last executing test programs: 8.314821525s ago: executing program 4 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x5) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x8, 0xfffe, 0x0, 0x33f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = memfd_create(&(0x7f0000000680)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\xcc\xdd\x85\xfa\xccg\x00\x94E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8h\xc3uZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x89\x9d{\x1bD\x8d\x06', 0x9) fcntl$addseals(r5, 0x409, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x8, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00fe0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 7.941122563s ago: executing program 3 (id=852): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) flock(0xffffffffffffffff, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getitimer(0xe, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee00, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 7.445005674s ago: executing program 2 (id=855): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000425bd7000fcdbdf04020001"], 0x24}, 0x1, 0x0, 0x0, 0x24004885}, 0x24000800) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x200408c0}, 0x20040041) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001280)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff0000", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc0800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x86400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000001200)=""/72, 0x0}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4, 0x1, [], [0x0, 0x7], [0x667, 0x80000002], [0x4, 0x0, 0x1, 0x1]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 7.444067837s ago: executing program 4 (id=856): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$TCSETS(r0, 0x8925, &(0x7f0000000100)={0xfffffffc, 0xfffffffc, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 6.883533894s ago: executing program 4 (id=857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x71, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x129880) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x3, 0xffff7fff, 0x1}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e2895810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177070373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe03}}, 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0x25) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r8, &(0x7f0000000a80)=""/4085, 0xff5) getdents(r8, 0x0, 0x0) r9 = dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009}, 0x20004000) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, 0x0) epoll_pwait2(r9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000540)={[0x2]}, 0x8) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x18, 0x7, {0x7, 0xd, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0xc, 0x45, {0x45, 0xf, "241b6e8530b5a5b2f2d29312d23912b7c4f941d8e142bf1677f068db5470a49cda7deba0689e5ad4aef291216b1db7a403de791e0600c073fd7a0df457e6fdf527988e"}}, &(0x7f0000000580)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "0e453485a300131e83d15960cab807a45495cc857ecfa743f253e59d577e5939df681fe43874d7c1228c419cc0947577cd367b184ce64959649cdbbc9c5954412c946d3c7e718934b1e1264ce48134f6487af51404cb51de6d703093f9adb618bc0c7e8f391f36ab47741edc42510e880ba84a169ebf065f4041faefa0b5a66b5d1a62007db56de338ecd612e5a3cea03b620418a4cf87c94f65fc18300e3034382d3352ec9f7ef3ff5158b104a5055259fa092c6979e7c805880f86c5712e36fb54a806adfe377a22de264889c3b2b357a4"}}, &(0x7f0000000180)={0x0, 0x22, 0x17, {[@local=@item_4={0x3, 0x2, 0x7, "7414bab5"}, @local=@item_012={0x1, 0x2, 0xa, "e1"}, @global=@item_012={0x2, 0x1, 0x1, 'QK'}, @main=@item_4={0x3, 0x0, 0xa, "b5506f2d"}, @global=@item_4={0x3, 0x1, 0x2, "18edab2f"}, @main=@item_012={0x2, 0x0, 0xc, '^+'}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xd84}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x0, 0x8, 0x21, "28e2f7e3894b780b48cdff25b6ead11621be9633df78273835bcdd77e562b78b4a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc0}, &(0x7f0000000380)=ANY=[@ANYBLOB="200000000000b8b62290f6c91f85f2ccdf060408000000cb93d5271d60fb50e52b2a475c0e6af3bc7831fd19fa9b2452002c8b6156498d809a2047b47b67e4b33098543ff7d957b9c3f5266e0b4f154ee3fe2ae50e83e1c6e5ae16b94c0306be3ee028b4a1ef10d258638fc4d5db9d2fbaaab2f8326c8d0e45ff01a53d0db3ec9d420a99429b526ccad03c4170e5810996e5be6329eb8d40eff57344e569"], &(0x7f0000000440)={0x20, 0x3, 0x1, 0x3}}) 6.762789908s ago: executing program 2 (id=858): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0xfffffefa) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) getrlimit(0xf, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) gettid() poll(0x0, 0x0, 0x7) setitimer(0x0, 0x0, 0xffffffffffffffff) close(0x4) r1 = syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, 0x0) rt_sigprocmask(0x1, &(0x7f000078b000)={[0x8]}, 0x0, 0x8) gettid() getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x18) rt_sigpending(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.719572572s ago: executing program 2 (id=867): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0xc000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="100a06000908010014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780"], 0x64}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) 5.694610468s ago: executing program 3 (id=868): creat(&(0x7f0000000240)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRES64], 0x30}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r2, 0x702, 