215162][ T6267] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.223860][ T6267] usb 1-1: config 0 has no interface number 0 [ 140.254100][ T6267] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.327435][ T6267] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.680959][ T6267] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.699222][ T6267] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.748564][ T6267] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.790984][ T6267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.811910][ T6267] usb 1-1: config 0 descriptor?? [ 140.863007][ T6267] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 141.111022][ T6285] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.247009][ T30] audit: type=1400 audit(1761650841.112:361): avc: denied { setopt } for pid=6812 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.298466][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 144.701124][ T30] audit: type=1400 audit(1761650841.162:362): avc: denied { bind } for pid=6812 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.781003][ T30] audit: type=1400 audit(1761650841.192:363): avc: denied { ioctl } for pid=6812 comm="syz.0.219" path="socket:[11512]" dev="sockfs" ino=11512 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.193529][ T30] audit: type=1400 audit(1761650845.072:364): avc: denied { append } for pid=6826 comm="syz.2.222" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 145.226173][ T6285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 145.240968][ T6285] usb 3-1: can't read configurations, error -61 [ 145.261452][ T9] usb 1-1: USB disconnect, device number 4 [ 145.375457][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 145.493905][ T6845] FAULT_INJECTION: forcing a failure. [ 145.493905][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.507985][ T6845] CPU: 1 UID: 0 PID: 6845 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(full) [ 145.508013][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.508025][ T6845] Call Trace: [ 145.508032][ T6845] [ 145.508039][ T6845] dump_stack_lvl+0x16c/0x1f0 [ 145.508074][ T6845] should_fail_ex+0x512/0x640 [ 145.508101][ T6845] _copy_to_user+0x32/0xd0 [ 145.508128][ T6845] simple_read_from_buffer+0xcb/0x170 [ 145.508161][ T6845] proc_fail_nth_read+0x197/0x240 [ 145.508187][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.508212][ T6845] ? rw_verify_area+0xcf/0x6c0 [ 145.508240][ T6845] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.508264][ T6845] vfs_read+0x1e4/0xcf0 [ 145.508287][ T6845] ? __pfx___mutex_lock+0x10/0x10 [ 145.508306][ T6845] ? __pfx_vfs_read+0x10/0x10 [ 145.508333][ T6845] ? __fget_files+0x20e/0x3c0 [ 145.508363][ T6845] ksys_read+0x12a/0x250 [ 145.508382][ T6845] ? __pfx_ksys_read+0x10/0x10 [ 145.508404][ T6845] ? rcu_is_watching+0x12/0xc0 [ 145.508433][ T6845] do_syscall_64+0xcd/0xfa0 [ 145.508463][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.508484][ T6845] RIP: 0033:0x7ff10f78d9dc [ 145.508500][ T6845] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.508518][ T6845] RSP: 002b:00007ff10d9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.508537][ T6845] RAX: ffffffffffffffda RBX: 00007ff10f9e6180 RCX: 00007ff10f78d9dc [ 145.508551][ T6845] RDX: 000000000000000f RSI: 00007ff10d9d50a0 RDI: 000000000000000a [ 145.508563][ T6845] RBP: 00007ff10d9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.508575][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.508586][ T6845] R13: 00007ff10f9e6218 R14: 00007ff10f9e6180 R15: 00007ffd5564ee28 [ 145.508617][ T6845] [ 145.663119][ T6285] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.820618][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 147.240429][ T30] audit: type=1400 audit(1761650847.112:365): avc: denied { call } for pid=6862 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 147.261209][ T30] audit: type=1400 audit(1761650847.112:366): avc: denied { transfer } for pid=6862 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 147.809026][ T6285] libceph: connect (1)[c::]:6789 error -101 [ 147.816875][ T6285] libceph: mon0 (1)[c::]:6789 connect error [ 147.900644][ T6893] lo: Caught tx_queue_len zero misconfig [ 148.249530][ T6886] ceph: No mds server is up or the cluster is laggy [ 148.301089][ T5945] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.325866][ T30] audit: type=1400 audit(1761650848.182:367): avc: denied { sys_module } for pid=6876 comm="syz.0.237" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.347601][ T6285] libceph: connect (1)[c::]:6789 error -101 [ 148.354942][ T6285] libceph: mon0 (1)[c::]:6789 connect error [ 148.524034][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.545538][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 148.556964][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.613759][ T5945] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 148.627777][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.672335][ T5945] usb 5-1: Product: syz [ 148.702026][ T5945] usb 5-1: Manufacturer: syz [ 148.706793][ T5945] usb 5-1: SerialNumber: syz [ 148.752523][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.789184][ T5945] usb 5-1: config 0 descriptor?? [ 148.811782][ T6890] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.028490][ T5945] powermate: unknown product id 0240 [ 149.033874][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 149.061577][ T5945] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 149.072979][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 149.090466][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.646774][ T5945] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 149.697782][ T24] usb 4-1: config 0 descriptor?? [ 149.719967][ C1] powermate: config urb returned -71 [ 149.725693][ C1] powermate: config urb returned -71 [ 149.731230][ C1] powermate: config urb returned -71 [ 149.736598][ C1] powermate: config urb returned -71 [ 149.746166][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 149.762866][ T5945] usb 5-1: USB disconnect, device number 7 [ 149.762922][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 149.838410][ T30] audit: type=1400 audit(1761650849.712:368): avc: denied { create } for pid=6911 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 149.992895][ T6915] tc_dump_action: action bad kind [ 150.272648][ T24] gspca_sunplus: reg_w_riv err -110 [ 150.279354][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 150.670189][ T6916] ======================================================= [ 150.670189][ T6916] WARNING: The mand mount option has been deprecated and [ 150.670189][ T6916] and is ignored by this kernel. Remove the mand [ 150.670189][ T6916] option from the mount to silence this warning. [ 150.670189][ T6916] ======================================================= [ 150.806278][ T6917] overlayfs: overlapping lowerdir path [ 150.812025][ T30] audit: type=1400 audit(1761650850.682:369): avc: denied { mount } for pid=6898 comm="syz.3.239" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.054314][ T6916] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.080965][ T30] audit: type=1400 audit(1761650850.932:370): avc: denied { mounton } for pid=6898 comm="syz.3.239" path="/48/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 151.153847][ T24] libceph: connect (1)[c::]:6789 error -101 [ 151.161678][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 151.166342][ T30] audit: type=1400 audit(1761650850.982:371): avc: denied { read } for pid=6898 comm="syz.3.239" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 151.192250][ T30] audit: type=1400 audit(1761650850.982:372): avc: denied { open } for pid=6898 comm="syz.3.239" path="/48/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 151.230120][ T6926] ceph: No mds server is up or the cluster is laggy [ 151.241517][ T24] libceph: connect (1)[c::]:6789 error -101 [ 151.271103][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 151.403218][ T30] audit: type=1400 audit(1761650851.282:373): avc: denied { ioctl } for pid=6935 comm="syz.1.247" path="socket:[12629]" dev="sockfs" ino=12629 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.965478][ T6941] CUSE: unknown device info "" [ 151.970539][ T6941] CUSE: unknown device info "`" [ 151.975687][ T6941] CUSE: unknown device info "" [ 151.987518][ T6941] CUSE: unknown device info "€" [ 151.999914][ T6941] CUSE: DEVNAME unspecified [ 152.406805][ T30] audit: type=1400 audit(1761650852.282:374): avc: denied { create } for pid=6942 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.458806][ T24] usb 4-1: USB disconnect, device number 10 [ 152.574610][ T30] audit: type=1400 audit(1761650852.442:375): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 153.032929][ T30] audit: type=1400 audit(1761650852.532:376): avc: denied { write } for pid=6942 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.053150][ T30] audit: type=1400 audit(1761650852.542:377): avc: denied { ioctl } for pid=6942 comm="syz.4.249" path="socket:[11850]" dev="sockfs" ino=11850 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 153.871731][ T5945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.951910][ T6965] program syz.1.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.205152][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.251115][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.271474][ T5945] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.300988][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.338824][ T5945] usb 4-1: SerialNumber: syz [ 154.520990][ T6267] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.587948][ T5945] usb 4-1: 0:2 : does not exist [ 154.614782][ T5945] usb 4-1: USB disconnect, device number 11 [ 154.621094][ T6284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.638758][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.693434][ T6267] usb 1-1: Using ep0 maxpacket: 16 [ 154.700386][ T6267] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 154.710417][ T6267] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.723793][ T6267] usb 1-1: config 0 has no interface number 0 [ 154.729949][ T6267] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 154.742109][ T6267] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 154.753764][ T6267] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 154.764153][ T6267] usb 1-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.777610][ T6267] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 154.788046][ T6267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.792549][ T6284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.808340][ T6267] usb 1-1: config 0 descriptor?? [ 154.818590][ T6973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.821264][ T6284] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.829972][ T6267] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.849717][ T6284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.875632][ T6284] usb 3-1: config 0 descriptor?? [ 154.889369][ T6284] pwc: Askey VC010 type 2 USB webcam detected. [ 154.939624][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.973513][ T6267] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 155.025000][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.035588][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.045118][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.047275][ T6285] usb 1-1: USB disconnect, device number 5 [ 155.054889][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.069814][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.079426][ T6981] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 155.082374][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.096059][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.105961][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.116157][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.127475][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 155.351112][ T6284] pwc: recv_control_msg error -32 req 02 val 2b00 [ 155.491330][ T6284] pwc: recv_control_msg error -32 req 02 val 2700 [ 155.515319][ T6284] pwc: recv_control_msg error -32 req 02 val 2c00 [ 155.561759][ T6284] pwc: recv_control_msg error -32 req 04 val 1000 [ 155.591215][ T6284] pwc: recv_control_msg error -32 req 04 val 1300 [ 155.617680][ T6284] pwc: recv_control_msg error -32 req 04 val 1400 [ 155.631021][ T30] audit: type=1400 audit(1761650855.502:378): avc: denied { mount } for pid=6986 comm="syz.1.265" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.631903][ T6284] pwc: recv_control_msg error -32 req 02 val 2000 [ 156.019992][ T6284] pwc: recv_control_msg error -32 req 02 val 2100 [ 156.039211][ T6284] pwc: recv_control_msg error -32 req 04 val 1500 [ 156.142190][ T6284] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.161339][ T6284] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.170452][ T6284] pwc: recv_control_msg error -71 req 02 val 2600 [ 156.180552][ T6284] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.341757][ T7001] tmpfs: Unknown parameter 'grpquota_inode_hardlimitÞe' [ 156.930029][ T6269] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.955631][ T6284] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.963043][ T6284] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.971776][ T6284] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.076026][ T6285] IPVS: starting estimator thread 0... [ 157.081124][ T6269] usb 5-1: device descriptor read/64, error -71 [ 157.089245][ T6284] pwc: Registered