last executing test programs: 12.702724572s ago: executing program 3 (id=1506): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c052}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x8dff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, 0x0, 0x0, 0x4}, 0x94) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES16=r6, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 11.618043516s ago: executing program 2 (id=1507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 10.214455441s ago: executing program 4 (id=1509): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x23042, 0x1df) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 9.893251911s ago: executing program 4 (id=1511): socket(0x1d, 0x2, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00032b0000002b2263c445269b6cddddb3744d"], 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x0, 0x3, "a153fee7", "9d9dd304"}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4048040) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000001c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.228449491s ago: executing program 3 (id=1512): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000840)={0x0, 0x6}, 0x0, 0x0}) 8.826480889s ago: executing program 2 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a000000000000562d060000000000180000020000000000000000000000009d00000000004c00"], &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_pts(r5, 0x402) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x1, 0x1}}, 0x18) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d3000004a000b000000000006001100a200000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4048000) 8.673154291s ago: executing program 2 (id=1518): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c"], 0x0, 0x4a, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x60}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x628, 0xc88d, 0x43, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r4}, 0x10) keyctl$get_persistent(0xe, 0xffffffffffffffff, 0xfffffffffffffffa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="460a000000000020792f2800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0}, 0x94) read$msr(r5, &(0x7f0000019300)=""/102400, 0x19000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) syz_usbip_server_init(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_io_uring_setup(0xca1, &(0x7f0000000600)={0x0, 0x24bc, 0x40, 0x0, 0x190, 0x0, r1}, &(0x7f0000000280), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x10, r6, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) 7.35406279s ago: executing program 0 (id=1519): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() msgctl$IPC_SET(0x0, 0x1, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) unlink(0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) process_madvise(r5, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, 0x3, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x3e1}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x51) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) 5.627771402s ago: executing program 0 (id=1521): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x23042, 0x1df) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 5.481356798s ago: executing program 2 (id=1523): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c052}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x8dff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, 0x0, 0x0, 0x4}, 0x94) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRES16=r6, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 5.198694741s ago: executing program 0 (id=1524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r5 = fanotify_init(0x200, 0x0) close(r5) 4.935767554s ago: executing program 1 (id=1525): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698", 0x79}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8", 0xb2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be5", 0x85}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4f5b9e40, 0x8, 0x96282c4, 0x2040, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x45, 0x4, 0x2, 0x4}, 0x50) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.256996646s ago: executing program 3 (id=1526): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698", 0x79}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa", 0xa1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.161585123s ago: executing program 1 (id=1527): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)="bbc5105f73", 0x5) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000001500)=@tcp}, 0x20) (async) r5 = socket(0x10, 0x80003, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000900)={"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"}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x8000000, 0x8, 0x6, 0x219e6331, 0x0, [{0x0, 0x6, 0x4, '\x00', 0x1}, {0x9, 0x8, 0x3, '\x00', 0xd1}, {0xb, 0x15, 0xff, '\x00', 0xff}, {0xa, 0x7, 0x6, '\x00', 0x5}, {0x3, 0x8, 0x6, '\x00', 0x8c}, {0x7, 0x5, 0x4}, {0x6, 0x9, 0x81, '\x00', 0x1}, {0x2, 0x1, 0x10, '\x00', 0x4}, {0xa, 0x4, 0x80, '\x00', 0x7c}, {0x53, 0x9, 0xf9, '\x00', 0xa3}, {0xf7, 0x3, 0x6, '\x00', 0x5}, {0x8, 0x4, 0x0, '\x00', 0x4}, {0x1, 0x1, 0x7, '\x00', 0xf7}, {0x82, 0x0, 0xf, '\x00', 0x3}, {0x1, 0x8, 0x4, '\x00', 0xbf}, {0xfd, 0x0, 0x81, '\x00', 0x2}, {0x8, 0x6, 0x4, '\x00', 0x3}, {0x2, 0xeb, 0x80, '\x00', 0x40}, {0xa9, 0xcb, 0x8, '\x00', 0x43}, {0x6, 0x1, 0xa, '\x00', 0xf}, {0x1, 0x1, 0x9, '\x00', 0x40}, {0x9, 0x1, 0x3, '\x00', 0x7}, {0x0, 0x9, 0x4}, {0x6f, 0x9, 0x6, '\x00', 0xa6}]}}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000010"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) 3.985088864s ago: executing program 0 (id=1528): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x2, 0xadf, 0x0, 0x7, 0x9, 0x10003, 0x7, 0x10000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 3.835741443s ago: executing program 1 (id=1529): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x14}}], 0x2, 0x1) 3.83421517s ago: executing program 3 (id=1530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) (fail_nth: 1) 3.035081412s ago: executing program 4 (id=1531): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff5f) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x2c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000200)=0x5) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x40080031) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f00000000c0)={0x0, 0x0}) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000003c0), 0x2) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) syz_open_dev$hidraw(&(0x7f0000000240), 0x2, 0x20000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r0, 0x20000) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000140)=0x5) 3.007247899s ago: executing program 3 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(0xffffffffffffffff, 0xc0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000200)=0x9543) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, &(0x7f0000002e40)=""/228, 0xe4}, 0x6}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/172, 0xac}], 0x1, &(0x7f0000000640)=""/199, 0xc7}, 0x8001}, {{&(0x7f0000002dc0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000065c0), 0x0, &(0x7f0000003180)=""/242, 0xf2}, 0x7}, {{&(0x7f0000003580)=@phonet, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/101, 0x65}, {&(0x7f00000003c0)=""/171, 0xa0}, {&(0x7f0000005800)=""/146, 0x92}, {&(0x7f00000058c0)=""/230, 0xe6}], 0x4, &(0x7f00000059c0)=""/125, 0x7d}, 0x3}, {{&(0x7f0000003280)=@nl=@unspec, 0x80, &(0x7f0000003480)=[{&(0x7f0000003300)=""/105, 0x69}, {&(0x7f0000003000)=""/8}, {&(0x7f00000033c0)=""/182, 0xb6}], 0x3, &(0x7f0000002cc0)=""/137, 0x83}, 0x100}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005a40)=""/77, 0x4d}, {&(0x7f0000005ac0)=""/31, 0x1f}, {&(0x7f0000005b00)=""/109, 0x6d}, {&(0x7f0000005b80)=""/213, 0xd5}, {&(0x7f0000005c80)=""/178, 0xb2}, {&(0x7f0000005d80)=""/231, 0xe7}, {&(0x7f0000005e80)=""/102, 0x66}, {&(0x7f0000005f00)}], 0x8, &(0x7f0000000480)=""/30, 0x1e}, 0x7}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000006680)=""/4105, 0x1009}, {&(0x7f0000002800)=""/186, 0xba}, {&(0x7f00000028c0)=""/179, 0xb3}, {&(0x7f0000002980)=""/234, 0xea}, {&(0x7f0000002a80)=""/165, 0xa5}, {&(0x7f0000002b40)=""/132, 0x84}, {&(0x7f0000002c00)=""/180, 0xfffffffffffffd51}], 0x9, &(0x7f0000002d80)=""/31, 0x1f}, 0x401}], 0x7, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0x12) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000180)=0xd0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="08030005c7373d5b04", 0x9}}, 0xee) close(r2) mknod(0x0, 0x1ffa, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, 0x0, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.984862129s ago: executing program 0 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge0\x00', 0x100}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'ip6gre0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioperm(0x9, 0x40, 0x8001) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x4) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365"]) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f0000000440)='=\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8C\xe4\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Twx\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|Kg\xe8t\xd6(\xef.\x03.\xe6?\xc3t\xed\xbde\xb3\x92\xbd5\xee\x01\x97%V\x81I\xaaW\xfa\x1d\xf2p\xad\xc0#\xddr\xc3\x97e\x02%K\xdf\x9a&\x18]\x1e\x8f\x9e\xe2Kch\xcf`\xde\n\x1fnl\xdb\xeb\x15%\xfc\xc2?\x85\xb7\x95\xe0\xe8ai\xe8c\xe7b\xff\x9b\xc5V\x81\x98\xb2\xe2\xd4\xe1\x04!\x1a\'hU\xfaOP(\xd1\x82\x8c\xedX\x00'/233) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f077012f26abb8cf79bd604863aeff0f64ebb01f2078364bc11ee07962c22772e11b4", 0x2e}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fc0080fbdf23ea32db0e8f21d5bc27bd49eb067a06", 0x20}], 0x2) 2.832100334s ago: executing program 1 (id=1534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x2a200) syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) close_range(r1, 0xffffffffffffffff, 0x0) 2.131053485s ago: executing program 2 (id=1535): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r7, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x7, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r8, 0x0) shutdown(r8, 0x0) accept4$packet(r8, 0x0, 0x0, 0x80000) syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x8}}}}}, 0x0) 2.071920082s ago: executing program 0 (id=1536): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.044676971s ago: executing program 1 (id=1537): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698", 0x79}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8", 0xb2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be5", 0x85}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4f5b9e40, 0x8, 0x96282c4, 0x2040, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x45, 0x4, 0x2, 0x4}, 0x50) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.899526626s ago: executing program 4 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES8=r5, @ANYRESHEX=r1], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) 1.860379591s ago: executing program 3 (id=1539): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a", 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x801d}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r7], 0x5c}}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x28, r8, 0x410, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xec, 0x72}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x74e04385822fe078}, 0x20000014) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000090}, 0xc0) syz_usb_connect(0x2, 0x3fe, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x18, 0xb5, 0xb4, 0x45, 0x582, 0x12, 0x1ad7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ec, 0x3, 0x40, 0x3, 0x30, 0x1, [{{0x9, 0x4, 0x5d, 0xfe, 0xb, 0x93, 0x92, 0x2e, 0x0, [@generic={0xdc, 0x22, "9a4cb7c2912d503e190b196a63f67a34513b8919dd3a293316b4f67222306a0e9d3a37ca49c8471f89d1b80e7d6e71e46da3da9d7234354febb05033da82c74f41474ebba59a9c9b7a2bbac5ffda840397992e49360996bacd8d5e224f469b430c8b69b540878076ae6cd1fe6d5873ab465f5ca048349b8255a55ce38a97a3d68078d2a07b916d15fefc1af25ed885b470db55b146cf2046057762a6af7ee8263d02bcb661252b121c85c1bbe7a04f5f64f8b402db75c2cabfedf544ed7a148690e3b15b56b2cf34d36e180ed4f97299ea02a82b106e0786edc3"}], [{{0x9, 0x5, 0x86, 0x10, 0x200, 0x0, 0xf, 0xb1}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x2, 0x1b}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x4c7}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x4}, @generic={0xd, 0xa, "58fd12e4ba7981983442b7"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x21, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0x8d, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x16, 0x4, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0xa, 0x24, [@generic={0x3, 0x4, 'h'}, @generic={0x83, 0x19, "9d4d70b90919aaf12307d77b65bebceb91fe812f8e8e44fac3d66bc977e03b7f97c21568a0cbb449e88a02857cbb1f2785072c8e94c999410cf407b41fca70e21e65cfd0f84b3462607bb91b598b8787c87240aa21d3bf68726fc15ccf3e044df5426cc96f302857fecbd57759f7ce3348e764b73bce7f43684a4bb2f54a5bb0b5"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x8, 0x1}, @generic={0xd0, 0x21, "9f165d1f11650e15b6a8a64c616caf1aca266d295ff5feeec1b80d9df25ab6074627c4c1e85c281d6deb5dc4ee86b6a1cb8037244a1dd260c9dd767f6fd5db8632d08830b1f32ed6271d2c085b316f472caeef4e2c7aafcc88b809e06f328b4cc1f53a8563d791d502f91a26fe3508195cd34ba7c8050eb4af8ee84a0b52ec6e544a9cd084cfe08f2db773eb8633a75e0a590c1cdc549c97e768043b036a3b6f88052bffbd2a69afcc346cc6f13af0b24ffec0cd5df5c2e251c968ba1c9867256f0be210a07faf90ad0d0a786311"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x9, 0xa2, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0x3, 0x7, [@generic={0x31, 0x25, "bdfd95c4e18cfd6f2a40b24dee92a6e4977fd41d3c83424d94ddfa91ad125fc98f63278cd1219c2ca8e408dbb220f5"}]}}]}}, {{0x9, 0x4, 0xc0, 0x0, 0x2, 0x2d, 0x26, 0xd4, 0x7, [@hid_hid={0x9, 0x21, 0x8, 0xf6, 0x1, {0x22, 0x64a}}], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x7, 0x4, 0x65, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x13, 0x10, 0x5, 0xe, 0x81}}]}}, {{0x9, 0x4, 0xe7, 0x9, 0x2, 0xf8, 0x9d, 0xab, 0x0, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '%'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x4, 0xe6e, 0x8}, {0x6, 0x24, 0x1a, 0x7fff, 0x2}}, @generic={0x80, 0x5, "bfb8155670ac035e4a561aa9ee9c0940b97962854a3d31e03f24d65b4a1152ce9e1389d926e6b95e8a38f8ccf32d37bf0cd2e76d6264766497477b0e8e02461fd2c52d85a1375800335fb5afd969941ef1c6e7bc5ecabfc02acb4448146222c3261de60d32cff6c2b7a7648455d4bb9f41dc9351d852273ad3f89db95ab6"}], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x14, 0x210, 0x80, 0x6, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4116}]}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='\f@']}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x96, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]}, {0x51, &(0x7f0000000640)=@string={0x51, 0x3, "8ccac8c6d6143e0cfa8b9e65e06218c597200dc9a5fc8924fb2a20c909a4d0279053574a422222ff68d59864327a482ed0d99e879b5360dab4aba87e29bd7d76c5e2d31d8b24bc884b902800000000"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42c}}, {0x0, 0x0}, {0x3f, &(0x7f00000003c0)=@string={0x3f, 0x3, "42be0900004f4ee927abc1c8177eb12f5f7bf148437b32d240d96e6e4c56782afef65cc055bc7423a350d3e1acd4266b7f8ab711ee234d2ec1a58e4d1f"}}, {0x6, &(0x7f0000000000)=@string={0x6, 0x3, "54b65cbc"}}]}) 1.251762334s ago: executing program 1 (id=1540): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd7, 0xaa, 0xff, 0x40, 0x2013, 0x259, 0xe964, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x0, 0x1, 0x33, 0xe7, 0x94, 0x0, [], [{{0x9, 0x5, 0x1c277d69f7841ba1, 0x3, 0x400, 0x5, 0x2, 0x5}}]}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34e40000", @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df250200000005000400040000000900030073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x0, 0x4, 0x2, 0x3, 0x6, 0x9}}, {0x16, 0x2, [0x0, 0x8, 0x3c, 0xc, 0xfff, 0x3, 0x7, 0xbde, 0x3ff]}}, {{0x1c, 0x1, {0x4, 0xb5, 0x5, 0x5, 0x1, 0x1, 0x1, 0x4}}, {0xc, 0x2, [0xb, 0x3, 0x2, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x8, 0x67e1]}}, {{0x1c, 0x1, {0x2, 0xf9, 0x6, 0x0, 0x1, 0x93, 0x6, 0x8}}, {0x14, 0x2, [0xbff, 0x2, 0x9a12, 0x4, 0x4, 0x4, 0x1, 0x3]}}]}]}, 0xdc}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 1.09236868s ago: executing program 2 (id=1541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x27762807ea17ea17, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1c2cad335e03021a, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x84) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x50c, 