0x66a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a16cd93ba365a104b1c1bfa596287f67f45e6c047c80c49bb497f13e3d4709813b398395f267c9e84343125e871c19bad9470e44ea797ecada2b19bc035fea58f6ec6ef080902f4a67c312be05d46a9366de9568c56a261039addc741b00a285e76da5", @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf251400000018000180140002006e657464657673696d3000000000000008000400c9440000"], 0x34}, 0x1, 0x0, 0x0, 0x4040104}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005902da4054311e72c609007f8f5afe28de53360000200209047000000805500003105a23c4b7e597d0156df76e30d1425fb92e26e1f35ec9a9db6a1de20e18f9208f591985db3043ed42ea4afc95ed65e11f073a5c9230cfeb98c8f55381df3fd737c3fe4e658d3d489f2401141f67b5fefb73c8bb6148c4a5fad8095d8964623455e9b4ffd43e3b70fbb507db13037b53dc976878f0de539e5cb5d1e1aa1e9b4ca3d4fa77467361c964f22e842f18abd55d433bcd924b3ca3f21a5d9f75fc3dcbed58147e5251521ea3be6250b028eefd"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000", @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[]) 5.399807973s ago: executing program 0 (id=869): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'nicvf0\x00', {0x4}, 0x2}) 5.339835441s ago: executing program 0 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,']) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="cccafcd01accc9445aec2be3624c845d8f9dbee009e2c34aa4c941dd3f26bc21b677", @ANYRES32=r2, @ANYRES8=r2, @ANYRES32=r1, @ANYRES32=r0], 0x0) 4.708654006s ago: executing program 0 (id=871): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2}, 0xff}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = io_uring_setup(0x6250, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 4.399155775s ago: executing program 1 (id=872): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xffffffff, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40103e05, 0x0) 4.398777128s ago: executing program 4 (id=873): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @mcast1, 0x6}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000064d564b0000fc9e26ce7615"]) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x5}}, 0x18) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) socket$inet6_tcp(0xa, 0x1, 0x0) 4.369431212s ago: executing program 2 (id=874): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2}, 0xff}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = io_uring_setup(0x6250, &(0x7f0000000400)={0x0, 0xb87e, 0x0, 0x5, 0x4c}) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 4.271547432s ago: executing program 1 (id=875): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) flock(0xffffffffffffffff, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getitimer(0xe, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xee00, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 3.294859443s ago: executing program 4 (id=876): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@overlay={0x7f, 0xa, 0x4, 0x2000, 0x3, {}, {0x2, 0xc, 0xab, 0x5, 0x1, 0x5, "048405e7"}, 0xfffffff0, 0x3, {}, 0x5}) r0 = syz_usb_connect$hid(0x0, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xc, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xe, 0xd}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.095862816s ago: executing program 2 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xffffffffffffffff, 0x0, 0xee01) llistxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.072553587s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000380), &(0x7f0000000180)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) sendmsg$inet(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0xff) 3.04394715s ago: executing program 0 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20363159, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000040)={0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xd, 0x0, 0x2b}, 0x10) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000000c0)={r11, 0x3}) 2.685660396s ago: executing program 1 (id=880): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="81a3e1aa819f1f1e3a16bc23ae370163e03d8f05259068ea9bbb93d81ebd5e0873", 0x21}, {&(0x7f0000000280)="f10aea026e56840f43762ab2cccf9230e125eca507000000000000003823956bd42523ce2ec2fb9c49015017f1", 0x2d}], 0x2}, 0x200080d0) recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340), 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/243}, {&(0x7f00000005c0)=""/174}, {&(0x7f0000000680)=""/144}, {&(0x7f0000000740)=""/103}], 0x0, &(0x7f00000007c0)=""/4096}, 0x100}], 0x2, 0x40002000, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000002, {0x2, 0x1}}, 0x18) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)="eac8b5", 0x3}], 0x2, 0x0, 0x0, 0x810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xfffffff3, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) connect$vsock_stream(r7, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) unshare(0x6e000000) socket$netlink(0x10, 0x3, 0x0) 2.587821392s ago: executing program 3 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x40, 0x1b7, {0xffffffffffffffff}, {}, 0x6, 0x3c24}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x80000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1e) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x12, &(0x7f0000001300)=ANY=[@ANYBLOB="185300000900000000000000000000001812000082af9bc9f9b8773a85e6894eeadd422c7e87fc9e89369dea8bf64c08382e5f3147191c451d3c5aedab6fdd", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000184a0000f9ffffff00000000000000001833000005000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000008520000004000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x1, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0xfffffffffffffd8d, 