as video103. [ 157.126689][ T7001] netlink: 'syz.1.266': attribute type 2 has an invalid length. [ 157.162935][ T6284] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 157.205514][ T6284] usb 3-1: USB disconnect, device number 7 [ 157.240595][ T7005] IPVS: using max 62 ests per chain, 148800 per kthread [ 157.361131][ T6269] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.648681][ T6269] usb 5-1: device descriptor read/64, error -71 [ 157.675931][ T30] audit: type=1400 audit(1761650857.552:379): avc: denied { create } for pid=7012 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 158.179984][ T6269] usb usb5-port1: attempt power cycle [ 158.531228][ T6269] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.601577][ T6269] usb 5-1: device descriptor read/8, error -71 [ 158.686868][ T7029] CUSE: unknown device info "" [ 158.709352][ T7029] CUSE: unknown device info "`" [ 158.737691][ T7029] CUSE: unknown device info "" [ 158.746669][ T7029] CUSE: unknown device info "€" [ 158.764980][ T7029] CUSE: DEVNAME unspecified [ 158.848377][ T30] audit: type=1400 audit(1761650858.722:380): avc: denied { create } for pid=7035 comm="syz.3.278" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.611246][ T6284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.669091][ T7060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.837331][ T6285] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.848660][ T6284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.869613][ T6284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.880844][ T30] audit: type=1400 audit(1761650860.762:381): avc: denied { setopt } for pid=7061 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 160.910321][ T6284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.924390][ T6284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.971708][ T6284] usb 5-1: Product: syz [ 160.975940][ T6284] usb 5-1: Manufacturer: syz [ 161.022827][ T6285] usb 4-1: device descriptor read/64, error -71 [ 161.056154][ T7067] xt_hashlimit: max too large, truncated to 1048576 [ 161.065123][ T7067] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 161.275611][ T6284] usb 5-1: SerialNumber: syz [ 161.375080][ T30] audit: type=1400 audit(1761650861.252:382): avc: denied { append } for pid=7068 comm="syz.0.288" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.399454][ T7069] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 161.422567][ T7069] cramfs: wrong magic [ 161.531574][ T6285] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.539215][ T30] audit: type=1400 audit(1761650861.402:383): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 161.705906][ T6285] usb 4-1: device descriptor read/64, error -71 [ 161.843456][ T6285] usb usb4-port1: attempt power cycle [ 161.844518][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.977892][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.008728][ T6284] usb 5-1: 0:2 : does not exist [ 162.042409][ T6284] usb 5-1: USB disconnect, device number 12 [ 162.112748][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.191471][ T6285] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.212253][ T6285] usb 4-1: device descriptor read/8, error -71 [ 162.502356][ T6285] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.551580][ T6285] usb 4-1: device descriptor read/8, error -71 [ 162.700929][ T6285] usb usb4-port1: unable to enumerate USB device [ 163.343904][ T7102] __nla_validate_parse: 44 callbacks suppressed [ 163.343938][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.4.297'. [ 164.265314][ T30] audit: type=1400 audit(1761650864.032:384): avc: denied { firmware_load } for pid=7103 comm="syz.2.298" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 165.110271][ T7106] syz.2.298 (7106) used greatest stack depth: 19112 bytes left [ 165.780441][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 165.780441][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 166.175770][ T7134] random: crng reseeded on system resumption [ 166.603366][ T30] audit: type=1400 audit(1761650866.052:385): avc: denied { read } for pid=7130 comm="syz.3.305" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 166.853202][ T30] audit: type=1400 audit(1761650866.052:386): avc: denied { ioctl } for pid=7130 comm="syz.3.305" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 167.022607][ T30] audit: type=1400 audit(1761650866.132:387): avc: denied { connect } for pid=7130 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.861044][ T6285] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 167.990967][ T6285] usb 4-1: device descriptor read/64, error -71 [ 168.040976][ T5812] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.274014][ T7160] overlayfs: overlapping lowerdir path [ 168.589369][ T5812] usb 5-1: device descriptor read/64, error -71 [ 168.654855][ T6285] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.790985][ T6285] usb 4-1: device descriptor read/64, error -71 [ 168.911359][ T5812] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 169.627617][ T6285] usb usb4-port1: attempt power cycle [ 169.690972][ T5812] usb 5-1: device descriptor read/64, error -71 [ 169.755710][ T7173] CUSE: unknown device info "" [ 169.770086][ T7173] CUSE: unknown device info "`" [ 169.776488][ T7173] CUSE: unknown device info "" [ 169.785270][ T7173] CUSE: unknown device info "€" [ 169.791036][ T7173] CUSE: DEVNAME unspecified [ 169.811234][ T5812] usb usb5-port1: attempt power cycle [ 169.900992][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 169.985018][ T7175] FAULT_INJECTION: forcing a failure. [ 169.985018][ T7175] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 170.010809][ T7175] CPU: 0 UID: 0 PID: 7175 Comm: syz.1.314 Not tainted syzkaller #0 PREEMPT(full) [ 170.010835][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.010848][ T7175] Call Trace: [ 170.010854][ T7175] [ 170.010861][ T7175] dump_stack_lvl+0x16c/0x1f0 [ 170.010895][ T7175] should_fail_ex+0x512/0x640 [ 170.010920][ T7175] should_fail_alloc_page+0xe7/0x130 [ 170.010944][ T7175] prepare_alloc_pages+0x3c2/0x610 [ 170.010971][ T7175] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 170.011008][ T7175] ? __lock_acquire+0x622/0x1c90 [ 170.011043][ T7175] ? __lock_acquire+0x622/0x1c90 [ 170.011072][ T7175] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 170.011108][ T7175] ? __lock_acquire+0x622/0x1c90 [ 170.011144][ T7175] ? __lock_acquire+0x622/0x1c90 [ 170.011175][ T7175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.011204][ T7175] ? policy_nodemask+0xea/0x4e0 [ 170.011230][ T7175] alloc_pages_mpol+0x1fb/0x550 [ 170.011255][ T7175] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 170.011284][ T7175] ? is_bpf_text_address+0x8a/0x1a0 [ 170.011306][ T7175] ? bpf_ksym_find+0x127/0x1c0 [ 170.011337][ T7175] alloc_pages_noprof+0x131/0x390 [ 170.011361][ T7175] pte_alloc_one+0x1e/0x350 [ 170.011387][ T7175] __pte_alloc+0x6d/0x380 [ 170.011408][ T7175] ? __pfx___pte_alloc+0x10/0x10 [ 170.011427][ T7175] ? __lock_acquire+0x622/0x1c90 [ 170.011463][ T7175] do_pte_missing+0x282c/0x3ba0 [ 170.011492][ T7175] ? mtree_range_walk+0x718/0xc00 [ 170.011521][ T7175] ? find_held_lock+0x2b/0x80 [ 170.011548][ T7175] __handle_mm_fault+0x1556/0x2aa0 [ 170.011585][ T7175] ? __pfx___handle_mm_fault+0x10/0x10 [ 170.011610][ T7175] ? __kasan_check_byte+0x13/0x50 [ 170.011660][ T7175] handle_mm_fault+0x589/0xd10 [ 170.011693][ T7175] __get_user_pages+0x54e/0x3530 [ 170.011731][ T7175] ? __pfx___get_user_pages+0x10/0x10 [ 170.011753][ T7175] ? check_path.constprop.0+0x24/0x50 [ 170.011789][ T7175] __gup_longterm_locked+0xa92/0x17e0 [ 170.011813][ T7175] ? lockdep_unlock+0x64/0xe0 [ 170.011845][ T7175] ? __pfx___gup_longterm_locked+0x10/0x10 [ 170.011886][ T7175] pin_user_pages_remote+0xed/0x140 [ 170.011912][ T7175] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 170.011950][ T7175] iopt_pages_rw_access+0x769/0x980 [ 170.011978][ T7175] ? __pfx_iopt_pages_rw_access+0x10/0x10 [ 170.012009][ T7175] iommufd_access_rw+0x256/0x500 [ 170.012044][ T7175] ? __pfx_iommufd_access_rw+0x10/0x10 [ 170.012071][ T7175] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 170.012094][ T7175] ? iommufd_test+0x438b/0x61e0 [ 170.012118][ T7175] ? __fget_files+0x131/0x3c0 [ 170.012145][ T7175] iommufd_test+0x4447/0x61e0 [ 170.012178][ T7175] ? __pfx_iommufd_test+0x10/0x10 [ 170.012206][ T7175] ? find_held_lock+0x2b/0x80 [ 170.012228][ T7175] ? __might_fault+0xe3/0x190 [ 170.012255][ T7175] ? __might_fault+0xe3/0x190 [ 170.012284][ T7175] ? __might_fault+0x13b/0x190 [ 170.012325][ T7175] iommufd_fops_ioctl+0x34d/0x540 [ 170.012355][ T7175] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 170.012386][ T7175] ? hook_file_ioctl_common+0x145/0x410 [ 170.012421][ T7175] ? selinux_file_ioctl+0x180/0x270 [ 170.012443][ T7175] ? selinux_file_ioctl+0xb4/0x270 [ 170.012467][ T7175] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 170.012497][ T7175] __x64_sys_ioctl+0x18e/0x210 [ 170.012527][ T7175] do_syscall_64+0xcd/0xfa0 [ 170.012558][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.012580][ T7175] RIP: 0033:0x7f9a3158efc9 [ 170.012597][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.012617][ T7175] RSP: 002b:00007f9a32363038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.012636][ T7175] RAX: ffffffffffffffda RBX: 00007f9a317e5fa0 RCX: 00007f9a3158efc9 [ 170.012651][ T7175] RDX: 0000200000000300 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 170.012663][ T7175] RBP: 00007f9a32363090 R08: 0000000000000000 R09: 0000000000000000 [ 170.012675][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.012687][ T7175] R13: 00007f9a317e6038 R14: 00007f9a317e5fa0 R15: 00007fff85fcbbd8 [ 170.012719][ T7175] [ 170.444675][ T6285] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 170.498502][ T24] usb 1-1: config 0 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.516987][ T5812] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.534854][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.650486][ T5812] usb 5-1: device descriptor read/8, error -71 [ 170.660970][ T6285] usb 4-1: device not accepting address 18, error -71 [ 171.021987][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 171.070977][ T5812] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 171.091815][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.126010][ T24] usb 1-1: config 0 descriptor?? [ 171.193134][ T7187] loop8: detected capacity change from 0 to 8 [ 171.214334][ T7187] Dev loop8: unable to read RDB block 8 [ 171.223045][ T7187] loop8: unable to read partition table [ 171.228888][ T7187] loop8: partition table beyond EOD, truncated [ 171.235803][ T7187] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 171.291365][ T5812] usb 5-1: device not accepting address 16, error -71 [ 171.333346][ T5812] usb usb5-port1: unable to enumerate USB device [ 171.550983][ T24] cypress 0003:04B4:0001.0004: hidraw0: USB HID v0.01 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 171.748231][ T24] usb 1-1: USB disconnect, device number 6 [ 172.008929][ T5812] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 172.203138][ T5812] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 172.241201][ T5812] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 172.421102][ T5812] usb 5-1: config 150 has no interface number 0 [ 172.957637][ T5812] usb 5-1: config 150 interface 204 has no altsetting 0 [ 173.067008][ T5812] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 173.144941][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.161090][ T5812] usb 5-1: Product: syz [ 173.165404][ T5812] usb 5-1: Manufacturer: syz [ 173.169993][ T5812] usb 5-1: SerialNumber: syz [ 173.621172][ T6184] Bluetooth: hci5: Frame reassembly failed (-84) [ 173.647991][ T5812] xr_serial 5-1:150.204: skipping garbage [ 173.721771][ T5812] xr_serial 5-1:150.204: xr_serial converter detected [ 174.268703][ T7223] netlink: 80 bytes leftover after parsing attributes in process `syz.2.326'. [ 174.287131][ T7223] netlink: 80 bytes leftover after parsing attributes in process `syz.2.326'. [ 174.830422][ T30] audit: type=1400 audit(1761650874.142:388): avc: denied { listen } for pid=7218 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 175.102069][ T5812] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 175.221197][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.461087][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 175.483605][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.493928][ T5945] usb 3-1: config 0 has no interfaces? [ 175.502579][ T5945] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 175.514459][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.522710][ T5945] usb 3-1: Product: syz [ 175.526888][ T5945] usb 3-1: Manufacturer: syz [ 175.531615][ T5945] usb 3-1: SerialNumber: syz [ 175.586877][ T5945] usb 3-1: config 0 descriptor?? [ 175.587465][ T5812] usb 5-1: USB disconnect, device number 17 [ 175.601611][ T5812] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 175.605878][ T7230] xt_connbytes: Forcing CT accounting to be enabled [ 175.714978][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 175.721587][ T5135] Bluetooth: hci5: command 0x1003 tx timeout [ 175.769488][ T5812] xr_serial 5-1:150.204: device disconnected [ 175.804214][ T7234] o2cb: This node has not been configured. [ 175.810598][ T7234] o2cb: Cluster check failed. Fix errors before retrying. [ 175.817791][ T7234] (syz.1.330,7234,1):user_dlm_register:674 ERROR: status = -22 [ 175.825476][ T7234] (syz.1.330,7234,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 175.836507][ T7234] syz.1.330 uses obsolete (PF_INET,SOCK_PACKET) [ 175.847662][ T30] audit: type=1400 audit(1761650875.682:389): avc: denied { accept } for pid=7231 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 175.876537][ T30] audit: type=1400 audit(1761650875.682:390): avc: denied { add_name } for pid=7231 comm="syz.1.330" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.897463][ T30] audit: type=1400 audit(1761650875.682:391): avc: denied { create } for pid=7231 comm="syz.1.330" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 175.918868][ T30] audit: type=1400 audit(1761650875.682:392): avc: denied { associate } for pid=7231 comm="syz.1.330" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 175.941078][ T30] audit: type=1400 audit(1761650875.722:393): avc: denied { create } for pid=7231 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 175.987391][ T30] audit: type=1400 audit(1761650875.722:394): avc: denied { write } for pid=7231 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 176.117887][ T7237] CUSE: unknown device info "" [ 176.127120][ T7237] CUSE: unknown device info "`" [ 176.153831][ T7237] CUSE: unknown device info "" [ 176.158815][ T7237] CUSE: unknown device info "€" [ 176.164644][ T7237] CUSE: DEVNAME unspecified [ 176.264666][ T30] audit: type=1326 audit(1761650876.142:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7238 comm="syz.4.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f498d78efc9 code=0x0 [ 176.353192][ T30] audit: type=1326 audit(1761650876.232:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 176.377582][ T30] audit: type=1326 audit(1761650876.232:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7241 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baed8efc9 code=0x7ffc0000 [ 178.323243][ T5945] usb 3-1: USB disconnect, device number 8 [ 178.830990][ T5812] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 179.598082][ T5812] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 180.033753][ T5812] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.103151][ T5812] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.172006][ T5812] usb 1-1: string descriptor 0 read error: -22 [ 180.191318][ T5812] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40 [ 180.217902][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.439175][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 180.439201][ T30] audit: type=1400 audit(1761650880.312:452): avc: denied { setopt } for pid=7284 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.555929][ T30] audit: type=1400 audit(1761650880.362:453): avc: denied { read } for pid=7284 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.823708][ T7293] xt_l2tp: invalid flags combination: 8 [ 180.849699][ T5812] usb 1-1: can't set config #1, error -71 [ 180.867842][ T5812] usb 1-1: USB disconnect, device number 7 [ 180.874013][ T7297] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 180.896195][ T7297] overlayfs: missing 'lowerdir' [ 181.017367][ T30] audit: type=1400 audit(1761650880.762:454): avc: denied { create } for pid=7296 comm="syz.3.344" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 181.017910][ T30] audit: type=1400 audit(1761650880.762:455): avc: denied { associate } for pid=7296 comm="syz.3.344" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 181.257207][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 181.701602][ T30] audit: type=1400 audit(1761650880.772:456): avc: denied { mounton } for pid=7296 comm="syz.3.344" path="/65/bus" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 181.883858][ T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 181.975001][ T24] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 182.040652][ T10] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 182.058448][ T30] audit: type=1400 audit(1761650881.932:457): avc: denied { rmdir } for pid=5822 comm="syz-executor" name="bus" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 182.079120][ T10] usb 2-1: config 150 has no interface number 0 [ 182.131239][ T24] usb 1-1: device descriptor read/64, error -71 [ 182.192942][ T10] usb 2-1: config 150 interface 204 has no altsetting 0 [ 182.256984][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 182.261927][ T7325] CUSE: unknown device info "" [ 182.301196][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.311782][ T10] usb 2-1: Product: syz [ 182.318082][ T10] usb 2-1: Manufacturer: syz [ 182.324286][ T7325] CUSE: unknown device info "`" [ 182.335376][ T7325] CUSE: unknown device info "" [ 182.340730][ T10] usb 2-1: SerialNumber: syz [ 182.356124][ T7325] CUSE: unknown device info "€" [ 182.396703][ T7325] CUSE: DEVNAME unspecified [ 182.491606][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 182.579887][ T10] xr_serial 2-1:150.204: skipping garbage [ 182.587124][ T10] xr_serial 2-1:150.204: xr_serial converter detected [ 182.621072][ T24] usb 1-1: device descriptor read/64, error -71 [ 182.651074][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.732897][ T24] usb usb1-port1: attempt power cycle [ 182.873194][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 182.882488][ T5812] usb 3-1: can't read configurations, error -61 [ 183.026119][ T5812] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.213443][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.226487][ T5812] usb 3-1: can't read configurations, error -61 [ 183.248863][ T5812] usb usb3-port1: attempt power cycle [ 183.340987][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 183.361584][ T24] usb 1-1: device descriptor read/8, error -71 [ 183.443864][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 183.455039][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 183.494977][ T10] usb 2-1: USB disconnect, device number 18 [ 183.639674][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 183.639878][ T5812] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 183.666203][ T10] xr_serial 2-1:150.204: device disconnected [ 183.733876][ T24] usb 1-1: device descriptor read/8, error -71 [ 183.885577][ T24] usb usb1-port1: unable to enumerate USB device [ 183.900417][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.981427][ T5812] usb 3-1: can't read configurations, error -61 [ 184.111938][ T5812] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.152520][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.191443][ T5812] usb 3-1: can't read configurations, error -61 [ 184.333134][ T5812] usb usb3-port1: unable to enumerate USB device [ 184.668259][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.354'. [ 184.750569][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 184.873685][ T5945] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 185.001151][ T30] audit: type=1400 audit(1761650884.872:458): avc: denied { bind } for pid=7352 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.030142][ T30] audit: type=1400 audit(1761650884.902:459): avc: denied { name_bind } for pid=7352 comm="syz.0.356" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 185.053993][ T30] audit: type=1400 audit(1761650884.902:460): avc: denied { node_bind } for pid=7352 comm="syz.0.356" saddr=ffff:ffff:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 185.083420][ T5945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.092553][ T5945] usb 4-1: not running at top speed; connect to a high speed hub [ 185.103228][ T5945] usb 4-1: config 4 has an invalid interface number: 239 but max is 0 [ 185.113269][ T5945] usb 4-1: config 4 has no interface number 0 [ 185.122842][ T5945] usb 4-1: config 4 interface 239 has no altsetting 0 [ 185.159604][ T5945] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b7.e9 [ 185.169012][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.177287][ T5945] usb 4-1: Product: syz [ 185.187193][ T5945] usb 4-1: Manufacturer: syz [ 185.193158][ T5945] usb 4-1: SerialNumber: syz [ 185.887378][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 185.900308][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 186.181579][ T5945] snd-usb-audio 4-1:4.239: probe with driver snd-usb-audio failed with error -71 [ 186.213393][ T5945] usb 4-1: USB disconnect, device number 20 [ 186.511060][ T30] audit: type=1400 audit(1761650886.272:461): avc: denied { mount } for pid=7364 comm="syz.2.359" name="/" dev="ramfs" ino=13297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.551008][ T30] audit: type=1400 audit(1761650886.382:462): avc: denied { read write } for pid=7364 comm="syz.2.359" dev="sockfs" ino=13299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.839659][ T30] audit: type=1400 audit(1761650886.712:463): avc: denied { write } for pid=7371 comm="syz.3.361" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.054030][ T30] audit: type=1400 audit(1761650886.932:464): avc: denied { name_bind } for pid=7376 comm="syz.3.363" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 187.205439][ T30] audit: type=1400 audit(1761650886.972:465): avc: denied { setopt } for pid=7376 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.433769][ T7379] FAULT_INJECTION: forcing a failure. [ 187.433769][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.466256][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.1.365 Not tainted syzkaller #0 PREEMPT(full) [ 187.466274][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.466281][ T7379] Call Trace: [ 187.466285][ T7379] [ 187.466290][ T7379] dump_stack_lvl+0x16c/0x1f0 [ 187.466311][ T7379] should_fail_ex+0x512/0x640 [ 187.466326][ T7379] _copy_from_user+0x2e/0xd0 [ 187.466341][ T7379] copy_msghdr_from_user+0x98/0x160 [ 187.466356][ T7379] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.466377][ T7379] ___sys_sendmsg+0xfe/0x1d0 [ 187.466392][ T7379] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.466404][ T7379] ? __lock_acquire+0x622/0x1c90 [ 187.466440][ T7379] __sys_sendmsg+0x16d/0x220 [ 187.466453][ T7379] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.466477][ T7379] do_syscall_64+0xcd/0xfa0 [ 187.466497][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.466509][ T7379] RIP: 0033:0x7f9a3158efc9 [ 187.466518][ T7379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.466529][ T7379] RSP: 002b:00007f9a32363038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.466540][ T7379] RAX: ffffffffffffffda RBX: 00007f9a317e5fa0 RCX: 00007f9a3158efc9 [ 187.466547][ T7379] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 187.466554][ T7379] RBP: 00007f9a32363090 R08: 0000000000000000 R09: 0000000000000000 [ 187.466561][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.466567][ T7379] R13: 00007f9a317e6038 R14: 00007f9a317e5fa0 R15: 00007fff85fcbbd8 [ 187.466582][ T7379] [ 187.860139][ T5812] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 188.065889][ T5812] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 188.075881][ T5812] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 188.133281][ T7388] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 188.365162][ T5812] usb 4-1: config 150 has no interface number 0 [ 188.382559][ T7388] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 188.434989][ T5812] usb 4-1: config 150 interface 204 has no altsetting 0 [ 188.453240][ T5812] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 188.462542][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.473741][ T5812] usb 4-1: Product: syz [ 188.483289][ T5812] usb 4-1: Manufacturer: syz [ 188.493370][ T5812] usb 4-1: SerialNumber: syz [ 188.721392][ T5812] xr_serial 4-1:150.204: skipping garbage [ 188.727183][ T5812] xr_serial 4-1:150.204: xr_serial converter detected [ 189.241160][ T5922] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 189.451576][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 189.464310][ T5922] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 189.512484][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.532434][ T5922] usb 2-1: config 0 descriptor?? [ 189.701759][ T5812] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 189.708267][ T5812] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 189.723025][ T5812] usb 4-1: USB disconnect, device number 21 [ 189.732336][ T5812] xr_serial 4-1:150.204: device disconnected [ 190.007569][ T7410] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.237954][ T5922] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 190.279344][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.329370][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 190.430986][ T5922] usb 2-1: media controller created [ 190.483509][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.646161][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 190.659539][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 190.661047][ T6269] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 190.780989][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 190.802240][ T30] audit: type=1400 audit(1761650890.672:466): avc: denied { accept } for pid=7401 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.827434][ T5922] Registered IR keymap rc-empty [ 190.832643][ T5922] dvb-usb: could not initialize remote control. [ 190.839086][ T5922] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 190.892876][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.918295][ T6269] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.927539][ T6269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.933673][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.940723][ T6269] usb 1-1: Product: syz [ 190.982241][ T6269] usb 1-1: Manufacturer: syz [ 190.986884][ T6269] usb 1-1: SerialNumber: syz [ 191.217908][ T6269] usb 1-1: config 0 descriptor?? [ 191.353850][ T5922] usb 2-1: USB disconnect, device number 19 [ 191.413694][ T5922] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 191.435895][ T6269] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.337786][ T6269] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 194.382680][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.395438][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.160890][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 298.167867][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7416/2:b..l [ 298.176061][ C1] rcu: (detected by 1, t=10502 jiffies, g=18469, q=1499 ncpus=2) [ 298.183846][ C1] task:syz.4.374 state:R running task stack:25224 pid:7416 tgid:7416 ppid:5820 task_flags:0x2040004c flags:0x00080001 [ 298.198127][ C1] Call Trace: [ 298.201393][ C1] [ 298.204306][ C1] __schedule+0x1190/0x5de0 [ 298.208800][ C1] ? __pfx___schedule+0x10/0x10 [ 298.213631][ C1] ? __lock_acquire+0x622/0x1c90 [ 298.218550][ C1] ? mark_held_locks+0x49/0x80 [ 298.223295][ C1] preempt_schedule_irq+0x51/0x90 [ 298.228303][ C1] irqentry_exit+0x36/0x90 [ 298.232694][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.238646][ C1] RIP: 0010:kasan_byte_accessible+0x18/0x30 [ 298.244524][ C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 0f b6 07 <3c> 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f [ 298.264108][ C1] RSP: 0018:ffffc9001c1ee818 EFLAGS: 00000282 [ 298.270148][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c4460 RCX: 0000000000000002 [ 298.278106][ C1] RDX: 0000000000000000 RSI: ffffffff816c15f1 RDI: fffffbfff1c7888c [ 298.286076][ C1] RBP: ffffffff8e3c4460 R08: 0000000000000000 R09: 0000000000000000 [ 298.294049][ C1] R10: 0000000000000000 R11: 000000000003811d R12: ffffffff816c15f1 [ 298.302007][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.309959][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 298.315060][ C1] ? unwind_next_frame+0xd1/0x20a0 [ 298.320150][ C1] __kasan_check_byte+0x13/0x50 [ 298.324978][ C1] lock_acquire+0xfc/0x350 [ 298.329370][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 298.334549][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.340683][ C1] unwind_next_frame+0xd1/0x20a0 [ 298.345600][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 298.350687][ C1] ? __block_write_full_folio+0x735/0xe00 [ 298.356385][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.362530][ C1] arch_stack_walk+0x94/0x100 [ 298.367195][ C1] ? __block_write_full_folio+0x735/0xe00 [ 298.372897][ C1] stack_trace_save+0x8e/0xc0 [ 298.377560][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 298.382951][ C1] kasan_save_stack+0x33/0x60 [ 298.387605][ C1] ? kasan_save_stack+0x33/0x60 [ 298.392425][ C1] ? kasan_save_track+0x14/0x30 [ 298.397245][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 298.402239][ C1] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 298.407850][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.412759][ C1] ? debug_objects_fill_pool+0x23f/0x520 [ 298.418365][ C1] ? debug_object_activate+0x10b/0x4c0 [ 298.423889][ C1] ? __call_rcu_common.constprop.0+0x35/0xa10 [ 298.429942][ C1] ? kmem_cache_free+0x171/0x6c0 [ 298.434847][ C1] ? mempool_free+0x102/0x750 [ 298.439495][ C1] ? bio_put+0x355/0x5b0 [ 298.443710][ C1] ? bio_endio+0x713/0x860 [ 298.448103][ C1] ? blk_update_request+0x93e/0x15f0 [ 298.453371][ C1] ? blk_mq_end_request+0x4f/0x90 [ 298.458393][ C1] ? blk_mq_complete_request+0x8b/0xb0 [ 298.463830][ C1] ? null_queue_rq+0xb69/0xfd0 [ 298.468568][ C1] ? null_queue_rqs+0xe9/0x2f0 [ 298.473301][ C1] ? __blk_mq_flush_list+0x9a/0xc0 [ 298.478379][ C1] ? blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 298.484600][ C1] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 298.490401][ C1] ? blk_add_rq_to_plug+0x1ca/0x540 [ 298.495572][ C1] ? blk_mq_submit_bio+0x1ecc/0x3380 [ 298.500828][ C1] ? __submit_bio+0x3cf/0x690 [ 298.505474][ C1] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 298.511252][ C1] ? submit_bio_noacct+0xbbb/0x1f60 [ 298.516440][ C1] ? __block_write_full_folio+0x735/0xe00 [ 298.522149][ C1] kasan_save_track+0x14/0x30 [ 298.526799][ C1] __kasan_slab_alloc+0x89/0x90 [ 298.531618][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 298.537053][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.541968][ C1] ? kmem_alloc_batch+0x49/0x170 [ 298.546876][ C1] kmem_alloc_batch+0x49/0x170 [ 298.551616][ C1] debug_objects_fill_pool+0x23f/0x520 [ 298.557049][ C1] ? null_queue_rq+0xb69/0xfd0 [ 298.561783][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 298.567738][ C1] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 298.573259][ C1] ? blk_mq_submit_bio+0x1ecc/0x3380 [ 298.578523][ C1] ? __submit_bio+0x3cf/0x690 [ 298.583175][ C1] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 298.588958][ C1] ? submit_bio_noacct+0xbbb/0x1f60 [ 298.594221][ C1] ? __block_write_full_folio+0x735/0xe00 [ 298.599923][ C1] ? block_write_full_folio+0x341/0x400 [ 298.605442][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 298.611572][ C1] debug_object_activate+0x10b/0x4c0 [ 298.616834][ C1] ? task_work_run+0x150/0x240 [ 298.621566][ C1] ? do_exit+0x86f/0x2bf0 [ 298.625868][ C1] ? do_group_exit+0xd3/0x2a0 [ 298.630517][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 298.636306][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 298.642442][ C1] __call_rcu_common.constprop.0+0x35/0xa10 [ 298.648311][ C1] kmem_cache_free+0x171/0x6c0 [ 298.653042][ C1] ? mempool_free+0x102/0x750 [ 298.657691][ C1] ? __pfx_mempool_free_slab+0x10/0x10 [ 298.663119][ C1] ? mempool_free+0x102/0x750 [ 298.667766][ C1] mempool_free+0x102/0x750 [ 298.672417][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 298.677952][ C1] bio_put+0x355/0x5b0 [ 298.681992][ C1] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 298.687518][ C1] bio_endio+0x713/0x860 [ 298.691736][ C1] blk_update_request+0x93e/0x15f0 [ 298.696829][ C1] blk_mq_end_request+0x4f/0x90 [ 298.701653][ C1] blk_mq_complete_request+0x8b/0xb0 [ 298.706907][ C1] null_queue_rq+0xb69/0xfd0 [ 298.711474][ C1] null_queue_rqs+0xe9/0x2f0 [ 298.716034][ C1] ? __pfx_null_queue_rqs+0x10/0x10 [ 298.721201][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 298.727269][ C1] __blk_mq_flush_list+0x9a/0xc0 [ 298.732179][ C1] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 298.738231][ C1] blk_mq_flush_plug_list+0x1f2/0x600 [ 298.743583][ C1] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 298.749449][ C1] ? update_io_ticks+0x137/0x2a0 [ 298.754363][ C1] blk_add_rq_to_plug+0x1ca/0x540 [ 298.759363][ C1] blk_mq_submit_bio+0x1ecc/0x3380 [ 298.764453][ C1] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 