0x8400) r7 = syz_clone(0x28215800, &(0x7f00000003c0)="5808d984f61a7dfa7ee0cacf623fd800af7ac460f67ec5b4defe06bd321f2348e32608e579ed11df8f21511577d4b6af7b68500419ce1da64fd33d4f5edb4714846f4ba59fda501130a75f3eec8f4de6ad0872f3ed49b1384c80877c5ed4cc8a548c7a78a559bd3f0a9c26bba345b4b33c5fb556c78f39b841d991cf690e10e611e935dde373bfa523e77a065e20e6847b492636737b565d764ca6479aa2698f266ccec172862876b395069e2225f0c64abcf2", 0xb3, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000600)="45ef62c4493cc6a2ccc0549ac7647c3bb47e0d17a155f9db48b175eac9ef9a8d4e8afa8bf67232a470486cc76670d58a21b14017e3f583ba982f585c01d8938ea088a8719991dbaba65ec593675985eea4241059f6d1e8ae263f0d9e43fce14c1c4ebf0535942f10da89b8473ab9fefbaa6b2b67ee92cfc068e623c3dacf74ab198954f7c271c6f3fb601686782214998c0165060f15ffb77c9dc4b7c4f2960a47ee01793f909061b2d219a5dfaca968e379590db216") ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f0000000700)={{0x3, 0x2, 0x8, 0xdf86, 'syz1\x00', 0x9}, 0x1, 0x4, 0xffffffff, r7, 0x3, 0x8b52, 'syz0\x00', &(0x7f00000006c0)=['\x00', '\x03\x00', '\x00'], 0x4}) fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000300)=""/145, 0x91}], 0x1, 0x8, 0x6) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x9, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 362.427305ms ago: executing program 4 (id=1542): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r0, 0x0, r0, 0x0, 0x65) (fail_nth: 1) 0s ago: executing program 4 (id=1543): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000019780)=""/102387, &(0x7f00000003c0)=0xfffffffffffffdc8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x511001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x5f, 0x0, 0x0, 0xfffffffe}, 0x28) socketpair(0x1f, 0x6, 0xffff8001, &(0x7f00000001c0)) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/wireless\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=""/1, 0x2}, 0xffffffffffffff98) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x800007) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x3, r2, 0xc, {0x8, 0x8}, 0x10}, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) kernel console output (not intermixed with test programs): permissive=1 [ 468.344431][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 468.344472][ T30] audit: type=1400 audit(1763022462.345:456): avc: denied { open } for pid=10353 comm="syz.1.1192" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 468.562016][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 468.570278][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.580668][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.596241][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 468.606212][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.615722][ T24] usb 5-1: Product: syz [ 468.619944][ T24] usb 5-1: Manufacturer: syz [ 468.624738][ T24] usb 5-1: SerialNumber: syz [ 468.639238][ T24] usb 5-1: config 0 descriptor?? [ 469.358932][ T30] audit: type=1400 audit(1763022463.375:457): avc: denied { getopt } for pid=10359 comm="syz.2.1194" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 470.404932][T10354] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 470.412719][T10354] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 470.422731][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 470.423642][T10354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 470.434783][T10354] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 470.444533][T10354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 470.450506][T10354] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 470.458725][T10354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 470.466002][T10354] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 470.474124][T10354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 470.480141][T10354] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 470.620109][ T30] audit: type=1400 audit(1763022464.645:458): avc: denied { setopt } for pid=10364 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 470.656640][ T30] audit: type=1400 audit(1763022464.645:459): avc: denied { bind } for pid=10364 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 470.695301][ T30] audit: type=1400 audit(1763022464.645:460): avc: denied { name_bind } for pid=10364 comm="syz.2.1195" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 470.720585][ T30] audit: type=1400 audit(1763022464.645:461): avc: denied { node_bind } for pid=10364 comm="syz.2.1195" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 470.747276][ T30] audit: type=1400 audit(1763022464.685:462): avc: denied { write } for pid=10366 comm="syz.3.1196" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 470.774710][T10372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1197'. [ 470.784113][ T30] audit: type=1400 audit(1763022464.805:463): avc: denied { nlmsg_read } for pid=10370 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.470521][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 471.652144][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 471.857326][ T5893] usb 5-1: USB disconnect, device number 49 [ 471.876493][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.922307][ T24] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 471.941825][ T24] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 471.962851][ T24] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 472.034726][ T24] usb 3-1: config 128 has no interface number 0 [ 472.061099][ T24] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 472.128579][ T24] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.171727][ T24] usb 3-1: config 128 interface 127 has no altsetting 0 [ 472.386386][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 472.574182][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 472.580299][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 472.589203][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 472.595380][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 472.601438][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 472.924235][T10393] kAFS: No cell specified [ 472.953279][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.961539][ T24] usb 3-1: Product: syz [ 472.967883][ T24] usb 3-1: Manufacturer: syz [ 472.973819][ T24] usb 3-1: SerialNumber: syz [ 473.302292][ T5893] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 473.319847][ T24] usb 3-1: USB disconnect, device number 44 [ 473.373778][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.512252][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 474.322291][ T5893] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 474.336760][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.349491][ T5893] usb 5-1: Product: syz [ 474.353787][ T5893] usb 5-1: Manufacturer: syz [ 474.372052][ T5893] usb 5-1: SerialNumber: syz [ 474.392651][ T5893] usb 5-1: config 0 descriptor?? [ 474.753623][T10417] FAULT_INJECTION: forcing a failure. [ 474.753623][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 474.766439][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.3.1208 Not tainted syzkaller #0 PREEMPT(full) [ 474.766466][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.766478][T10417] Call Trace: [ 474.766485][T10417] [ 474.766492][T10417] dump_stack_lvl+0x16c/0x1f0 [ 474.766528][T10417] should_fail_ex+0x512/0x640 [ 474.766551][T10417] ? fs_reclaim_acquire+0xae/0x150 [ 474.766578][T10417] should_failslab+0xc2/0x120 [ 474.766602][T10417] __kmalloc_noprof+0xdd/0x880 [ 474.766628][T10417] ? finish_task_switch.isra.0+0x221/0xc10 [ 474.766655][T10417] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 474.766685][T10417] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 474.766708][T10417] tomoyo_realpath_from_path+0xc2/0x6e0 [ 474.766735][T10417] ? tomoyo_profile+0x47/0x60 [ 474.766764][T10417] tomoyo_path_number_perm+0x245/0x580 [ 474.766783][T10417] ? tomoyo_path_number_perm+0x237/0x580 [ 474.766807][T10417] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.766865][T10417] ? hook_file_ioctl_common+0x145/0x410 [ 474.766895][T10417] ? __rcu_read_unlock+0x2bc/0x550 [ 474.766920][T10417] ? __fget_files+0x20e/0x3c0 [ 474.766946][T10417] security_file_ioctl+0x9b/0x240 [ 474.766971][T10417] __x64_sys_ioctl+0xb7/0x210 [ 474.767001][T10417] do_syscall_64+0xcd/0xfa0 [ 474.767023][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.767045][T10417] RIP: 0033:0x7fe10018f6c9 [ 474.767061][T10417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.767080][T10417] RSP: 002b:00007fe101017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.767099][T10417] RAX: ffffffffffffffda RBX: 00007fe1003e6180 RCX: 00007fe10018f6c9 [ 474.767113][T10417] RDX: 0000200000000040 RSI: 00000000c020aa08 RDI: 0000000000000004 [ 474.767126][T10417] RBP: 00007fe101017090 R08: 0000000000000000 R09: 0000000000000000 [ 474.767139][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.767151][T10417] R13: 00007fe1003e6218 R14: 00007fe1003e6180 R15: 00007ffc6e86ec38 [ 474.767181][T10417] [ 474.767315][T10417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.878282][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 474.886013][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 474.886965][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 474.912170][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 474.950231][ T5893] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.122369][T10423] autofs: Bad value for 'fd' [ 476.431049][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 476.431072][ T30] audit: type=1400 audit(1763022470.025:465): avc: denied { connect } for pid=10427 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 476.528773][ T30] audit: type=1400 audit(1763022470.035:466): avc: denied { ioctl } for pid=10427 comm="syz.0.1212" path="socket:[29709]" dev="sockfs" ino=29709 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 476.570114][ T5893] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 476.587178][ T5893] usb 5-1: USB disconnect, device number 50 [ 476.662316][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.822099][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 476.856538][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.900834][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.931426][T10442] ======================================================= [ 476.931426][T10442] WARNING: The mand mount option has been deprecated and [ 476.931426][T10442] and is ignored by this kernel. Remove the mand [ 476.931426][T10442] option from the mount to silence this warning. [ 476.931426][T10442] ======================================================= [ 476.968724][T10442] 9pnet_virtio: no channels available for device [ 477.267226][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 477.296757][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.307664][ T24] usb 4-1: Product: syz [ 477.312086][ T30] audit: type=1800 audit(1763022471.345:467): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1217" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 477.336191][ T24] usb 4-1: Manufacturer: syz [ 477.346315][ T24] usb 4-1: SerialNumber: syz [ 477.390101][ T24] usb 4-1: config 0 descriptor?? [ 478.181398][ T2965] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.804238][ T5893] usb 4-1: USB disconnect, device number 42 [ 479.038707][T10470] FAULT_INJECTION: forcing a failure. [ 479.038707][T10470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.051879][T10470] CPU: 0 UID: 0 PID: 10470 Comm: syz.0.1223 Not tainted syzkaller #0 PREEMPT(full) [ 479.051907][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.051918][T10470] Call Trace: [ 479.051927][T10470] [ 479.051936][T10470] dump_stack_lvl+0x16c/0x1f0 [ 479.051974][T10470] should_fail_ex+0x512/0x640 [ 479.052002][T10470] _copy_from_user+0x2e/0xd0 [ 479.052029][T10470] copy_msghdr_from_user+0x98/0x160 [ 479.052065][T10470] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 479.052114][T10470] ___sys_sendmsg+0xfe/0x1d0 [ 479.052142][T10470] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.052166][T10470] ? __lock_acquire+0x622/0x1c90 [ 479.052222][T10470] __sys_sendmsg+0x16d/0x220 [ 479.052249][T10470] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.052296][T10470] do_syscall_64+0xcd/0xfa0 [ 479.052318][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.052340][T10470] RIP: 0033:0x7f01ed38f6c9 [ 479.052362][T10470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.052388][T10470] RSP: 002b:00007f01ee249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.052408][T10470] RAX: ffffffffffffffda RBX: 00007f01ed5e6180 RCX: 00007f01ed38f6c9 [ 479.052422][T10470] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 479.052435][T10470] RBP: 00007f01ee249090 R08: 0000000000000000 R09: 0000000000000000 [ 479.052447][T10470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.052459][T10470] R13: 00007f01ed5e6218 R14: 00007f01ed5e6180 R15: 00007fffd08bba68 [ 479.052495][T10470] [ 479.412160][ T5893] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 479.562093][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 479.574701][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.584456][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.592642][ T5893] usb 4-1: Product: syz [ 479.598869][ T5893] usb 4-1: Manufacturer: syz [ 479.605198][ T5893] usb 4-1: SerialNumber: syz [ 479.612706][ T5893] usb 4-1: config 0 descriptor?? [ 479.894756][ T5893] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 480.004761][T10481] overlayfs: overlapping lowerdir path [ 480.182154][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 480.188462][ T5817] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 480.195923][ T5827] Bluetooth: hci6: command 0x1003 tx timeout [ 481.062104][ T5921] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 481.145211][ T5893] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 481.157861][ T5893] usb 4-1: USB disconnect, device number 43 [ 481.274389][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 481.312920][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 481.352148][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.394070][ T5921] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 481.412097][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.437421][ T5921] usb 3-1: Product: syz [ 481.451850][ T5921] usb 3-1: Manufacturer: syz [ 481.477879][ T5921] usb 3-1: SerialNumber: syz [ 481.506945][ T5921] usb 3-1: config 0 descriptor?? [ 481.548065][T10491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.633754][ T5921] option 3-1:0.0: GSM modem (1-port) converter detected [ 482.893168][T10526] FAULT_INJECTION: forcing a failure. [ 482.893168][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.906684][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.1.1238 Not tainted syzkaller #0 PREEMPT(full) [ 482.906710][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.906721][T10526] Call Trace: [ 482.906728][T10526] [ 482.906736][T10526] dump_stack_lvl+0x16c/0x1f0 [ 482.906770][T10526] should_fail_ex+0x512/0x640 [ 482.906798][T10526] _copy_from_user+0x2e/0xd0 [ 482.906824][T10526] copy_msghdr_from_user+0x98/0x160 [ 482.906849][T10526] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 482.906893][T10526] ___sys_sendmsg+0xfe/0x1d0 [ 482.906918][T10526] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.906939][T10526] ? __lock_acquire+0x622/0x1c90 [ 482.906993][T10526] __sys_sendmsg+0x16d/0x220 [ 482.907017][T10526] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.907050][T10526] ? xfd_validate_state+0x61/0x180 [ 482.907087][T10526] do_syscall_64+0xcd/0xfa0 [ 482.907109][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.907129][T10526] RIP: 0033:0x7f7e5178f6c9 [ 482.907144][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.907162][T10526] RSP: 002b:00007f7e52661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.907180][T10526] RAX: ffffffffffffffda RBX: 00007f7e519e5fa0 RCX: 00007f7e5178f6c9 [ 482.907193][T10526] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 482.907205][T10526] RBP: 00007f7e52661090 R08: 0000000000000000 R09: 0000000000000000 [ 482.907217][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.907228][T10526] R13: 00007f7e519e6038 R14: 00007f7e519e5fa0 R15: 00007ffcdfb1f0c8 [ 482.907258][T10526] [ 483.202095][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 483.232098][ T5866] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 483.356115][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 483.364104][ T24] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 