0x10, &(0x7f00000012c0)={0x5, 0x7, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x4, 0x3, 0xc, 0x4}, {0x2, 0x4}, {0x3, 0x1, 0xb, 0x2}, {0x1, 0x3, 0x0, 0x4}, {0x5, 0x2, 0xe, 0x6}, {0x1, 0x1, 0x4, 0x6}, {0x4, 0x2, 0x10, 0x5}, {0x3, 0x1, 0xc, 0x8}], 0x10, 0x6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 1.827814599s ago: executing program 0 (id=882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.589100311s ago: executing program 1 (id=883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x400, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x9, &(0x7f0000000140)) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x4}, 0x90) 1.424540634s ago: executing program 3 (id=884): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000040)}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10002) socket$kcm(0xa, 0x2, 0x73) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0xffffffffffffff9e, 0x0, 0x0, 0x0, 0x0, 0x45883}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8880}}], 0x2, 0x41) 424.266352ms ago: executing program 2 (id=885): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048880}, 0xc000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="100a06000908010014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780"], 0x64}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) 421.772559ms ago: executing program 4 (id=886): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000140)={[{@noprefix}]}) io_setup(0x1fd, &(0x7f0000000480)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000018, 0x8010, r4, 0x160a2000) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r8 = io_uring_setup(0x4126, &(0x7f0000000180)) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000040605000000000000000000070000080900020073797a31000000000500e8c7211066be0300000073797a31004995efe200e40007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8c9}, 0x8000) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, &(0x7f0000001bc0), 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b047a9bda3a", @ANYRES32=r6, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210009"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000008c0)={0xc0}) r11 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES64=r11], 0x50}}, 0x4008840) io_submit(r0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 275.570541ms ago: executing program 3 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000000900000030000380140002007663616e30000000000000000000000008000300010000000800010002000000080005"], 0x44}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r2, 0x0, 0x0, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000014c0)={0x9, "79ea825d1d1a52a17a418866f4fc362cb7f1971fc9874f02f6c592fcb0dedbec", 0x4, 0x40, 0x7, 0x6, 0x1, 0x0, 0x0, 0x6}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 244.657891ms ago: executing program 3 (id=888): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000001c0)=0x5, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={'ip6_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 182.006778ms ago: executing program 0 (id=889): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) timer_delete(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="3e444c729f37cfe59d9d07a9949032d5a78a47ce62695d9ec17734a43488b20172b82a4b424be91273a297600e2702184802e2a2e693", 0x36}, {&(0x7f0000001380)="014618f368f9293a5436750ce73620d70a67ffe3fb8abcf5d3dd8e08d0c988c66e83b6d8402166d188a5f7678f11e330bd5899aae056784c9328fea3cf6a31e74a1b040bbd41a5eaf674c721ca7e5e6115ba32e460bbe1e0bc69c706cb6e3bedeb2800d03c65b128636be5ca9f6bcec123d8b38807c0c221ae51886690530290c88a0f44fec7fe9da2b5780bb679eb3e4735bebef7c9cffd4776072481e036d5f1a69f7d619c07382c577a831be6240b9be50d7bb854141b42f5", 0xba}], 0x3}, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24048854}, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffdb1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f0000000340)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x10) brk(0x689d80000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) accept$packet(r0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ame="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 133.284065][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.318993][ T30] audit: type=1400 audit(1755588097.635:556): avc: denied { open } for pid=7368 comm="syz.2.398" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 133.319532][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 133.353486][ T7388] netlink: 'syz.0.404': attribute type 30 has an invalid length. [ 133.361381][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 133.501039][ T840] usb 2-1: USB disconnect, device number 22 [ 133.941904][ T7400] vlan3: entered promiscuous mode [ 134.181392][ T840] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 134.240086][ T30] audit: type=1400 audit(1755588098.655:557): avc: denied { write } for pid=7402 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.335367][ T840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.344717][ T840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.357045][ T840] usb 2-1: Product: syz [ 134.362791][ T840] usb 2-1: Manufacturer: syz [ 134.368040][ T840] usb 2-1: SerialNumber: syz [ 134.373628][ T30] audit: type=1400 audit(1755588098.795:558): avc: denied { listen } for pid=7408 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.374843][ T840] usb 2-1: config 0 descriptor?? [ 134.438009][ T30] audit: type=1400 audit(1755588098.835:559): avc: denied { read } for pid=7408 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.609825][ T840] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.702410][ T7419] netlink: 'syz.3.413': attribute type 2 has an invalid length. [ 134.710175][ T7419] netlink: 68 bytes leftover after parsing attributes in process `syz.3.413'. [ 134.793370][ T7421] netlink: 'syz.0.414': attribute type 2 has an invalid length. [ 134.801085][ T7421] netlink: 68 bytes leftover after parsing attributes in process `syz.0.414'. [ 135.031469][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.181459][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 135.188299][ T10] usb 4-1: config 0 has no interfaces? [ 135.195879][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 135.205211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.232535][ T5954] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 135.255420][ T10] usb 4-1: Product: syz [ 135.259707][ T10] usb 4-1: Manufacturer: syz [ 135.277985][ T5954] usb 3-1: USB disconnect, device number 13 [ 135.291980][ T10] usb 4-1: SerialNumber: syz [ 135.587302][ T10] usb 4-1: config 0 descriptor?? [ 136.188179][ T840] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 136.202589][ T840] usb 2-1: USB disconnect, device number 23 [ 136.242296][ T5954] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.392970][ T5954] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.401780][ T5954] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.412408][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.421537][ T5954] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 136.432592][ T5954] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 136.444788][ T5954] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.453915][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.461925][ T5954] usb 3-1: Product: syz [ 136.466091][ T5954] usb 3-1: Manufacturer: syz [ 136.473972][ T5954] cdc_wdm 3-1:1.0: skipping garbage [ 136.479186][ T5954] cdc_wdm 3-1:1.0: skipping garbage [ 136.485249][ T5954] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 136.491147][ T5954] cdc_wdm 3-1:1.0: Unknown control protocol [ 137.488078][ T7443] PKCS7: Unknown OID: [5] (bad) [ 137.493647][ T7443] PKCS7: Only support pkcs7_signedData type [ 137.506776][ T7443] netlink: 'syz.4.420': attribute type 2 has an invalid length. [ 137.514508][ T7443] netlink: 68 bytes leftover after parsing attributes in process `syz.4.420'. [ 137.657625][ T5954] usb 4-1: USB disconnect, device number 15 [ 137.725447][ T7447] loop7: detected capacity change from 0 to 7 [ 137.741861][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.750984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.761340][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.770514][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 137.780709][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.790057][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.039480][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.048904][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.124428][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.133615][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.562429][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.571625][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.579918][ T7447] ldm_validate_partition_table(): Disk read failed. [ 138.592194][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.601385][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.629441][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.638726][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.683476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.692680][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.705869][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.715048][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 138.722954][ T7447] Dev loop7: unable to read RDB block 0 [ 138.734782][ T7447] loop7: unable to read partition table [ 138.740664][ T7447] loop7: partition table beyond EOD, truncated [ 138.764623][ T7447] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 138.838318][ T7457] overlayfs: failed to resolve '/ BRXgq2l.Ф2Ź@#A@_.v̷{A!Ns': -2 [ 138.861428][ T7457] capability: warning: `syz.0.424' uses deprecated v2 capabilities in a way that may be insecure [ 138.887859][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 138.887873][ T30] audit: type=1400 audit(1755588103.305:567): avc: denied { read } for pid=7459 comm="syz.3.426" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.927488][ T30] audit: type=1400 audit(1755588103.305:568): avc: denied { open } for pid=7459 comm="syz.3.426" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.671998][ T9] usb 3-1: USB disconnect, device number 14 [ 139.706890][ T7473] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 139.713554][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.721541][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 139.932815][ T7473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.941095][ T840] vhci_hcd: vhci_device speed not set [ 139.953268][ T7473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.980260][ T7473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.992124][ T7473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 140.001184][ T30] audit: type=1400 audit(1755588104.415:569): avc: denied { append } for pid=7476 comm="syz.1.430" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.024664][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.038507][ T840] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 140.056621][ T7473] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(16) [ 