298.769887][ C1] ? __lock_acquire+0x622/0x1c90 [ 298.774815][ C1] __submit_bio+0x3cf/0x690 [ 298.779294][ C1] ? __pfx___submit_bio+0x10/0x10 [ 298.784295][ C1] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 298.790076][ C1] ? bio_associate_blkg+0x137/0x2a0 [ 298.795255][ C1] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 298.801041][ C1] submit_bio_noacct_nocheck+0x53d/0xc10 [ 298.806650][ C1] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 298.812787][ C1] ? __pfx___might_resched+0x10/0x10 [ 298.818046][ C1] ? domain_over_bg_thresh+0x271/0x280 [ 298.823479][ C1] submit_bio_noacct+0xbbb/0x1f60 [ 298.828480][ C1] __block_write_full_folio+0x735/0xe00 [ 298.834004][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 298.839375][ C1] block_write_full_folio+0x341/0x400 [ 298.844725][ C1] ? __pfx_blkdev_get_block+0x10/0x10 [ 298.850074][ C1] blkdev_writepages+0xb8/0x140 [ 298.854985][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 298.860423][ C1] ? do_writepages+0x4b7/0x600 [ 298.865166][ C1] ? __pfx_blkdev_writepages+0x10/0x10 [ 298.870606][ C1] do_writepages+0x27a/0x600 [ 298.875178][ C1] ? __pfx_do_writepages+0x10/0x10 [ 298.880258][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 298.885430][ C1] ? _raw_spin_unlock+0x28/0x50 [ 298.890286][ C1] filemap_fdatawrite_wbc+0x104/0x160 [ 298.895635][ C1] __filemap_fdatawrite_range+0xb9/0x100 [ 298.901248][ C1] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 298.907486][ C1] ? locks_remove_file+0x399/0x5c0 [ 298.912571][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 298.917749][ C1] filemap_write_and_wait_range+0xa3/0x130 [ 298.923536][ C1] bdev_release+0x4d3/0x6d0 [ 298.928017][ C1] ? __pfx_blkdev_release+0x10/0x10 [ 298.933186][ C1] blkdev_release+0x15/0x20 [ 298.937662][ C1] __fput+0x402/0xb70 [ 298.941620][ C1] task_work_run+0x150/0x240 [ 298.946183][ C1] ? __pfx_task_work_run+0x10/0x10 [ 298.951293][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 298.956465][ C1] do_exit+0x86f/0x2bf0 [ 298.960600][ C1] ? __pfx_do_exit+0x10/0x10 [ 298.965162][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 298.970513][ C1] do_group_exit+0xd3/0x2a0 [ 298.974997][ C1] __x64_sys_exit_group+0x3e/0x50 [ 298.979995][ C1] x64_sys_call+0x150b/0x1730 [ 298.984646][ C1] do_syscall_64+0xcd/0xfa0 [ 298.989126][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.994987][ C1] RIP: 0033:0x7f498d78efc9 [ 298.999377][ C1] RSP: 002b:00007ffd1cf6dba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 299.007762][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f498d78efc9 [ 299.015707][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.023649][ C1] RBP: 00007ffd1cf6dc0c R08: 0000001e1cf6dc9f R09: 00000000000927c0 [ 299.031590][ C1] R10: 000000000002e94c R11: 0000000000000246 R12: 0000000000000046 [ 299.039559][ C1] R13: 00000000000927c0 R14: 000000000002e41e R15: 00007ffd1cf6dc60 [ 299.047511][ C1] [ 299.050518][ C1] rcu: rcu_preempt kthread starved for 10101 jiffies! g18469 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 299.061678][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 299.071618][ C1] rcu: RCU grace-period kthread stack dump: [ 299.077476][ C1] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 299.091008][ C1] Call Trace: [ 299.094272][ C1] [ 299.097181][ C1] __schedule+0x1190/0x5de0 [ 299.101680][ C1] ? __pfx___schedule+0x10/0x10 [ 299.106516][ C1] ? find_held_lock+0x2b/0x80 [ 299.111172][ C1] ? schedule+0x2d7/0x3a0 [ 299.115481][ C1] schedule+0xe7/0x3a0 [ 299.119600][ C1] schedule_timeout+0x123/0x290 [ 299.124424][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 299.129857][ C1] ? __pfx_process_timeout+0x10/0x10 [ 299.135126][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.140914][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 299.146353][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 299.151090][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 299.156344][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.161520][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 299.166427][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 299.171251][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 299.177032][ C1] rcu_gp_kthread+0x26d/0x380 [ 299.181682][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.186851][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.191590][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.196770][ C1] ? __kthread_parkme+0x19e/0x250 [ 299.201772][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.206943][ C1] kthread+0x3c5/0x780 [ 299.210988][ C1] ? __pfx_kthread+0x10/0x10 [ 299.215555][ C1] ? rcu_is_watching+0x12/0xc0 [ 299.220292][ C1] ? __pfx_kthread+0x10/0x10 [ 299.224852][ C1] ret_from_fork+0x675/0x7d0 [ 299.229416][ C1] ? __pfx_kthread+0x10/0x10 [ 299.233975][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.238723][ C1] [ 299.241715][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 299.248013][ C1] Sending NMI from CPU 1 to CPUs 0: [ 299.253202][ C0] NMI backtrace for cpu 0 [ 299.253217][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 299.253238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.253249][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 299.253277][ C0] Code: 07 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 d5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 299.253295][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 299.253310][ C0] RAX: 00000000008fd719 RBX: 0000000000000000 RCX: ffffffff8b6052a9 [ 299.253322][ C0] RDX: 0000000000000000 RSI: ffffffff8da2a259 RDI: ffffffff8bf06e40 [ 299.253333][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 299.253345][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 299.253356][ C0] R13: ffffffff8e097a00 R14: ffffffff9081f6d0 R15: 0000000000000000 [ 299.253368][ C0] FS: 0000000000000000(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 299.253385][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.253397][ C0] CR2: 00005555674465c8 CR3: 0000000074d2c000 CR4: 00000000003526f0 [ 299.253408][ C0] Call Trace: [ 299.253414][ C0] [ 299.253420][ C0] default_idle+0x13/0x20 [ 299.253437][ C0] default_idle_call+0x6c/0xb0 [ 299.253455][ C0] do_idle+0x38d/0x500 [ 299.253477][ C0] ? __pfx_do_idle+0x10/0x10 [ 299.253498][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 299.253520][ C0] cpu_startup_entry+0x4f/0x60 [ 299.253542][ C0] rest_init+0x16b/0x2b0 [ 299.253560][ C0] ? acpi_subsystem_init+0x133/0x180 [ 299.253581][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 299.253604][ C0] start_kernel+0x3f6/0x4e0 [ 299.253625][ C0] x86_64_start_reservations+0x18/0x30 [ 299.253646][ C0] x86_64_start_kernel+0x130/0x190 [ 299.253667][ C0] common_startup_64+0x13e/0x148 [ 299.253692][ C0]