483.374196][ T24] usb 5-1: config 0 has no interface number 0 [ 483.382148][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 483.395217][ T24] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 483.398070][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 483.416803][ T24] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 483.422270][ T5866] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 483.436209][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.485125][ T5866] usb 1-1: Product: syz [ 483.485363][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 483.499509][ T5866] usb 1-1: Manufacturer: syz [ 483.510626][ T5866] usb 1-1: SerialNumber: syz [ 483.534646][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.545371][ T24] usb 5-1: Product: syz [ 483.549671][ T24] usb 5-1: Manufacturer: syz [ 483.555030][ T24] usb 5-1: SerialNumber: syz [ 483.591694][ T24] usb 5-1: config 0 descriptor?? [ 483.591734][ T5866] usb 1-1: config 0 descriptor?? [ 483.615951][ T24] appletouch 5-1:0.154: Could not find int-in endpoint [ 483.626293][ T24] appletouch 5-1:0.154: probe with driver appletouch failed with error -5 [ 483.639934][ T24] usbhid 5-1:0.154: couldn't find an input interrupt endpoint [ 483.645916][ T5866] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 483.683244][ T5866] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 483.831354][ T24] usb 3-1: USB disconnect, device number 45 [ 483.846107][ T24] option 3-1:0.0: device disconnected [ 483.987501][ T30] audit: type=1326 audit(1763022478.015:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.481403][ T30] audit: type=1326 audit(1763022478.045:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.505301][ T30] audit: type=1326 audit(1763022478.045:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e5338f703 code=0x7ffc0000 [ 484.530588][ T30] audit: type=1326 audit(1763022478.045:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e5338f703 code=0x7ffc0000 [ 484.554796][ T30] audit: type=1326 audit(1763022478.045:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.585899][ T5866] em28xx 1-1:0.0: chip ID is em2765 [ 484.593666][ T30] audit: type=1326 audit(1763022478.255:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.618098][ T30] audit: type=1326 audit(1763022478.545:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.642275][ T30] audit: type=1326 audit(1763022478.545:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.668220][ T30] audit: type=1326 audit(1763022478.545:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 484.706254][ T5873] usb 5-1: USB disconnect, device number 51 [ 484.812342][T10544] FAULT_INJECTION: forcing a failure. [ 484.812342][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.825643][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.1243 Not tainted syzkaller #0 PREEMPT(full) [ 484.825670][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.825682][T10544] Call Trace: [ 484.825689][T10544] [ 484.825696][T10544] dump_stack_lvl+0x16c/0x1f0 [ 484.825736][T10544] should_fail_ex+0x512/0x640 [ 484.825764][T10544] _copy_from_user+0x2e/0xd0 [ 484.825790][T10544] copy_msghdr_from_user+0x98/0x160 [ 484.825818][T10544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 484.825843][T10544] ? kvm_sched_clock_read+0x11/0x20 [ 484.825877][T10544] ? lock_acquire+0x179/0x350 [ 484.825897][T10544] ? find_held_lock+0x2b/0x80 [ 484.825926][T10544] ___sys_sendmsg+0xfe/0x1d0 [ 484.825954][T10544] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.825979][T10544] ? __lock_acquire+0x622/0x1c90 [ 484.826036][T10544] __sys_sendmsg+0x16d/0x220 [ 484.826063][T10544] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.826088][T10544] ? rcu_is_watching+0x12/0xc0 [ 484.826132][T10544] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 484.826165][T10544] do_syscall_64+0xcd/0xfa0 [ 484.826186][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.826207][T10544] RIP: 0033:0x7f4c08f8f6c9 [ 484.826224][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.826244][T10544] RSP: 002b:00007f4c09e61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.826263][T10544] RAX: ffffffffffffffda RBX: 00007f4c091e6180 RCX: 00007f4c08f8f6c9 [ 484.826277][T10544] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000005 [ 484.826290][T10544] RBP: 00007f4c09e61090 R08: 0000000000000000 R09: 0000000000000000 [ 484.826302][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.826314][T10544] R13: 00007f4c091e6218 R14: 00007f4c091e6180 R15: 00007ffdce919478 [ 484.826344][T10544] [ 485.057623][ T30] audit: type=1326 audit(1763022478.545:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.4.1237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5338f6c9 code=0x7ffc0000 [ 485.302087][ T5823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 485.322579][ T5866] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 485.331577][ T5866] em28xx 1-1:0.0: board has no eeprom [ 485.457968][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.478730][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.489591][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.507608][ T5823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.517231][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.528483][ T5823] usb 2-1: config 0 descriptor?? [ 485.541339][T10524] FAULT_INJECTION: forcing a failure. [ 485.541339][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 485.565798][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.0.1239 Not tainted syzkaller #0 PREEMPT(full) [ 485.565827][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.565842][T10524] Call Trace: [ 485.565848][T10524] [ 485.565857][T10524] dump_stack_lvl+0x16c/0x1f0 [ 485.565885][T10524] should_fail_ex+0x512/0x640 [ 485.565899][T10524] ? fs_reclaim_acquire+0xae/0x150 [ 485.565917][T10524] should_failslab+0xc2/0x120 [ 485.565932][T10524] __kmalloc_noprof+0xdd/0x880 [ 485.565957][T10524] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 485.565989][T10524] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 485.566012][T10524] tomoyo_realpath_from_path+0xc2/0x6e0 [ 485.566030][T10524] ? tomoyo_profile+0x47/0x60 [ 485.566046][T10524] tomoyo_path_number_perm+0x245/0x580 [ 485.566056][T10524] ? tomoyo_path_number_perm+0x237/0x580 [ 485.566069][T10524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.566087][T10524] ? find_held_lock+0x2b/0x80 [ 485.566139][T10524] ? find_held_lock+0x2b/0x80 [ 485.566163][T10524] ? hook_file_ioctl_common+0x145/0x410 [ 485.566183][T10524] ? __fget_files+0x20e/0x3c0 [ 485.566197][T10524] security_file_ioctl+0x9b/0x240 [ 485.566211][T10524] __x64_sys_ioctl+0xb7/0x210 [ 485.566229][T10524] do_syscall_64+0xcd/0xfa0 [ 485.566251][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.566273][T10524] RIP: 0033:0x7f01ed38f6c9 [ 485.566290][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.566309][T10524] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.566320][T10524] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 485.566327][T10524] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 485.566335][T10524] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 485.566341][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.566348][T10524] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 485.566364][T10524] [ 485.566648][T10524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.881688][ T5866] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 485.894075][ T5866] em28xx 1-1:0.0: dvb set to bulk mode. [ 485.900133][ T5893] em28xx 1-1:0.0: Binding DVB extension [ 485.995058][ T5823] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 486.046089][ T5823] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 486.252839][T10546] FAULT_INJECTION: forcing a failure. [ 486.252839][T10546] name failslab, interval 1, probability 0, space 0, times 0 [ 486.312404][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.1.1244 Not tainted syzkaller #0 PREEMPT(full) [ 486.312433][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.312445][T10546] Call Trace: [ 486.312454][T10546] [ 486.312465][T10546] dump_stack_lvl+0x16c/0x1f0 [ 486.312501][T10546] should_fail_ex+0x512/0x640 [ 486.312525][T10546] ? fs_reclaim_acquire+0xae/0x150 [ 486.312552][T10546] should_failslab+0xc2/0x120 [ 486.312576][T10546] __kmalloc_noprof+0xdd/0x880 [ 486.312604][T10546] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 486.312635][T10546] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 486.312657][T10546] tomoyo_realpath_from_path+0xc2/0x6e0 [ 486.312685][T10546] ? tomoyo_profile+0x47/0x60 [ 486.312713][T10546] tomoyo_path_number_perm+0x245/0x580 [ 486.312732][T10546] ? tomoyo_path_number_perm+0x237/0x580 [ 486.312755][T10546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.312777][T10546] ? find_held_lock+0x2b/0x80 [ 486.312830][T10546] ? find_held_lock+0x2b/0x80 [ 486.312854][T10546] ? hook_file_ioctl_common+0x145/0x410 [ 486.312888][T10546] ? __fget_files+0x20e/0x3c0 [ 486.312914][T10546] security_file_ioctl+0x9b/0x240 [ 486.312939][T10546] __x64_sys_ioctl+0xb7/0x210 [ 486.312974][T10546] do_syscall_64+0xcd/0xfa0 [ 486.312997][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.313018][T10546] RIP: 0033:0x7f7e5178f6c9 [ 486.313035][T10546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.313053][T10546] RSP: 002b:00007f7e52661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.313071][T10546] RAX: ffffffffffffffda RBX: 00007f7e519e5fa0 RCX: 00007f7e5178f6c9 [ 486.313083][T10546] RDX: 00002000000000c0 RSI: 00000000d01c4813 RDI: 0000000000000004 [ 486.313095][T10546] RBP: 00007f7e52661090 R08: 0000000000000000 R09: 0000000000000000 [ 486.313107][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.313119][T10546] R13: 00007f7e519e6038 R14: 00007f7e519e5fa0 R15: 00007ffcdfb1f0c8 [ 486.313150][T10546] [ 486.313208][T10546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 486.915552][ T5823] usb 2-1: USB disconnect, device number 34 [ 487.066400][ T5873] usb 1-1: USB disconnect, device number 45 [ 487.073132][ T5873] em28xx 1-1:0.0: Disconnecting em28xx [ 487.158611][ T5893] em28xx 1-1:0.0: Registering input extension [ 487.203128][ T5873] em28xx 1-1:0.0: Closing input extension [ 487.299987][ T5873] em28xx 1-1:0.0: Freeing device [ 487.393666][T10573] FAULT_INJECTION: forcing a failure. [ 487.393666][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 487.432299][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.4.1253 Not tainted syzkaller #0 PREEMPT(full) [ 487.432325][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.432335][T10573] Call Trace: [ 487.432342][T10573] [ 487.432350][T10573] dump_stack_lvl+0x16c/0x1f0 [ 487.432385][T10573] should_fail_ex+0x512/0x640 [ 487.432409][T10573] ? fs_reclaim_acquire+0xae/0x150 [ 487.432435][T10573] should_failslab+0xc2/0x120 [ 487.432458][T10573] __kmalloc_noprof+0xdd/0x880 [ 487.432487][T10573] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.432517][T10573] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.432540][T10573] tomoyo_realpath_from_path+0xc2/0x6e0 [ 487.432566][T10573] ? tomoyo_profile+0x47/0x60 [ 487.432595][T10573] tomoyo_path_number_perm+0x245/0x580 [ 487.432615][T10573] ? tomoyo_path_number_perm+0x237/0x580 [ 487.432648][T10573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 487.432670][T10573] ? find_held_lock+0x2b/0x80 [ 487.432722][T10573] ? find_held_lock+0x2b/0x80 [ 487.432746][T10573] ? hook_file_ioctl_common+0x145/0x410 [ 487.432779][T10573] ? __fget_files+0x20e/0x3c0 [ 487.432806][T10573] security_file_ioctl+0x9b/0x240 [ 487.432830][T10573] __x64_sys_ioctl+0xb7/0x210 [ 487.432861][T10573] do_syscall_64+0xcd/0xfa0 [ 487.432882][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.432903][T10573] RIP: 0033:0x7f0e5338f6c9 [ 487.432920][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.432938][T10573] RSP: 002b:00007f0e54153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.432957][T10573] RAX: ffffffffffffffda RBX: 00007f0e535e5fa0 RCX: 00007f0e5338f6c9 [ 487.432971][T10573] RDX: 0000200000000080 RSI: 000000008028640c RDI: 0000000000000003 [ 487.432984][T10573] RBP: 00007f0e54153090 R08: 0000000000000000 R09: 0000000000000000 [ 487.432996][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.433008][T10573] R13: 00007f0e535e6038 R14: 00007f0e535e5fa0 R15: 00007ffe127edd38 [ 487.433039][T10573] [ 487.433047][T10573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.011067][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 489.011088][ T30] audit: type=1326 audit(1763022483.025:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 489.896712][ T30] audit: type=1326 audit(1763022483.025:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 489.947819][ T30] audit: type=1326 audit(1763022483.035:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 489.981399][ T30] audit: type=1326 audit(1763022483.035:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 490.007131][ T30] audit: type=1326 audit(1763022483.085:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 490.082154][ T30] audit: type=1326 audit(1763022483.085:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 490.332209][ T30] audit: type=1326 audit(1763022483.095:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=40000003 syscall=95 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 490.362885][ T30] audit: type=1326 audit(1763022483.095:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 490.886140][ T30] audit: type=1326 audit(1763022483.095:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x7ffc0000 [ 490.977720][ T30] audit: type=1326 audit(1763022484.935:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10619 comm="syz.4.1267" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e5338f6c9 code=0x0 [ 491.000567][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.417924][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 491.426914][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 493.789385][ T992] wlan0: Trigger new scan to find an IBSS to join [ 493.945102][T10658] binder: BINDER_SET_CONTEXT_MGR already set [ 493.951115][T10658] binder: 10656:10658 ioctl 4018620d 200000000040 returned -16 [ 494.219032][ T30] audit: type=1400 audit(1763022488.245:534): avc: denied { getopt } for pid=10670 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.468864][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 494.479698][ T30] audit: type=1400 audit(1763022488.495:535): avc: denied { ioctl } for pid=10662 comm="syz.4.1281" path="socket:[29614]" dev="sockfs" ino=29614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 495.182795][ T30] audit: type=1400 audit(1763022489.205:536): avc: denied { listen } for pid=10683 comm="syz.1.1285" lport=52906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 495.293637][ T30] audit: type=1400 audit(1763022489.215:537): avc: denied { setopt } for pid=10683 comm="syz.1.1285" lport=52906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 495.339961][ T30] audit: type=1400 audit(1763022489.215:538): avc: denied { write } for pid=10683 comm="syz.1.1285" lport=52906 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 495.638535][T10700] FAULT_INJECTION: forcing a failure. [ 495.638535][T10700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.673170][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.0.1289 Not tainted syzkaller #0 PREEMPT(full) [ 495.673188][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.673195][T10700] Call Trace: [ 495.673199][T10700] [ 495.673204][T10700] dump_stack_lvl+0x16c/0x1f0 [ 495.673227][T10700] should_fail_ex+0x512/0x640 [ 495.673243][T10700] _copy_from_user+0x2e/0xd0 [ 495.673258][T10700] __sys_bpf+0x248/0x4980 [ 495.673278][T10700] ? __pfx___sys_bpf+0x10/0x10 [ 495.673293][T10700] ? find_held_lock+0x2b/0x80 [ 495.673311][T10700] ? find_held_lock+0x2b/0x80 [ 495.673330][T10700] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 495.673351][T10700] ? fput+0x9b/0xd0 [ 495.673365][T10700] ? ksys_write+0x1ac/0x250 [ 495.673375][T10700] ? __pfx_ksys_write+0x10/0x10 [ 495.673388][T10700] __x64_sys_bpf+0x78/0xc0 [ 495.673398][T10700] ? lockdep_hardirqs_on+0x7c/0x110 [ 495.673408][T10700] do_syscall_64+0xcd/0xfa0 [ 495.673419][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.673431][T10700] RIP: 0033:0x7f01ed38f6c9 [ 495.673440][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.673450][T10700] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.673461][T10700] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 495.673468][T10700] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 495.673475][T10700] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 