140.063280][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.084021][ T7480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 140.112415][ T7480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 140.201482][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 140.220529][ T7480] vhci_hcd vhci_hcd.0: port 0 already used [ 140.592216][ T7478] vhci_hcd: connection closed [ 140.592369][ T7489] vhci_hcd: stop threads [ 140.601876][ T7474] vhci_hcd: connection reset by peer [ 140.609914][ T7489] vhci_hcd: release socket [ 140.615776][ T7489] vhci_hcd: disconnect device [ 140.620626][ T7489] vhci_hcd: stop threads [ 140.625317][ T7489] vhci_hcd: release socket [ 140.646863][ T30] audit: type=1400 audit(1755588105.065:570): avc: denied { mounton } for pid=7490 comm="syz.3.432" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 140.650363][ T7489] vhci_hcd: disconnect device [ 140.671308][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.796715][ T7499] netlink: 'syz.4.433': attribute type 2 has an invalid length. [ 140.804504][ T7499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.433'. [ 140.882017][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 141.066739][ T30] audit: type=1326 audit(1755588105.485:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.0.434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca8c78ebe9 code=0x0 [ 141.089405][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.149355][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 141.159362][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.171191][ T9] usb 4-1: config 0 has no interface number 0 [ 141.305968][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 141.326716][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 141.336374][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.345044][ T9] usb 4-1: Product: syz [ 141.349271][ T9] usb 4-1: Manufacturer: syz [ 141.356394][ T9] usb 4-1: SerialNumber: syz [ 141.368067][ T9] usb 4-1: config 0 descriptor?? [ 141.379854][ T9] smsc75xx v1.0.0 [ 141.384948][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 141.398485][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 141.592602][ T30] audit: type=1400 audit(1755588106.015:572): avc: denied { write } for pid=7490 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.675980][ T7518] syzkaller1: entered promiscuous mode [ 141.692227][ T7518] syzkaller1: entered allmulticast mode [ 142.371633][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 142.499515][ T7529] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 142.508415][ T7529] bridge2: entered promiscuous mode [ 142.513683][ T7529] bridge2: entered allmulticast mode [ 142.523770][ T30] audit: type=1400 audit(1755588106.945:573): avc: denied { connect } for pid=7527 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.596725][ T30] audit: type=1400 audit(1755588106.965:574): avc: denied { create } for pid=7527 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.627002][ T30] audit: type=1400 audit(1755588106.965:575): avc: denied { connect } for pid=7527 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.656976][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.670530][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.680726][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.690066][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.704034][ T10] usb 2-1: config 0 descriptor?? [ 142.715968][ T10] hub 2-1:0.0: USB hub found [ 142.937108][ T10] hub 2-1:0.0: 2 ports detected [ 143.476924][ T7521] ALSA: mixer_oss: invalid OSS volume '8' [ 143.614940][ T44] usb 4-1: USB disconnect, device number 16 [ 144.548664][ T7549] tipc: Started in network mode [ 144.553645][ T7549] tipc: Node identity ee8183c888c3, cluster identity 4711 [ 144.560915][ T7549] tipc: Enabled bearer , priority 0 [ 144.568478][ T7549] syzkaller0: entered promiscuous mode [ 144.577311][ T7549] syzkaller0: entered allmulticast mode [ 144.595436][ T7549] tipc: Resetting bearer [ 144.618486][ T7547] tipc: Resetting bearer [ 144.632378][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 144.660289][ T7547] tipc: Disabling bearer [ 144.679367][ T7550] wg2: entered promiscuous mode [ 144.684277][ T7550] wg2: entered allmulticast mode [ 144.876327][ T7561] tipc: Enabled bearer , priority 0 [ 144.892162][ T7561] syzkaller0: entered promiscuous mode [ 145.243689][ T7561] syzkaller0: entered allmulticast mode [ 145.271422][ T840] vhci_hcd: vhci_device speed not set [ 145.318876][ T7561] tipc: Resetting bearer [ 145.330713][ T7557] tipc: Resetting bearer [ 145.371489][ T10] usb 2-1: USB disconnect, device number 24 [ 146.022934][ T5903] tipc: Node number set to 334915013 [ 146.130473][ T7557] tipc: Disabling bearer [ 146.200323][ T7572] netlink: 6 bytes leftover after parsing attributes in process `syz.4.457'. [ 146.253250][ T7572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.571461][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 146.719848][ T7583] gretap0: entered promiscuous mode [ 146.725373][ T7583] vlan2: entered promiscuous mode [ 146.908276][ T7580] netlink: 'syz.1.460': attribute type 5 has an invalid length. [ 146.935540][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'. [ 147.070221][ T30] audit: type=1400 audit(1755588111.405:576): avc: denied { getopt } for pid=7587 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.090312][ T30] audit: type=1400 audit(1755588111.445:577): avc: denied { write } for pid=7579 comm="syz.1.460" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 147.121386][ T30] audit: type=1400 audit(1755588111.535:578): avc: denied { create } for pid=7582 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.198348][ T30] audit: type=1400 audit(1755588111.535:579): avc: denied { listen } for pid=7582 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.235253][ T30] audit: type=1400 audit(1755588111.535:580): avc: denied { module_request } for pid=7582 comm="syz.4.461" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.257243][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.349618][ T30] audit: type=1400 audit(1755588111.565:581): avc: denied { read write } for pid=5840 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.373702][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.563453][ T30] audit: type=1400 audit(1755588111.565:582): avc: denied { open } for pid=5840 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.587466][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.642452][ T7612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.467'. [ 147.749659][ T5849] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 147.802887][ T30] audit: type=1400 audit(1755588111.565:583): avc: denied { ioctl } for pid=5840 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.861466][ T30] audit: type=1400 audit(1755588111.585:584): avc: denied { shutdown } for pid=7582 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.883599][ T30] audit: type=1400 audit(1755588111.625:585): avc: denied { read write } for pid=7596 comm="syz.1.465" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 147.907070][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 147.913330][ T5849] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.921519][ T5849] usb 3-1: config 0 has no interface number 0 [ 147.927597][ T5849] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 147.941653][ T5849] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 147.961769][ T5849] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 147.970815][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.023095][ T5849] usb 3-1: config 0 descriptor?? [ 148.800698][ T5849] uclogic 0003:28BD:0071.0008: pen parameters not found [ 148.807734][ T5849] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 149.166348][ T5849] usb 3-1: USB disconnect, device number 15 [ 150.108343][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 150.121859][ T7638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7638 comm=syz.3.476 [ 150.323615][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.453086][ T7646] vlan2: entered promiscuous mode [ 150.647154][ T10] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 150.669584][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.692194][ T10] usb 2-1: Product: syz [ 150.700560][ T10] usb 2-1: Manufacturer: syz [ 150.710419][ T10] usb 2-1: SerialNumber: syz [ 150.726173][ T10] usb 2-1: config 0 descriptor?? [ 150.738262][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 150.948796][ T10] gspca_spca501: reg write: error -71 [ 150.961524][ T10] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 151.042635][ T10] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 151.172942][ T10] usb 2-1: Found UVC 0.00 device syz (0000:0000) [ 151.184165][ T10] usb 2-1: No valid video chain found. [ 151.204980][ T10] usb 2-1: USB disconnect, device number 25 [ 151.511398][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 151.741446][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 151.778612][ T44] usb 4-1: config 6 has an invalid interface number: 213 but max is 1 [ 151.802643][ T44] usb 4-1: config 6 has an invalid interface number: 211 but max is 1 [ 151.850615][ T44] usb 4-1: config 6 has no interface number 0 [ 151.886295][ T44] usb 4-1: config 6 has no interface number 1 [ 151.947372][ T44] usb 4-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.139084][ T44] usb 4-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 152.207792][ T44] usb 4-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7 [ 152.228581][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 152.228596][ T30] audit: type=1400 audit(1755588116.645:673): avc: denied { write } for pid=7683 comm="syz.4.488" name="anycast6" dev="proc" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 152.239923][ T44] usb 4-1: config 6 interface 213 altsetting 0 endpoint 0x83 has invalid maxpacket 57448, setting to 1024 [ 152.257634][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.353074][ T44] usb 4-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.381505][ T44] usb 4-1: config 6 interface 211 has no altsetting 0 [ 152.400903][ T44] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 152.413572][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.421877][ T44] usb 4-1: Product: syz [ 152.426042][ T44] usb 4-1: Manufacturer: syz [ 152.430781][ T44] usb 4-1: SerialNumber: syz [ 152.446138][ T30] audit: type=1400 audit(1755588116.865:674): avc: denied { create } for pid=7690 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.466388][ T5954] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 153.096595][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.107667][ T30] audit: type=1400 audit(1755588116.865:675): avc: denied { write } for pid=7690 comm="syz.2.