495.673482][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.673489][T10700] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 495.673504][T10700] [ 495.992732][T10707] evm: overlay not supported [ 496.102539][ T5873] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 496.264028][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.274459][ T5873] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 496.283826][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.352044][ T5921] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 496.464188][ T5873] usb 2-1: config 0 descriptor?? [ 496.484881][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 496.502129][ T5921] usb 1-1: device descriptor read/64, error -71 [ 496.742378][ T5921] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 496.888013][ T5921] usb 1-1: device descriptor read/64, error -71 [ 496.893590][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 496.908577][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 496.921738][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 496.932671][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 496.940067][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 496.952055][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 496.960327][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 496.981154][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 497.012663][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 497.018132][ T5921] usb usb1-port1: attempt power cycle [ 497.072073][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 497.287578][ T30] audit: type=1400 audit(1763022491.315:539): avc: denied { mount } for pid=10731 comm="syz.2.1300" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 497.313980][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 497.324652][T10738] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 497.332953][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 497.342503][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 497.367475][ T5921] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 497.371139][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 497.399012][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 497.415266][ T30] audit: type=1400 audit(1763022491.435:540): avc: denied { create } for pid=10731 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 497.416028][ T5921] usb 1-1: device descriptor read/8, error -71 [ 497.483966][T10745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1300'. [ 497.501845][ T5873] pwc: Registered as video103. [ 497.523564][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 497.573911][ T30] audit: type=1400 audit(1763022491.435:541): avc: denied { ioctl } for pid=10731 comm="syz.2.1300" path="socket:[30835]" dev="sockfs" ino=30835 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 497.622839][ T5873] usb 2-1: USB disconnect, device number 35 [ 497.623934][ T13] wlan0: Trigger new scan to find an IBSS to join [ 497.688893][ T30] audit: type=1400 audit(1763022491.565:542): avc: denied { create } for pid=10731 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 497.719383][ T30] audit: type=1400 audit(1763022491.675:543): avc: denied { connect } for pid=10748 comm="syz.3.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 497.762284][ T5921] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 497.809693][ T5921] usb 1-1: device descriptor read/8, error -71 [ 497.954073][ T5921] usb usb1-port1: unable to enumerate USB device [ 498.023795][T10756] FAULT_INJECTION: forcing a failure. [ 498.023795][T10756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.095007][T10756] CPU: 1 UID: 0 PID: 10756 Comm: syz.1.1304 Not tainted syzkaller #0 PREEMPT(full) [ 498.095035][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.095047][T10756] Call Trace: [ 498.095053][T10756] [ 498.095062][T10756] dump_stack_lvl+0x16c/0x1f0 [ 498.095097][T10756] should_fail_ex+0x512/0x640 [ 498.095124][T10756] _copy_from_user+0x2e/0xd0 [ 498.095150][T10756] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 498.095175][T10756] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 498.095198][T10756] ? sock_has_perm+0x259/0x2f0 [ 498.095228][T10756] ? __pfx_sock_has_perm+0x10/0x10 [ 498.095262][T10756] raw_setsockopt+0x9c5/0x1260 [ 498.095287][T10756] ? __pfx_raw_setsockopt+0x10/0x10 [ 498.095314][T10756] ? selinux_socket_setsockopt+0x6a/0x80 [ 498.095334][T10756] ? __pfx_raw_setsockopt+0x10/0x10 [ 498.095356][T10756] do_sock_setsockopt+0xf3/0x1d0 [ 498.095390][T10756] __sys_setsockopt+0x1a0/0x230 [ 498.095420][T10756] __x64_sys_setsockopt+0xbd/0x160 [ 498.095444][T10756] ? do_syscall_64+0x91/0xfa0 [ 498.095462][T10756] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.095481][T10756] do_syscall_64+0xcd/0xfa0 [ 498.095502][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.095523][T10756] RIP: 0033:0x7f7e5178f6c9 [ 498.095539][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.095558][T10756] RSP: 002b:00007f7e52661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.095577][T10756] RAX: ffffffffffffffda RBX: 00007f7e519e5fa0 RCX: 00007f7e5178f6c9 [ 498.095590][T10756] RDX: 0000000000000005 RSI: 0000000000000065 RDI: 0000000000000003 [ 498.095602][T10756] RBP: 00007f7e52661090 R08: 0000000000000004 R09: 0000000000000000 [ 498.095615][T10756] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 498.095627][T10756] R13: 00007f7e519e6038 R14: 00007f7e519e5fa0 R15: 00007ffcdfb1f0c8 [ 498.095658][T10756] [ 498.295503][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.553501][ T5873] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 498.715082][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.745589][ T5873] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.776692][ T5873] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 498.797462][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.816489][ T5873] usb 3-1: config 0 descriptor?? [ 498.890624][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.202748][T10762] create_pit_timer: 4 callbacks suppressed [ 499.202760][T10762] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 499.226582][T10762] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 499.288289][T10762] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 499.357008][T10762] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 499.389684][T10762] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 499.404769][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 499.404793][ T30] audit: type=1326 audit(1763022493.435:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c08f8f6c9 code=0x7ffc0000 [ 499.404862][ T30] audit: type=1326 audit(1763022493.435:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c08f8f6c9 code=0x7ffc0000 [ 499.499973][ T30] audit: type=1400 audit(1763022493.525:556): avc: denied { ioctl } for pid=10787 comm="syz.4.1313" path="socket:[30978]" dev="sockfs" ino=30978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 499.535697][T10794] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 499.562469][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.566967][ T5873] usb 3-1: USB disconnect, device number 46 [ 499.606894][T10800] FAULT_INJECTION: forcing a failure. [ 499.606894][T10800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.606926][T10800] CPU: 0 UID: 0 PID: 10800 Comm: syz.0.1316 Not tainted syzkaller #0 PREEMPT(full) [ 499.606951][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.606962][T10800] Call Trace: [ 499.606969][T10800] [ 499.606976][T10800] dump_stack_lvl+0x16c/0x1f0 [ 499.607011][T10800] should_fail_ex+0x512/0x640 [ 499.607039][T10800] _copy_from_user+0x2e/0xd0 [ 499.607065][T10800] do_sock_getsockopt+0x3ca/0x440 [ 499.607098][T10800] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 499.607126][T10800] ? __fget_files+0x204/0x3c0 [ 499.607157][T10800] __sys_getsockopt+0x12f/0x260 [ 499.607187][T10800] __x64_sys_getsockopt+0xbd/0x160 [ 499.607207][T10800] ? do_syscall_64+0x91/0xfa0 [ 499.607224][T10800] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.607241][T10800] do_syscall_64+0xcd/0xfa0 [ 499.607260][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.607280][T10800] RIP: 0033:0x7f01ed38f6c9 [ 499.607293][T10800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.607311][T10800] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 499.607330][T10800] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 499.607344][T10800] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 499.607356][T10800] RBP: 00007f01ee28b090 R08: 00002000000002c0 R09: 0000000000000000 [ 499.607368][T10800] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 499.607380][T10800] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 499.607410][T10800] [ 499.710745][T10803] FAULT_INJECTION: forcing a failure. [ 499.710745][T10803] name failslab, interval 1, probability 0, space 0, times 0 [ 499.710792][T10803] CPU: 0 UID: 0 PID: 10803 Comm: syz.0.1317 Not tainted syzkaller #0 PREEMPT(full) [ 499.710816][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.710827][T10803] Call Trace: [ 499.710834][T10803] [ 499.710841][T10803] dump_stack_lvl+0x16c/0x1f0 [ 499.710877][T10803] should_fail_ex+0x512/0x640 [ 499.710901][T10803] ? fs_reclaim_acquire+0xae/0x150 [ 499.710926][T10803] should_failslab+0xc2/0x120 [ 499.710950][T10803] __kmalloc_noprof+0xdd/0x880 [ 499.710977][T10803] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 499.711007][T10803] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 499.711029][T10803] tomoyo_realpath_from_path+0xc2/0x6e0 [ 499.711055][T10803] ? tomoyo_profile+0x47/0x60 [ 499.711081][T10803] tomoyo_path_number_perm+0x245/0x580 [ 499.711101][T10803] ? tomoyo_path_number_perm+0x237/0x580 [ 499.711123][T10803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.711145][T10803] ? find_held_lock+0x2b/0x80 [ 499.711197][T10803] ? find_held_lock+0x2b/0x80 [ 499.711220][T10803] ? hook_file_ioctl_common+0x145/0x410 [ 499.711253][T10803] ? __fget_files+0x20e/0x3c0 [ 499.711279][T10803] security_file_ioctl+0x9b/0x240 [ 499.711304][T10803] __x64_sys_ioctl+0xb7/0x210 [ 499.711334][T10803] do_syscall_64+0xcd/0xfa0 [ 499.711355][T10803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.711376][T10803] RIP: 0033:0x7f01ed38f6c9 [ 499.711392][T10803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.711410][T10803] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.711430][T10803] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 499.711443][T10803] RDX: 0000200000000040 RSI: 000000000000541b RDI: 0000000000000003 [ 499.711456][T10803] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 499.711467][T10803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.711479][T10803] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 499.711510][T10803] [ 499.711517][T10803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.953084][T10807] FAULT_INJECTION: forcing a failure. [ 499.953084][T10807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.243227][T10807] CPU: 1 UID: 0 PID: 10807 Comm: syz.0.1319 Not tainted syzkaller #0 PREEMPT(full) [ 500.243256][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.243268][T10807] Call Trace: [ 500.243275][T10807] [ 500.243283][T10807] dump_stack_lvl+0x16c/0x1f0 [ 500.243316][T10807] should_fail_ex+0x512/0x640 [ 500.243343][T10807] _copy_from_user+0x2e/0xd0 [ 500.243368][T10807] copy_msghdr_from_user+0x98/0x160 [ 500.243395][T10807] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 500.243436][T10807] ___sys_sendmsg+0xfe/0x1d0 [ 500.243464][T10807] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.243487][T10807] ? __lock_acquire+0x622/0x1c90 [ 500.243543][T10807] __sys_sendmsg+0x16d/0x220 [ 500.243569][T10807] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.243614][T10807] do_syscall_64+0xcd/0xfa0 [ 500.243635][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.243656][T10807] RIP: 0033:0x7f01ed38f6c9 [ 500.243673][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.243691][T10807] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.243710][T10807] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 500.243722][T10807] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 500.243735][T10807] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.243747][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.243758][T10807] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 500.243788][T10807] [ 501.043950][T10823] afs: Bad value for 'source' [ 501.226211][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552035][ T5921] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 501.702073][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 501.718276][ T5921] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 501.729677][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.760743][ T5921] usb 5-1: Product: syz [ 501.800537][ T5921] usb 5-1: Manufacturer: syz [ 502.118096][ T5921] usb 5-1: SerialNumber: syz [ 502.133734][ T5921] usb 5-1: config 0 descriptor?? [ 502.932540][ T30] audit: type=1400 audit(1763022496.965:557): avc: denied { connect } for pid=10852 comm="syz.0.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.014933][T10853] FAULT_INJECTION: forcing a failure. [ 503.014933][T10853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.084077][T10853] CPU: 1 UID: 0 PID: 10853 Comm: syz.0.1333 Not tainted syzkaller #0 PREEMPT(full) [ 503.084104][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.084114][T10853] Call Trace: [ 503.084120][T10853] [ 503.084127][T10853] dump_stack_lvl+0x16c/0x1f0 [ 503.084158][T10853] should_fail_ex+0x512/0x640 [ 503.084184][T10853] _copy_from_user+0x2e/0xd0 [ 503.084207][T10853] copy_msghdr_from_user+0x98/0x160 [ 503.084230][T10853] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 503.084258][T10853] ? __pfx__kstrtoull+0x10/0x10 [ 503.084288][T10853] ___sys_sendmsg+0xfe/0x1d0 [ 503.084313][T10853] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.084353][T10853] ? find_held_lock+0x2b/0x80 [ 503.084394][T10853] __sys_sendmmsg+0x200/0x420 [ 503.084420][T10853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.084453][T10853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.084483][T10853] ? fput+0x9b/0xd0 [ 503.084504][T10853] ? ksys_write+0x1ac/0x250 [ 503.084521][T10853] ? __pfx_ksys_write+0x10/0x10 [ 503.084544][T10853] __x64_sys_sendmmsg+0x9c/0x100 [ 503.084568][T10853] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.084585][T10853] do_syscall_64+0xcd/0xfa0 [ 503.084603][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.084621][T10853] RIP: 0033:0x7f01ed38f6c9 [ 503.084636][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.084652][T10853] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.084668][T10853] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 503.084680][T10853] RDX: 0000000000000001 RSI: 0000200000002f40 RDI: 0000000000000004 [ 503.084691][T10853] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 503.084702][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.084712][T10853] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 503.084741][T10853] [ 503.285933][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.602091][ T5866] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 503.756141][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.784978][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.802836][ T5866] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 503.817589][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.833073][ T5866] usb 1-1: config 0 descriptor?? [ 504.044650][T10863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.064164][T10863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.110886][T10883] 9pnet_virtio: no channels available for device syz [ 504.130946][ T30] audit: type=1400 audit(1763022498.155:558): avc: denied { create } for pid=10867 comm="syz.1.1338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 504.133770][T10883] SQUASHFS error: Failed to read block 0x0: -5 [ 504.228253][ T5893] usb 5-1: USB disconnect, device number 52 [ 504.348901][ T5866] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 504.372928][ T5866] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 504.502321][ T5873] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 504.565201][ T5866] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 504.656090][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.672031][ T5873] usb 3-1: config 0 has no interfaces? [ 504.677589][ T5873] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.685329][T10893] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 504.712045][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.732834][ T5873] usb 3-1: config 0 descriptor?? [ 504.775103][ T5866] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 504.795859][ T5866] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -5 [ 504.823898][T10895] SQUASHFS error: Failed to read block 0x0: -5 [ 504.831716][ T30] audit: type=1400 audit(1763022498.855:559): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=1417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 505.108480][T10898] autofs: Bad value for 'fd' [ 505.407280][T10904] hpfs: Bad magic ... probably not HPFS [ 505.661757][ T5873] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 506.122094][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 506.129705][ T5873] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 506.138229][ T5873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.151258][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.187536][ T5873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 506.198955][ T5873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.212788][ T5873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 506.222235][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.892465][ T5893] usb 1-1: USB disconnect, device number 50 [ 507.000038][T10903] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 507.024353][ T5873] usb 5-1: USB disconnect, device number 53 [ 507.076649][T10928] FAULT_INJECTION: forcing a failure. [ 507.076649][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.093280][T10928] CPU: 1 UID: 0 PID: 10928 Comm: syz.0.1351 Not tainted syzkaller #0 PREEMPT(full) [ 507.093309][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.093321][T10928] Call Trace: [ 507.093328][T10928] [ 507.093336][T10928] dump_stack_lvl+0x16c/0x1f0 [ 507.093377][T10928] should_fail_ex+0x512/0x640 [ 507.093406][T10928] _copy_from_user+0x2e/0xd0 [ 507.093432][T10928] copy_msghdr_from_user+0x98/0x160 [ 507.093465][T10928] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 507.093506][T10928] ___sys_sendmsg+0xfe/0x1d0 [ 507.093534][T10928] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.093558][T10928] ? __lock_acquire+0x622/0x1c90 [ 507.093615][T10928] __sys_sendmsg+0x16d/0x220 [ 507.093642][T10928] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.093687][T10928] do_syscall_64+0xcd/0xfa0 [ 507.093710][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.093731][T10928] RIP: 0033:0x7f01ed38f6c9 [ 507.093752][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.093771][T10928] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.093791][T10928] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 507.093805][T10928] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 507.093819][T10928] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 507.093831][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.093843][T10928] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 507.093873][T10928] [ 507.262121][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.302282][ T5921] usb 3-1: USB disconnect, device number 47 [ 507.362131][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 507.553658][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.610446][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 507.621249][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.633214][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.734012][ T910] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 507.779454][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 507.796533][ T24] usb 4-1: config 0 descriptor?? [ 507.828924][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 507.891216][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 507.912086][ T910] usb 1-1: Using ep0 maxpacket: 8 [ 507.918811][ T910] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 507.929233][ T910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.940969][ T910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.951755][ T910] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.966276][ T910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.980379][ T910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.990553][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.225057][ T910] usb 1-1: GET_CAPABILITIES returned 0 [ 508.232060][ T910] usbtmc 1-1:16.0: can't read capabilities [ 508.239485][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 508.248844][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 508.258581][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 508.266062][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 508.285133][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 508.293283][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 508.300410][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 508.308069][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 508.315350][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 508.326617][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 508.441201][ T5823] usb 1-1: USB disconnect, device number 51 [ 508.535556][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.542801][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.549570][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.556789][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.563613][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.571212][ T24] pwc: Registered as video103. [ 508.579339][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 508.599623][ T24] usb 4-1: USB disconnect, device number 44 [ 508.648490][ T5873] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 508.709374][ T30] audit: type=1400 audit(1763022502.735:560): avc: denied { ioctl } for pid=10933 comm="syz.0.1354" path="socket:[31963]" dev="sockfs" ino=31963 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 508.832056][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 508.838617][ T5873] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 508.850440][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 508.858986][ T5873] usb 3-1: can't read configurations, error -61 [ 509.012809][ T30] audit: type=1400 audit(1763022503.015:561): avc: denied { write } for pid=10948 comm="syz.4.1357" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 509.102104][ T5873] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 509.452122][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 509.467899][ T5873] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 509.514586][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 509.527578][ T5873] usb 3-1: can't read configurations, error -61 [ 509.534208][ T30] audit: type=1400 audit(1763022503.555:562): avc: denied { ioctl } for pid=10952 comm="syz.1.1358" path="socket:[32042]" dev="sockfs" ino=32042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 509.560126][ T5873] usb usb3-port1: attempt power cycle [ 509.715937][T10961] FAULT_INJECTION: forcing a failure. [ 509.715937][T10961] name failslab, interval 1, probability 0, space 0, times 0 [ 509.747849][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.0.1360 Not tainted syzkaller #0 PREEMPT(full) [ 509.747876][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 509.747886][T10961] Call Trace: [ 509.747892][T10961] [ 509.747898][T10961] dump_stack_lvl+0x16c/0x1f0 [ 509.747920][T10961] should_fail_ex+0x512/0x640 [ 509.747934][T10961] ? fs_reclaim_acquire+0xae/0x150 [ 509.747948][T10961] should_failslab+0xc2/0x120 [ 509.747961][T10961] __kmalloc_noprof+0xdd/0x880 [ 509.747977][T10961] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 509.747994][T10961] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 509.748006][T10961] tomoyo_realpath_from_path+0xc2/0x6e0 [ 509.748020][T10961] ? tomoyo_profile+0x47/0x60 [ 509.748042][T10961] tomoyo_path_number_perm+0x245/0x580 [ 509.748052][T10961] ? tomoyo_path_number_perm+0x237/0x580 [ 509.748064][T10961] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 509.748076][T10961] ? find_held_lock+0x2b/0x80 [ 509.748104][T10961] ? find_held_lock+0x2b/0x80 [ 509.748116][T10961] ? hook_file_ioctl_common+0x145/0x410 [ 509.748135][T10961] ? __fget_files+0x20e/0x3c0 [ 509.748149][T10961] security_file_ioctl+0x9b/0x240 [ 509.748163][T10961] __x64_sys_ioctl+0xb7/0x210 [ 509.748180][T10961] do_syscall_64+0xcd/0xfa0 [ 509.748192][T10961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.748205][T10961] RIP: 0033:0x7f01ed38f6c9 [ 509.748214][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.748225][T10961] RSP: 002b:00007f01ee28b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.748236][T10961] RAX: ffffffffffffffda RBX: 00007f01ed5e5fa0 RCX: 00007f01ed38f6c9 [ 509.748243][T10961] RDX: 0000200000000800 RSI: 000000004140aecd RDI: 0000000000000005 [ 509.748250][T10961] RBP: 00007f01ee28b090 R08: 0000000000000000 R09: 0000000000000000 [ 509.748257][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.748263][T10961] R13: 00007f01ed5e6038 R14: 00007f01ed5e5fa0 R15: 00007fffd08bba68 [ 509.748281][T10961] [ 509.748286][T10961] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.015104][ T5873] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 510.043704][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 510.049537][ T5873] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 510.073846][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.081876][ T5873] usb 3-1: can't read configurations, error -61 [ 510.174688][T10963] FAULT_INJECTION: forcing a failure. [ 510.174688][T10963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.189083][T10963] CPU: 1 UID: 0 PID: 10963 Comm: syz.3.1361 Not tainted syzkaller #0 PREEMPT(full) [ 510.189107][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.189118][T10963] Call Trace: [ 510.189125][T10963] [ 510.189133][T10963] dump_stack_lvl+0x16c/0x1f0 [ 510.189168][T10963] should_fail_ex+0x512/0x640 [ 510.189196][T10963] _copy_from_user+0x2e/0xd0 [ 510.189223][T10963] copy_msghdr_from_user+0x98/0x160 [ 510.189257][T10963] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 510.189298][T10963] ___sys_sendmsg+0xfe/0x1d0 [ 510.189326][T10963] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.189349][T10963] ? __lock_acquire+0x622/0x1c90 [ 510.189406][T10963] __sys_sendmsg+0x16d/0x220 [ 510.189433][T10963] ? __pfx___sys_sendmsg+0x10/0x10 [ 510.189479][T10963] do_syscall_64+0xcd/0xfa0 [ 510.189500][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.189519][T10963] RIP: 0033:0x7fe10018f6c9 [ 510.189535][T10963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.189554][T10963] RSP: 002b:00007fe101059038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.189573][T10963] RAX: ffffffffffffffda RBX: 00007fe1003e5fa0 RCX: 00007fe10018f6c9 [ 510.189586][T10963] RDX: 0000000000004800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 510.189599][T10963] RBP: 00007fe101059090 R08: 0000000000000000 R09: 0000000000000000 [ 510.189611][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.189623][T10963] R13: 00007fe1003e6038 R14: 00007fe1003e5fa0 R15: 00007ffc6e86ec38 [ 510.189652][T10963] [ 510.352049][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.358883][ T5873] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 510.402506][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 510.408282][ T5873] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 510.418186][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.477187][ T5873] usb 3-1: can't read configurations, error -61 [ 510.493456][ T5873] usb usb3-port1: unable to enumerate USB device [ 510.545435][T10969] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1364'. [ 510.742084][ T5953] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 511.273965][T10973] kAFS: No cell specified [ 511.322043][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 511.350985][ T5953] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.362383][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.372047][ T5953] usb 1-1: Product: syz [ 511.376697][ T5953] usb 1-1: Manufacturer: syz [ 511.386189][ T5953] usb 1-1: SerialNumber: syz [ 511.401152][ T5953] usb 1-1: config 0 descriptor?? [ 511.740392][ T5953] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 512.363232][T10981] kAFS: No cell specified [ 512.632121][ T5866] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 512.802082][ T5866] usb 4-1: Using ep0 maxpacket: 32 [ 512.819321][ T5866] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 512.832011][ T5866] usb 4-1: config 0 has no interface number 0 [ 512.875712][ T5866] usb 4-1: config 0 interface 12 has no altsetting 0 [ 512.888748][ T5866] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 512.922796][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.989938][ T5866] usb 4-1: Product: syz [ 513.023272][ T5866] usb 4-1: Manufacturer: syz [ 513.049820][ T5866] usb 4-1: SerialNumber: syz [ 513.176986][ T5866] usb 4-1: config 0 descriptor?? [ 513.349830][ T5953] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 513.381585][ T5953] usb 1-1: USB disconnect, device number 52 [ 513.894724][ T30] audit: type=1400 audit(1763022507.925:563): avc: denied { read } for pid=10999 comm="syz.2.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 514.364555][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 515.035330][T11012] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1375'. [ 516.044595][T11018] autofs: Bad value for 'fd' [ 517.330964][ T5866] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 518.189201][ T5866] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 518.196700][ T5866] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 518.204394][ T5866] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 518.222754][ T5866] usb 4-1: USB disconnect, device number 45 [ 519.527483][T11050] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1387'. [ 519.713844][T11062] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 519.735558][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.749667][T11062] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 519.785132][T11062] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 519.793313][T11062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1389'. [ 519.805021][ T30] audit: type=1400 audit(1763022513.835:564): avc: denied { create } for pid=11060 comm="syz.4.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.826024][T11062] batadv0: entered promiscuous mode [ 519.831360][T11062] batadv0: entered allmulticast mode [ 519.842573][T11062] bond0: (slave batadv0): Releasing backup interface [ 519.857751][ T30] audit: type=1400 audit(1763022513.835:565): avc: denied { write } for pid=11060 comm="syz.4.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.893527][ T30] audit: type=1400 audit(1763022513.835:566): avc: denied { ioctl } for pid=11060 comm="syz.4.1391" path="socket:[32449]" dev="sockfs" ino=32449 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 519.930592][T11062] bridge0: port 3(batadv0) entered blocking state [ 519.948037][T11062] bridge0: port 3(batadv0) entered disabled state [ 520.125767][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 520.166923][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 520.333638][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.348171][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 520.357545][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 520.382319][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.404068][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.003612][ T24] usb 5-1: config 0 descriptor?? [ 521.011938][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 521.546244][T11082] 9pnet_virtio: no channels available for device [ 522.059978][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 522.142698][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 522.149778][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 522.162694][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 522.210889][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 522.260443][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 522.411432][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 522.492181][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 522.713204][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 522.731315][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 522.750296][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 522.777762][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 522.789915][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 522.813331][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 522.833821][ T30] audit: type=1400 audit(1763022516.865:567): avc: denied { getattr } for pid=11097 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 522.837555][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 522.876363][T11102] FAULT_INJECTION: forcing a failure. [ 522.876363][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.902436][ T24] pwc: Registered as video103. [ 522.909997][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.3.1403 Not tainted syzkaller #0 PREEMPT(full) [ 522.910026][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.910039][T11102] Call Trace: [ 522.910045][T11102] [ 522.910053][T11102] dump_stack_lvl+0x16c/0x1f0 [ 522.910089][T11102] should_fail_ex+0x512/0x640 [ 522.910117][T11102] _copy_from_user+0x2e/0xd0 [ 522.910142][T11102] security_getselfattr+0x376/0x500 [ 522.910177][T11102] ? __pfx_security_getselfattr+0x10/0x10 [ 522.910207][T11102] ? fput+0x9b/0xd0 [ 522.910229][T11102] ? ksys_write+0x1ac/0x250 [ 522.910247][T11102] ? __pfx_ksys_write+0x10/0x10 [ 522.910271][T11102] __x64_sys_lsm_get_self_attr+0x96/0x100 [ 522.910293][T11102] ? lockdep_hardirqs_on+0x7c/0x110 [ 522.910313][T11102] do_syscall_64+0xcd/0xfa0 [ 522.910335][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.910356][T11102] RIP: 0033:0x7fe10018f6c9 [ 522.910372][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.910387][T11102] RSP: 002b:00007fe101059038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 522.910402][T11102] RAX: ffffffffffffffda RBX: 00007fe1003e5fa0 RCX: 00007fe10018f6c9 [ 522.910415][T11102] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000064 [ 522.910426][T11102] RBP: 00007fe101059090 R08: 0000000000000000 R09: 0000000000000000 [ 522.910436][T11102] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 522.910446][T11102] R13: 00007fe1003e6038 R14: 00007fe1003e5fa0 R15: 00007ffc6e86ec38 [ 522.910471][T11102] [ 523.073298][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 523.129938][ T24] usb 5-1: USB disconnect, device number 54 [ 523.318218][T11091] syz.2.1398: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 523.358487][T11091] CPU: 0 UID: 0 PID: 11091 Comm: syz.2.1398 Not tainted syzkaller #0 PREEMPT(full) [ 523.358520][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.358533][T11091] Call Trace: [ 523.358540][T11091] [ 523.358549][T11091] dump_stack_lvl+0x16c/0x1f0 [ 523.358590][T11091] warn_alloc+0x248/0x3a0 [ 523.358621][T11091] ? __pfx_warn_alloc+0x10/0x10 [ 523.358647][T11091] ? __pfx_stack_trace_save+0x10/0x10 [ 523.358680][T11091] ? kasan_save_stack+0x42/0x60 [ 523.358697][T11091] ? kasan_save_stack+0x33/0x60 [ 523.358716][T11091] ? kasan_save_track+0x14/0x30 [ 523.358735][T11091] ? xskq_create+0x52/0x1d0 [ 523.358757][T11091] ? xsk_setsockopt+0x74e/0x9a0 [ 523.358779][T11091] ? do_sock_setsockopt+0xf3/0x1d0 [ 523.358810][T11091] ? xskq_create+0xfb/0x1d0 [ 523.358837][T11091] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 523.358874][T11091] ? xskq_create+0xfb/0x1d0 [ 523.358908][T11091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.358945][T11091] ? xskq_create+0xfb/0x1d0 [ 523.358968][T11091] vmalloc_user_noprof+0x9e/0xe0 [ 523.358993][T11091] ? xskq_create+0xfb/0x1d0 [ 523.359020][T11091] xskq_create+0xfb/0x1d0 [ 523.359050][T11091] xsk_setsockopt+0x74e/0x9a0 [ 523.359076][T11091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.359096][T11091] ? find_held_lock+0x2b/0x80 [ 523.359127][T11091] ? selinux_socket_setsockopt+0x6a/0x80 [ 523.359147][T11091] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.359174][T11091] do_sock_setsockopt+0xf3/0x1d0 [ 523.359215][T11091] __sys_setsockopt+0x1a0/0x230 [ 523.359248][T11091] __x64_sys_setsockopt+0xbd/0x160 [ 523.359272][T11091] ? do_syscall_64+0x91/0xfa0 [ 523.359291][T11091] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.359310][T11091] do_syscall_64+0xcd/0xfa0 [ 523.359332][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.359354][T11091] RIP: 0033:0x7f4c08f8f6c9 [ 523.359372][T11091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.359393][T11091] RSP: 002b:00007f4c09ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.359413][T11091] RAX: ffffffffffffffda RBX: 00007f4c091e5fa0 RCX: 00007f4c08f8f6c9 [ 523.359428][T11091] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 523.359441][T11091] RBP: 00007f4c09011f91 R08: 0000000000000004 R09: 0000000000000000 [ 523.359454][T11091] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.359466][T11091] R13: 00007f4c091e6038 R14: 00007f4c091e5fa0 R15: 00007ffdce919478 [ 523.359497][T11091] [ 523.359505][T11091] Mem-Info: [ 523.674423][T11091] active_anon:16378 inactive_anon:0 isolated_anon:0 [ 523.674423][T11091] active_file:13240 inactive_file:41322 isolated_file:0 [ 523.674423][T11091] unevictable:768 dirty:692 writeback:0 [ 523.674423][T11091] slab_reclaimable:11790 slab_unreclaimable:98533 [ 523.674423][T11091] mapped:37076 shmem:7097 pagetables:1306 [ 523.674423][T11091] sec_pagetables:0 bounce:0 [ 523.674423][T11091] kernel_misc_reclaimable:0 [ 523.674423][T11091] free:1297082 free_pcp:12404 free_cma:0 [ 523.724647][T11091] Node 0 active_anon:65412kB inactive_anon:0kB active_file:52960kB inactive_file:165084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152104kB dirty:2768kB writeback:0kB shmem:26852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12152kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.765528][T11091] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.802588][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 523.962237][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 523.981920][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 524.600986][ T24] usb 5-1: can't read configurations, error -61 [ 524.690620][T11091] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.722360][ T30] audit: type=1400 audit(1763022518.715:568): avc: denied { connect } for pid=11090 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.782069][T11091] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 524.788948][T11091] Node 0 DMA32 free:1261104kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:77212kB inactive_anon:0kB active_file:52960kB inactive_file:165084kB unevictable:1536kB writepending:2796kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:35556kB local_pcp:21440kB free_cma:0kB [ 524.822390][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.918444][ T30] audit: type=1400 audit(1763022518.715:569): avc: denied { bind } for pid=11090 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.937980][ T30] audit: type=1400 audit(1763022518.715:570): avc: denied { write } for pid=11090 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.964519][ T30] audit: type=1400 audit(1763022518.715:571): avc: denied { read } for pid=11090 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.986844][T11091] lowmem_reserve[]: 0 0 1 1 1 [ 524.991586][T11091] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.021193][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.027537][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 525.133398][T11091] lowmem_reserve[]: 0 0 0 0 0 [ 525.138159][T11091] Node 1 Normal free:3896144kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17044kB local_pcp:9376kB free_cma:0kB [ 525.170375][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.207548][T11091] lowmem_reserve[]: 0 0 0 0 0 [ 525.216331][T11091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.230410][T11091] Node 0 DMA32: 2298*4kB (UME) 599*8kB (UME) 59*16kB (UM) 367*32kB (UME) 156*64kB (UME) 34*128kB (UME) 71*256kB (UME) 17*512kB (UM) 7*1024kB (UM) 3*2048kB (ME) 291*4096kB (UM) = 1273136kB [ 525.232108][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 525.251738][T11091] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.299608][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 525.306617][T11091] Node 1 Normal: 210*4kB (UME) 59*8kB (UME) 41*16kB (UME) 67*32kB (UME) 23*64kB (UME) 9*128kB (UME) 3*256kB (ME) 5*512kB (UM) 3*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3896144kB [ 525.324351][ T24] usb 5-1: can't read configurations, error -61 [ 525.346671][T11091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.352541][ T24] usb usb5-port1: attempt power cycle [ 525.357678][T11091] Node 0 hugepages_total=6 hugepages_free=4 hugepages_surp=4 hugepages_size=2048kB [ 525.371583][T11091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.386677][T11091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 525.416857][T11091] 61705 total pagecache pages [ 525.421565][T11091] 0 pages in swap cache [ 525.452111][T11091] Free swap = 124996kB [ 525.456294][T11091] Total swap = 124996kB [ 525.479912][T11091] 2097051 pages RAM [ 525.484144][T11091] 0 pages HighMem/MovableOnly [ 525.488824][T11091] 428747 pages reserved [ 525.493463][T11091] 0 pages cma reserved [ 526.172597][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 526.207833][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 526.279736][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 526.324059][ T24] usb 5-1: can't read configurations, error -61 [ 526.504696][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 526.614725][T11147] FAULT_INJECTION: forcing a failure. [ 526.614725][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.633203][T11147] CPU: 1 UID: 0 PID: 11147 Comm: syz.4.1416 Not tainted syzkaller #0 PREEMPT(full) [ 526.633229][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 526.633235][T11147] Call Trace: [ 526.633240][T11147] [ 526.633245][T11147] dump_stack_lvl+0x16c/0x1f0 [ 526.633274][T11147] should_fail_ex+0x512/0x640 [ 526.633301][T11147] _copy_from_user+0x2e/0xd0 [ 526.633327][T11147] copy_msghdr_from_user+0x98/0x160 [ 526.633355][T11147] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 526.633390][T11147] ___sys_sendmsg+0xfe/0x1d0 [ 526.633406][T11147] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.633418][T11147] ? __lock_acquire+0x622/0x1c90 [ 526.633448][T11147] __sys_sendmsg+0x16d/0x220 [ 526.633462][T11147] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.633487][T11147] do_syscall_64+0xcd/0xfa0 [ 526.633498][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.633510][T11147] RIP: 0033:0x7f0e5338f6c9 [ 526.633520][T11147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.633530][T11147] RSP: 002b:00007f0e54153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.633541][T11147] RAX: ffffffffffffffda RBX: 00007f0e535e5fa0 RCX: 00007f0e5338f6c9 [ 526.633548][T11147] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 526.633555][T11147] RBP: 00007f0e54153090 R08: 0000000000000000 R09: 0000000000000000 [ 526.633561][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.633568][T11147] R13: 00007f0e535e6038 R14: 00007f0e535e5fa0 R15: 00007ffe127edd38 [ 526.633583][T11147] [ 526.802025][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.862364][ T24] usb 5-1: device not accepting address 58, error -71 [ 526.871748][ T24] usb usb5-port1: unable to enumerate USB device [ 526.982440][ T5921] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 527.186782][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.220244][ T5921] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 527.233548][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.280092][ T5921] usb 3-1: config 0 descriptor?? [ 527.571149][ T5921] usbhid 3-1:0.0: can't add hid device: -71 [ 527.587424][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.735831][ T5953] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 527.912115][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 528.007295][T11166] kAFS: No cell specified [ 528.020467][ T5953] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 528.070881][ T5953] usb 1-1: config 0 has no interface number 0 [ 528.081611][ T5921] usb 3-1: USB disconnect, device number 52 [ 528.099480][ T5953] usb 1-1: config 0 interface 12 has no altsetting 0 [ 528.117428][ T5953] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 528.127158][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.135595][ T5953] usb 1-1: Product: syz [ 528.141128][ T5953] usb 1-1: Manufacturer: syz [ 528.149169][ T5953] usb 1-1: SerialNumber: syz [ 528.159706][ T5953] usb 1-1: config 0 descriptor?? [ 529.187972][T11180] JFS: charset not found [ 529.392502][T11180] pim6reg: entered allmulticast mode [ 531.130827][ T5873] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 531.322128][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 531.650214][ T5873] usb 2-1: config 36 has an invalid interface number: 44 but max is 0 [ 531.742340][ T5873] usb 2-1: config 36 has no interface number 0 [ 531.773436][ T5873] usb 2-1: config 36 interface 44 has no altsetting 0 [ 531.838185][ T5953] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 531.945100][ T61] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 531.952183][ T5953] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 531.975379][ T5873] usb 2-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea [ 532.042115][ T5953] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 532.049766][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.070263][ T5953] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 532.080068][ T5873] usb 2-1: Product: syz [ 532.091276][ T5873] usb 2-1: Manufacturer: syz [ 532.114725][ T5873] usb 2-1: SerialNumber: syz [ 532.148788][ T5953] usb 1-1: USB disconnect, device number 53 [ 532.343711][T11220] FAULT_INJECTION: forcing a failure. [ 532.343711][T11220] name failslab, interval 1, probability 0, space 0, times 0 [ 532.386526][T11220] CPU: 1 UID: 0 PID: 11220 Comm: syz.2.1440 Not tainted syzkaller #0 PREEMPT(full) [ 532.386556][T11220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.386575][T11220] Call Trace: [ 532.386582][T11220] [ 532.386590][T11220] dump_stack_lvl+0x16c/0x1f0 [ 532.386626][T11220] should_fail_ex+0x512/0x640 [ 532.386650][T11220] ? fs_reclaim_acquire+0xae/0x150 [ 532.386676][T11220] should_failslab+0xc2/0x120 [ 532.386701][T11220] __kmalloc_noprof+0xdd/0x880 [ 532.386730][T11220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 532.386760][T11220] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 532.386780][T11220] tomoyo_realpath_from_path+0xc2/0x6e0 [ 532.386804][T11220] ? tomoyo_profile+0x47/0x60 [ 532.386832][T11220] tomoyo_path_number_perm+0x245/0x580 [ 532.386852][T11220] ? tomoyo_path_number_perm+0x237/0x580 [ 532.386875][T11220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.386896][T11220] ? find_held_lock+0x2b/0x80 [ 532.386949][T11220] ? find_held_lock+0x2b/0x80 [ 532.386973][T11220] ? hook_file_ioctl_common+0x145/0x410 [ 532.387008][T11220] ? __fget_files+0x20e/0x3c0 [ 532.387034][T11220] security_file_ioctl+0x9b/0x240 [ 532.387059][T11220] __x64_sys_ioctl+0xb7/0x210 [ 532.387090][T11220] do_syscall_64+0xcd/0xfa0 [ 532.387112][T11220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.387132][T11220] RIP: 0033:0x7f4c08f8f6c9 [ 532.387149][T11220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.387168][T11220] RSP: 002b:00007f4c09ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.387188][T11220] RAX: ffffffffffffffda RBX: 00007f4c091e5fa0 RCX: 00007f4c08f8f6c9 [ 532.387201][T11220] RDX: 0000200000000380 RSI: 0000000080044dfe RDI: 0000000000000003 [ 532.387214][T11220] RBP: 00007f4c09ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 532.387226][T11220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.387239][T11220] R13: 00007f4c091e6038 R14: 00007f4c091e5fa0 R15: 00007ffdce919478 [ 532.387269][T11220] [ 532.387278][T11220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.458216][ T30] audit: type=1400 audit(1763022526.495:572): avc: denied { execute } for pid=11226 comm="syz.3.1442" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 532.965106][ T5873] sisusb 2-1:36.44: Invalid USB2VGA device [ 532.993894][ T5873] sisusb 2-1:36.44: probe with driver sisusb failed with error -22 [ 533.004874][ T5873] usb 2-1: USB disconnect, device number 36 [ 536.522134][ T5921] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 536.638522][ T5873] kernel read not supported for file 994/task/995/cmdline (pid: 5873 comm: kworker/0:4) [ 536.641209][ T30] audit: type=1400 audit(1763022530.665:573): avc: denied { read write } for pid=11271 comm="syz.2.1456" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 536.705172][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 536.724042][ T5921] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 536.732769][ T5921] usb 4-1: config 0 has no interface number 0 [ 536.739867][ T30] audit: type=1400 audit(1763022530.665:574): avc: denied { open } for pid=11271 comm="syz.2.1456" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 536.764539][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.909350][ T5921] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 536.930255][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.946217][ T30] audit: type=1400 audit(1763022530.975:575): avc: denied { create } for pid=11278 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 536.954148][ T5921] usb 4-1: Product: syz [ 537.479637][ T5921] usb 4-1: Manufacturer: syz [ 537.493825][ T5921] usb 4-1: SerialNumber: syz [ 537.509211][ T30] audit: type=1400 audit(1763022531.535:576): avc: denied { sys_admin } for pid=11278 comm="syz.1.1457" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 537.541626][ T5921] usb 4-1: config 0 descriptor?? [ 537.563689][ T5921] usb 4-1: can't set config #0, error -71 [ 537.626750][ T5873] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 537.634518][ T5953] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 537.822533][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 537.832590][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 538.010440][ T5873] usb 3-1: config 9 has an invalid interface number: 37 but max is 0 [ 538.030658][ T5953] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 538.074483][ T5873] usb 3-1: config 9 has no interface number 0 [ 538.097083][ T5953] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 538.134134][ T5873] usb 3-1: config 9 interface 37 has no altsetting 0 [ 538.181566][ T5953] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 538.244925][ T5953] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 538.310547][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 538.473125][ T5873] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 538.501503][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.695325][ T5953] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 538.707837][ T5953] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 538.717476][ T5873] usb 3-1: Product: syz [ 538.740960][ T5873] usb 3-1: Manufacturer: syz [ 538.770045][ T5953] usb 2-1: Product: syz [ 538.774634][ T5873] usb 3-1: SerialNumber: syz [ 538.803316][ T5953] usb 2-1: Manufacturer: syz [ 538.857489][ T5953] usb 2-1: SerialNumber: syz [ 538.921675][ T5953] usb 2-1: config 0 descriptor?? [ 538.976182][ T5953] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 539.070299][ T5953] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 539.272913][ T5873] gspca_main: spca506-2.14.0 probing 0734:043b [ 539.646359][ T5921] usb 4-1: USB disconnect, device number 46 [ 541.105450][ T5873] usb 3-1: USB disconnect, device number 53 [ 541.964712][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 542.098803][ T30] audit: type=1400 audit(1763022536.125:577): avc: denied { connect } for pid=11314 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 542.148374][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 542.244143][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 542.355255][ T24] usb 3-1: config 0 has no interface number 0 [ 542.434517][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 542.560917][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 542.614193][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 542.623583][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 542.632808][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.640968][ T24] usb 3-1: Product: syz [ 542.648359][ T24] usb 3-1: Manufacturer: syz [ 542.657263][ T24] usb 3-1: SerialNumber: syz [ 542.878467][ T24] usb 3-1: config 0 descriptor?? [ 543.020821][T11313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.173015][T11313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.506752][T11313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.603696][T11313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 544.798284][T11339] autofs: Bad value for 'fd' [ 544.982306][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 545.023374][ T24] usb 3-1: USB disconnect, device number 54 [ 545.092614][T11294] usb 2-1: USB disconnect, device number 37 [ 545.372412][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 545.422423][T11294] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 545.434618][ T5953] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 545.582916][ T5953] usb 4-1: device descriptor read/64, error -71 [ 545.624329][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 545.631418][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 545.642238][ T24] usb 3-1: config 0 has no interface number 0 [ 545.654959][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 545.666303][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 545.676014][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.684306][ T24] usb 3-1: Product: syz [ 545.688542][ T24] usb 3-1: Manufacturer: syz [ 545.694214][ T24] usb 3-1: SerialNumber: syz [ 545.727343][ T24] usb 3-1: config 0 descriptor?? [ 545.862226][ T5953] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 546.122459][ T5953] usb 4-1: device descriptor read/64, error -71 [ 546.362508][ T5953] usb usb4-port1: attempt power cycle [ 547.062095][ T5953] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 547.102627][ T5953] usb 4-1: device descriptor read/8, error -71 [ 547.472242][ T5953] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 547.545189][ T5953] usb 4-1: device descriptor read/8, error -71 [ 547.723353][ T5953] usb usb4-port1: unable to enumerate USB device [ 548.655294][T11386] process 'syz.4.1483' launched './file0' with NULL argv: empty string added [ 548.822298][ T30] audit: type=1400 audit(1763022542.695:578): avc: denied { execute_no_trans } for pid=11381 comm="syz.4.1483" path="/296/file0" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 549.068666][T11388] use of bytesused == 0 is deprecated and will be removed in the future, [ 549.088130][T11388] use the actual size instead. [ 549.963176][T11399] FAULT_INJECTION: forcing a failure. [ 549.963176][T11399] name failslab, interval 1, probability 0, space 0, times 0 [ 550.001177][T11399] CPU: 0 UID: 0 PID: 11399 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) [ 550.001205][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.001217][T11399] Call Trace: [ 550.001224][T11399] [ 550.001233][T11399] dump_stack_lvl+0x16c/0x1f0 [ 550.001268][T11399] should_fail_ex+0x512/0x640 [ 550.001290][T11399] ? fs_reclaim_acquire+0xae/0x150 [ 550.001316][T11399] should_failslab+0xc2/0x120 [ 550.001340][T11399] __kmalloc_noprof+0xdd/0x880 [ 550.001367][T11399] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 550.001398][T11399] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 550.001420][T11399] tomoyo_realpath_from_path+0xc2/0x6e0 [ 550.001447][T11399] ? tomoyo_profile+0x47/0x60 [ 550.001475][T11399] tomoyo_path_number_perm+0x245/0x580 [ 550.001493][T11399] ? tomoyo_path_number_perm+0x237/0x580 [ 550.001516][T11399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 550.001538][T11399] ? find_held_lock+0x2b/0x80 [ 550.001590][T11399] ? find_held_lock+0x2b/0x80 [ 550.001616][T11399] ? hook_file_ioctl_common+0x145/0x410 [ 550.001649][T11399] ? __fget_files+0x20e/0x3c0 [ 550.001675][T11399] security_file_ioctl+0x9b/0x240 [ 550.001700][T11399] __x64_sys_ioctl+0xb7/0x210 [ 550.001730][T11399] do_syscall_64+0xcd/0xfa0 [ 550.001752][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.001772][T11399] RIP: 0033:0x7f0e5338f6c9 [ 550.001789][T11399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.001807][T11399] RSP: 002b:00007f0e515d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.001826][T11399] RAX: ffffffffffffffda RBX: 00007f0e535e6180 RCX: 00007f0e5338f6c9 [ 550.001840][T11399] RDX: 00002000000002c0 RSI: 00000000c058560f RDI: 0000000000000007 [ 550.001852][T11399] RBP: 00007f0e515d5090 R08: 0000000000000000 R09: 0000000000000000 [ 550.001864][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.001874][T11399] R13: 00007f0e535e6218 R14: 00007f0e535e6180 R15: 00007ffe127edd38 [ 550.001900][T11399] [ 550.302628][T11399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.351056][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 550.371342][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 550.407908][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 550.517901][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 550.555017][ T24] usb 3-1: USB disconnect, device number 55 [ 550.761253][T11406] syzkaller0: entered promiscuous mode [ 550.768921][T11406] syzkaller0: entered allmulticast mode [ 551.035325][ T30] audit: type=1400 audit(1763022545.065:579): avc: denied { ioctl } for pid=11414 comm="syz.3.1492" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 551.072644][ T30] audit: type=1400 audit(1763022545.095:580): avc: denied { override_creds } for pid=11409 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 551.262093][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 551.272064][T11294] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 551.423050][T11294] usb 4-1: Using ep0 maxpacket: 32 [ 551.435374][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.437440][T11294] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 551.453789][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 551.453833][T11294] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 551.473496][T11294] usb 4-1: config 2 has no interface number 0 [ 551.482391][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.482635][T11294] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 551.500099][T11294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.503190][ T24] usb 2-1: config 0 descriptor?? [ 551.508578][T11294] usb 4-1: Product: syz [ 551.517655][T11294] usb 4-1: Manufacturer: syz [ 551.531846][T11294] usb 4-1: SerialNumber: syz [ 551.635224][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 551.794414][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'. [ 552.126135][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 552.291029][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 552.820381][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 552.951456][ T5921] usb 4-1: USB disconnect, device number 51 [ 552.966359][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 553.005137][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 553.015760][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 553.129571][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 553.137077][T11434] autofs: Bad value for 'fd' [ 553.141861][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 553.149900][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 553.158990][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 553.478385][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 553.508829][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.524836][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.592131][ T5921] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 553.624008][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.632903][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.664839][ T24] pwc: Registered as video103. [ 553.671322][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 553.782524][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 554.087341][ T5921] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 554.132464][ T24] usb 2-1: USB disconnect, device number 38 [ 554.147064][ T5921] usb 1-1: config 0 has no interface number 0 [ 554.181925][ T5921] usb 1-1: config 0 interface 12 has no altsetting 0 [ 554.219341][ T5921] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 554.266182][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.287440][ T5921] usb 1-1: Product: syz [ 554.296750][ T5921] usb 1-1: Manufacturer: syz [ 554.306863][ T5921] usb 1-1: SerialNumber: syz [ 554.321408][ T5921] usb 1-1: config 0 descriptor?? [ 554.626989][ T30] audit: type=1400 audit(1763022548.655:581): avc: denied { listen } for pid=11452 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 554.978300][T11460] afs: Bad value for 'source' [ 554.980764][ T30] audit: type=1400 audit(1763022548.745:582): avc: denied { accept } for pid=11452 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 556.180419][T11463] random: crng reseeded on system resumption [ 556.199450][ T30] audit: type=1400 audit(1763022550.205:583): avc: denied { write } for pid=11452 comm="syz.4.1503" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 557.807054][T11481] autofs: Bad value for 'fd' [ 558.702223][ T5921] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 558.727697][ T5921] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 558.749909][ T5921] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 558.768870][ T5921] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 558.840009][ T5921] usb 1-1: USB disconnect, device number 54 [ 558.912290][T11294] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 559.002189][ T6513] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 559.014003][ T30] audit: type=1400 audit(1763022553.045:584): avc: denied { ioctl } for pid=11498 comm="syz.2.1515" path="socket:[34290]" dev="sockfs" ino=34290 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.049518][T11499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1515'. [ 559.155386][ T6513] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.175842][ T6513] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 559.228995][T11294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.247651][T11294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.257799][T11294] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 559.271046][T11294] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.168450][ T6513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.208273][ T6513] usb 4-1: config 0 descriptor?? [ 560.225789][T11294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.243977][T11294] usb 5-1: config 0 descriptor?? [ 560.460739][ T6513] pwc: Askey VC010 type 2 USB webcam detected. [ 560.869049][T11294] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 561.091251][T11294] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 561.091483][ T6513] pwc: recv_control_msg error -32 req 02 val 2b00 [ 561.117860][ T6513] pwc: recv_control_msg error -32 req 02 val 2700 [ 562.106174][ T6513] pwc: recv_control_msg error -32 req 02 val 2c00 [ 562.162544][ T6513] pwc: recv_control_msg error -32 req 04 val 1000 [ 562.272112][ T5953] usb 5-1: reset high-speed USB device number 59 using dummy_hcd [ 562.273314][ T6513] pwc: recv_control_msg error -32 req 04 val 1300 [ 562.382090][ T30] audit: type=1326 audit(1763022556.405:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.1522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e5178f6c9 code=0x0 [ 562.474359][T11528] autofs: Bad value for 'fd' [ 562.495175][ T6513] pwc: recv_control_msg error -32 req 04 val 1400 [ 562.502911][ T6513] pwc: recv_control_msg error -32 req 02 val 2000 [ 562.510063][ T6513] pwc: recv_control_msg error -32 req 02 val 2100 [ 562.517323][ T6513] pwc: recv_control_msg error -32 req 04 val 1500 [ 562.524363][ T6513] pwc: recv_control_msg error -32 req 02 val 2500 [ 562.766432][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.780097][ T6513] pwc: recv_control_msg error -71 req 02 val 2600 [ 562.797124][ T6513] pwc: recv_control_msg error -71 req 02 val 2900 [ 562.938801][ T6513] pwc: recv_control_msg error -71 req 02 val 2800 [ 562.957325][ T6513] pwc: recv_control_msg error -71 req 04 val 1100 [ 562.980679][ T6513] pwc: recv_control_msg error -71 req 04 val 1200 [ 563.413155][ T6513] pwc: Registered as video103. [ 563.461322][ T6513] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 563.537996][ T6513] usb 4-1: USB disconnect, device number 52 [ 563.733832][T11545] netlink: 'syz.3.1526': attribute type 72 has an invalid length. [ 563.944785][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.222950][T11562] FAULT_INJECTION: forcing a failure. [ 564.222950][T11562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.274917][T11562] CPU: 1 UID: 0 PID: 11562 Comm: syz.3.1530 Not tainted syzkaller #0 PREEMPT(full) [ 564.274947][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.274959][T11562] Call Trace: [ 564.274965][T11562] [ 564.274973][T11562] dump_stack_lvl+0x16c/0x1f0 [ 564.275009][T11562] should_fail_ex+0x512/0x640 [ 564.275037][T11562] _copy_to_user+0x32/0xd0 [ 564.275064][T11562] simple_read_from_buffer+0xcb/0x170 [ 564.275098][T11562] proc_fail_nth_read+0x197/0x240 [ 564.275123][T11562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.275149][T11562] ? rw_verify_area+0xcf/0x6c0 [ 564.275177][T11562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.275207][T11562] vfs_read+0x1e4/0xcf0 [ 564.275231][T11562] ? __pfx___mutex_lock+0x10/0x10 [ 564.275252][T11562] ? __pfx_vfs_read+0x10/0x10 [ 564.275280][T11562] ? __fget_files+0x20e/0x3c0 [ 564.275310][T11562] ksys_read+0x12a/0x250 [ 564.275329][T11562] ? __pfx_ksys_read+0x10/0x10 [ 564.275350][T11562] ? fdget+0x187/0x210 [ 564.275375][T11562] do_syscall_64+0xcd/0xfa0 [ 564.275396][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.275418][T11562] RIP: 0033:0x7fe10018e0dc [ 564.275435][T11562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.275453][T11562] RSP: 002b:00007fe101038030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.275472][T11562] RAX: ffffffffffffffda RBX: 00007fe1003e6090 RCX: 00007fe10018e0dc [ 564.275486][T11562] RDX: 000000000000000f RSI: 00007fe1010380a0 RDI: 0000000000000005 [ 564.275497][T11562] RBP: 00007fe101038090 R08: 0000000000000000 R09: 0000000000000000 [ 564.275510][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.275521][T11562] R13: 00007fe1003e6128 R14: 00007fe1003e6090 R15: 00007ffc6e86ec38 [ 564.275552][T11562] [ 564.977073][T11573] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 565.003372][T11573] CIFS mount error: No usable UNC path provided in device string! [ 565.003372][T11573] [ 565.013898][T11573] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 565.049707][T11573] sg_write: data in/out 768/4 bytes for SCSI command 0x11-- guessing data in; [ 565.049707][T11573] program syz.0.1533 not setting count and/or reply_len properly [ 565.213633][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 565.683213][T11294] usb 5-1: USB disconnect, device number 59 [ 566.242981][T11590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 566.253022][T11590] block device autoloading is deprecated and will be removed. [ 566.404019][ T30] audit: type=1400 audit(1763022560.195:586): avc: denied { read } for pid=11583 comm="syz.2.1535" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 566.426885][ T30] audit: type=1400 audit(1763022560.195:587): avc: denied { open } for pid=11583 comm="syz.2.1535" path="/305/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 566.513469][ T5953] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 566.814898][ T5823] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 567.002264][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 567.037861][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.095377][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.185467][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.189396][ T5823] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 567.205329][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.212136][ T5953] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 567.216922][ T5823] usb 4-1: config 0 descriptor?? [ 567.223368][T11294] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 567.237940][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.257129][ T5953] usb 1-1: config 0 descriptor?? [ 567.275221][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 567.419496][T11294] usb 2-1: config 16 has an invalid interface number: 80 but max is 0 [ 567.449327][T11294] usb 2-1: config 16 has no interface number 0 [ 567.467430][T11294] usb 2-1: config 16 interface 80 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 567.485464][T11603] FAULT_INJECTION: forcing a failure. [ 567.485464][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 567.486089][T11294] usb 2-1: config 16 interface 80 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 567.498974][T11603] CPU: 1 UID: 0 PID: 11603 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(full) [ 567.499002][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.499011][T11603] Call Trace: [ 567.499016][T11603] [ 567.499022][T11603] dump_stack_lvl+0x16c/0x1f0 [ 567.499058][T11603] should_fail_ex+0x512/0x640 [ 567.499090][T11603] ? __kmalloc_cache_noprof+0x5f/0x780 [ 567.499120][T11603] should_failslab+0xc2/0x120 [ 567.499142][T11603] __kmalloc_cache_noprof+0x72/0x780 [ 567.499168][T11603] ? do_raw_spin_lock+0x12c/0x2b0 [ 567.499190][T11603] ? get_mountpoint+0x166/0x4d0 [ 567.499221][T11603] ? get_mountpoint+0x166/0x4d0 [ 567.499245][T11603] get_mountpoint+0x166/0x4d0 [ 567.499271][T11603] do_lock_mount.part.0+0x323/0xa80 [ 567.499295][T11603] ? inode_has_perm+0x16f/0x1d0 [ 567.499325][T11603] do_move_mount.isra.0+0x205/0xf80 [ 567.499353][T11603] ? __pfx_do_move_mount.isra.0+0x10/0x10 [ 567.499387][T11603] __do_sys_move_mount+0x6cb/0x830 [ 567.499411][T11603] ? __pfx___do_sys_move_mount+0x10/0x10 [ 567.499433][T11603] ? ksys_write+0x1ac/0x250 [ 567.499451][T11603] ? __pfx_ksys_write+0x10/0x10 [ 567.499479][T11603] do_syscall_64+0xcd/0xfa0 [ 567.499500][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.499520][T11603] RIP: 0033:0x7f0e5338f6c9 [ 567.499538][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.499557][T11603] RSP: 002b:00007f0e54153038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 567.499575][T11603] RAX: ffffffffffffffda RBX: 00007f0e535e5fa0 RCX: 00007f0e5338f6c9 [ 567.499589][T11603] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 567.499600][T11603] RBP: 00007f0e54153090 R08: 0000000000000065 R09: 0000000000000000 [ 567.499612][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.499624][T11603] R13: 00007f0e535e6038 R14: 00007f0e535e5fa0 R15: 00007ffe127edd38 [ 567.499652][T11603] [ 567.641204][ T5823] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 567.657179][T11294] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice=e9.64 [ 567.727712][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00 [ 567.739171][T11294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.749057][ T5953] pwc: recv_control_msg error -32 req 02 val 2700 [ 567.756942][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00 [ 567.766935][T11596] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 567.786399][ T5953] pwc: recv_control_msg error -32 req 04 val 1000 [ 567.795955][ T5873] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 567.801461][ T5823] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 567.813334][ T5823] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 567.841030][ T5953] pwc: recv_control_msg error -32 req 04 val 1300 [ 567.848336][ T5953] pwc: recv_control_msg error -32 req 04 val 1400 [ 567.865859][ T5953] pwc: recv_control_msg error -32 req 02 val 2000 [ 567.867806][T11593] random: crng reseeded on system resumption [ 567.882506][ T30] audit: type=1400 audit(1763022561.895:588): avc: denied { ioctl } for pid=11591 comm="syz.3.1539" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 567.916531][ T5953] pwc: recv_control_msg error -32 req 02 val 2100 [ 567.927159][ T5953] pwc: recv_control_msg error -32 req 04 val 1500 [ 567.947784][ T5953] pwc: recv_control_msg error -32 req 02 val 2500 [ 567.963562][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 567.978000][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 567.989054][ T5953] pwc: recv_control_msg error -32 req 02 val 2400 [ 567.993594][T11593] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1539'. [ 567.996475][ T5953] pwc: recv_control_msg error -32 req 02 val 2600 [ 568.017247][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.021401][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 568.031091][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.037528][ T5953] pwc: recv_control_msg error -32 req 02 val 2900 [ 568.077584][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.077945][ T5953] pwc: recv_control_msg error -32 req 02 val 2800 [ 568.086486][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.106416][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 568.118383][ T5953] pwc: recv_control_msg error -71 req 04 val 1100 [ 568.136425][ T24] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 568.142975][ T5953] pwc: recv_control_msg error -71 req 04 val 1200 [ 568.154540][ T6513] usb 4-1: USB disconnect, device number 53 [ 568.163898][ T6513] ------------[ cut here ]------------ [ 568.164687][ T5873] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 568.169369][ T6513] workqueue: work disable count underflowed [ 568.169445][ T6513] WARNING: CPU: 1 PID: 6513 at kernel/workqueue.c:4355 enable_work+0x2f8/0x340 [ 568.181134][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.184280][ T6513] Modules linked in: [ 568.184323][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 568.184350][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.206333][ T5873] usb 3-1: Product: syz [ 568.214452][ T6513] Workqueue: usb_hub_wq hub_event [ 568.214490][ T6513] RIP: 0010:enable_work+0x2f8/0x340 [ 568.214519][ T6513] Code: 89 ee e8 3b b9 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d be 38 00 c6 05 1a 60 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 47 5e a1 00 e9 aa fe ff ff [ 568.214540][ T6513] RSP: 0018:ffffc9000ccc73b0 EFLAGS: 00010086 [ 568.227252][ T5953] pwc: Registered as video103. [ 568.228719][ T6513] [ 568.228728][ T6513] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900195f0000 [ 568.228742][ T6513] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 568.252263][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 568.258496][ T6513] RBP: ffff888058836738 R08: 0000000000000001 R09: 0000000000000000 [ 568.258514][ T6513] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001998e77 [ 568.312787][ T6513] R13: 0000000000000000 R14: ffff888058836698 R15: ffff888058836730 [ 568.320742][ T6513] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 568.329654][ T6513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.336222][ T6513] CR2: 000055f86b730a18 CR3: 0000000075298000 CR4: 00000000003526f0 [ 568.344177][ T6513] Call Trace: [ 568.347435][ T6513] [ 568.350347][ T6513] ? __pfx_enable_work+0x10/0x10 [ 568.355277][ T6513] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 568.361073][ T6513] __cancel_work_sync+0xe7/0x130 [ 568.365999][ T6513] thermal_zone_device_unregister+0x28e/0x4d0 [ 568.372060][ T6513] ? __pfx_shield_remove+0x10/0x10 [ 568.377167][ T6513] power_supply_unregister+0x10a/0x150 [ 568.382613][ T6513] shield_remove+0x75/0x130 [ 568.387108][ T6513] ? __pfx_shield_remove+0x10/0x10 [ 568.392206][ T6513] hid_device_remove+0xd1/0x260 [ 568.397304][ T6513] ? __pfx_hid_device_remove+0x10/0x10 [ 568.402749][ T6513] device_remove+0xcb/0x170 [ 568.407235][ T6513] device_release_driver_internal+0x44b/0x620 [ 568.413292][ T6513] bus_remove_device+0x22f/0x420 [ 568.418226][ T6513] device_del+0x396/0x9f0 [ 568.422544][ T6513] ? __pfx_device_del+0x10/0x10 [ 568.427379][ T6513] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.432394][ T6513] hid_destroy_device+0x19c/0x240 [ 568.437404][ T6513] usbhid_disconnect+0xa0/0xe0 [ 568.442160][ T6513] usb_unbind_interface+0x1dd/0x9e0 [ 568.447356][ T6513] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 568.452971][ T6513] ? __pfx_usb_unbind_interface+0x10/0x10 [ 568.458685][ T6513] device_remove+0x125/0x170 [ 568.463260][ T6513] device_release_driver_internal+0x44b/0x620 [ 568.469317][ T6513] bus_remove_device+0x22f/0x420 [ 568.474248][ T6513] device_del+0x396/0x9f0 [ 568.478566][ T6513] ? __pfx_device_del+0x10/0x10 [ 568.483397][ T6513] ? kobject_put+0x210/0x5a0 [ 568.487978][ T6513] usb_disable_device+0x355/0x7d0 [ 568.493006][ T6513] usb_disconnect+0x2e1/0x9c0 [ 568.497676][ T6513] hub_event+0x1c81/0x4fe0 [ 568.502100][ T6513] ? __lock_acquire+0xb8a/0x1c90 [ 568.507022][ T6513] ? __pfx_hub_event+0x10/0x10 [ 568.511791][ T6513] ? assoc_array_apply_edit+0x250/0x6c0 [ 568.517336][ T6513] ? rcu_is_watching+0x12/0xc0 [ 568.522092][ T6513] process_one_work+0x9cf/0x1b70 [ 568.527024][ T6513] ? __pfx_process_one_work+0x10/0x10 [ 568.532387][ T6513] ? assign_work+0x1a0/0x250 [ 568.536961][ T6513] worker_thread+0x6c8/0xf10 [ 568.541548][ T6513] ? __kthread_parkme+0x19e/0x250 [ 568.546568][ T6513] ? __pfx_worker_thread+0x10/0x10 [ 568.551663][ T6513] kthread+0x3c5/0x780 [ 568.555716][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.560289][ T6513] ? rcu_is_watching+0x12/0xc0 [ 568.565041][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.569614][ T6513] ret_from_fork+0x675/0x7d0 [ 568.574186][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.578764][ T6513] ret_from_fork_asm+0x1a/0x30 [ 568.583540][ T6513] [ 568.586541][ T6513] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.593799][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 568.603149][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.613184][ T6513] Workqueue: usb_hub_wq hub_event [ 568.618200][ T6513] Call Trace: [ 568.621460][ T6513] [ 568.624386][ T6513] dump_stack_lvl+0x3d/0x1f0 [ 568.629006][ T6513] vpanic+0x640/0x6f0 [ 568.633013][ T6513] ? enable_work+0x2f8/0x340 [ 568.637612][ T6513] panic+0xca/0xd0 [ 568.641349][ T6513] ? __pfx_panic+0x10/0x10 [ 568.645788][ T6513] check_panic_on_warn+0xab/0xb0 [ 568.650722][ T6513] __warn+0xf6/0x3c0 [ 568.654604][ T6513] ? __pfx_vprintk_emit+0x10/0x10 [ 568.659623][ T6513] ? enable_work+0x2f8/0x340 [ 568.664207][ T6513] report_bug+0x3c3/0x580 [ 568.668528][ T6513] ? enable_work+0x2f8/0x340 [ 568.673112][ T6513] handle_bug+0x184/0x210 [ 568.677451][ T6513] exc_invalid_op+0x17/0x50 [ 568.681959][ T6513] asm_exc_invalid_op+0x1a/0x20 [ 568.686798][ T6513] RIP: 0010:enable_work+0x2f8/0x340 [ 568.692072][ T6513] Code: 89 ee e8 3b b9 38 00 45 84 ed 0f 85 29 fe ff ff e8 4d be 38 00 c6 05 1a 60 e6 0e 01 90 48 c7 c7 20 29 8c 8b e8 a9 f0 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 47 5e a1 00 e9 aa fe ff ff [ 568.711694][ T6513] RSP: 0018:ffffc9000ccc73b0 EFLAGS: 00010086 [ 568.717768][ T6513] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900195f0000 [ 568.725831][ T6513] RDX: 0000000000100000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 568.733798][ T6513] RBP: ffff888058836738 R08: 0000000000000001 R09: 0000000000000000 [ 568.741759][ T6513] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001998e77 [ 568.749719][ T6513] R13: 0000000000000000 R14: ffff888058836698 R15: ffff888058836730 [ 568.757685][ T6513] ? __warn_printk+0x1a5/0x350 [ 568.762454][ T6513] ? __pfx_enable_work+0x10/0x10 [ 568.767385][ T6513] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 568.773186][ T6513] __cancel_work_sync+0xe7/0x130 [ 568.778130][ T6513] thermal_zone_device_unregister+0x28e/0x4d0 [ 568.784202][ T6513] ? __pfx_shield_remove+0x10/0x10 [ 568.789310][ T6513] power_supply_unregister+0x10a/0x150 [ 568.794766][ T6513] shield_remove+0x75/0x130 [ 568.799261][ T6513] ? __pfx_shield_remove+0x10/0x10 [ 568.804360][ T6513] hid_device_remove+0xd1/0x260 [ 568.809197][ T6513] ? __pfx_hid_device_remove+0x10/0x10 [ 568.814643][ T6513] device_remove+0xcb/0x170 [ 568.819129][ T6513] device_release_driver_internal+0x44b/0x620 [ 568.825186][ T6513] bus_remove_device+0x22f/0x420 [ 568.830120][ T6513] device_del+0x396/0x9f0 [ 568.834436][ T6513] ? __pfx_device_del+0x10/0x10 [ 568.839269][ T6513] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.844286][ T6513] hid_destroy_device+0x19c/0x240 [ 568.849300][ T6513] usbhid_disconnect+0xa0/0xe0 [ 568.854056][ T6513] usb_unbind_interface+0x1dd/0x9e0 [ 568.859249][ T6513] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 568.864869][ T6513] ? __pfx_usb_unbind_interface+0x10/0x10 [ 568.870584][ T6513] device_remove+0x125/0x170 [ 568.875161][ T6513] device_release_driver_internal+0x44b/0x620 [ 568.881220][ T6513] bus_remove_device+0x22f/0x420 [ 568.886153][ T6513] device_del+0x396/0x9f0 [ 568.890469][ T6513] ? __pfx_device_del+0x10/0x10 [ 568.895304][ T6513] ? kobject_put+0x210/0x5a0 [ 568.899888][ T6513] usb_disable_device+0x355/0x7d0 [ 568.904911][ T6513] usb_disconnect+0x2e1/0x9c0 [ 568.909583][ T6513] hub_event+0x1c81/0x4fe0 [ 568.914009][ T6513] ? __lock_acquire+0xb8a/0x1c90 [ 568.918935][ T6513] ? __pfx_hub_event+0x10/0x10 [ 568.923690][ T6513] ? assoc_array_apply_edit+0x250/0x6c0 [ 568.929237][ T6513] ? rcu_is_watching+0x12/0xc0 [ 568.933996][ T6513] process_one_work+0x9cf/0x1b70 [ 568.938945][ T6513] ? __pfx_process_one_work+0x10/0x10 [ 568.944310][ T6513] ? assign_work+0x1a0/0x250 [ 568.948887][ T6513] worker_thread+0x6c8/0xf10 [ 568.953472][ T6513] ? __kthread_parkme+0x19e/0x250 [ 568.958496][ T6513] ? __pfx_worker_thread+0x10/0x10 [ 568.963597][ T6513] kthread+0x3c5/0x780 [ 568.967657][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.972238][ T6513] ? rcu_is_watching+0x12/0xc0 [ 568.976994][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.981658][ T6513] ret_from_fork+0x675/0x7d0 [ 568.986233][ T6513] ? __pfx_kthread+0x10/0x10 [ 568.990809][ T6513] ret_from_fork_asm+0x1a/0x30 [ 568.995577][ T6513] [ 568.998806][ T6513] Kernel Offset: disabled [ 569.003147][ T6513] Rebooting in 86400 seconds..