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.109759][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.181356][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 153.271053][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.332065][ T44] em28xx 4-1:6.213: New device syz syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 153.343696][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.369806][ T44] em28xx 4-1:6.213: Audio interface 213 found (Vendor Class) [ 153.372779][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.391404][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.416907][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.433935][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.450366][ T5954] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.473489][ T30] audit: type=1400 audit(1755588117.895:676): avc: denied { connect } for pid=7700 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.501414][ T5954] usb 2-1: Manufacturer: syz [ 153.501690][ T44] em28xx 4-1:6.213: unknown em28xx chip ID (0) [ 153.516878][ T5954] usb 2-1: config 0 descriptor?? [ 153.548683][ T44] em28xx 4-1:6.213: Config register raw data: 0xfffffffb [ 153.549599][ T30] audit: type=1400 audit(1755588117.965:677): avc: denied { ioctl } for pid=7703 comm="syz.0.493" path="socket:[15257]" dev="sockfs" ino=15257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.580872][ T44] em28xx 4-1:6.213: AC97 chip type couldn't be determined [ 153.591015][ T44] em28xx 4-1:6.213: No AC97 audio processor [ 153.695439][ T44] usb 4-1: USB disconnect, device number 17 [ 153.725798][ T44] em28xx 4-1:6.213: Disconnecting em28xx [ 153.736066][ T44] em28xx 4-1:6.213: Freeing device [ 153.759164][ T30] audit: type=1400 audit(1755588118.175:678): avc: denied { create } for pid=7712 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.781018][ T30] audit: type=1400 audit(1755588118.195:679): avc: denied { ioctl } for pid=7712 comm="syz.0.495" path="socket:[15277]" dev="sockfs" ino=15277 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.832519][ T7716] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.495'. [ 153.863934][ T7713] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.495'. [ 153.955451][ T30] audit: type=1400 audit(1755588118.375:680): avc: denied { block_suspend } for pid=7719 comm="syz.0.497" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.994870][ T30] audit: type=1400 audit(1755588118.395:681): avc: denied { shutdown } for pid=7719 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.132419][ T5954] rc_core: IR keymap rc-hauppauge not found [ 154.138843][ T5954] Registered IR keymap rc-empty [ 154.145055][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.172986][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.192468][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 154.231423][ T30] audit: type=1400 audit(1755588118.658:682): avc: denied { bind } for pid=7726 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.259541][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 154.333651][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.381392][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.415388][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.451414][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.481397][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.501440][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.521415][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.541431][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.561434][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.581426][ T5954] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 154.612676][ T5954] mceusb 2-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 154.621099][ T5954] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.632715][ T5954] usb 2-1: USB disconnect, device number 26 [ 155.060076][ T7746] fuse: Unknown parameter 'user_id00000000000000000000' [ 155.491507][ T5954] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 155.642498][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 155.653824][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 155.665767][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 155.681851][ T5954] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 155.691288][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.699494][ T5954] usb 2-1: Product: syz [ 155.703729][ T5954] usb 2-1: Manufacturer: syz [ 155.708409][ T5954] usb 2-1: SerialNumber: syz [ 155.716303][ T5954] usb 2-1: config 0 descriptor?? [ 155.731563][ T7752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.742186][ T5954] usb 2-1: ucan: probing device on interface #0 [ 155.750249][ T5954] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 155.756538][ T5954] usb 2-1: ucan: probe failed; try to update the device firmware [ 156.605705][ T7777] lo speed is unknown, defaulting to 1000 [ 156.611707][ T7777] lo speed is unknown, defaulting to 1000 [ 156.619298][ T7777] lo speed is unknown, defaulting to 1000 [ 156.632219][ T7777] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.654995][ T7777] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.701479][ T7777] lo speed is unknown, defaulting to 1000 [ 156.711536][ T7777] lo speed is unknown, defaulting to 1000 [ 156.720875][ T7777] lo speed is unknown, defaulting to 1000 [ 156.730076][ T7777] lo speed is unknown, defaulting to 1000 [ 156.739373][ T7777] lo speed is unknown, defaulting to 1000 [ 157.910834][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 157.910854][ T30] audit: type=1400 audit(1755588122.331:703): avc: denied { create } for pid=7794 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 157.937059][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.947884][ T30] audit: type=1400 audit(1755588122.331:704): avc: denied { create } for pid=7794 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.968828][ T30] audit: type=1400 audit(1755588122.331:705): avc: denied { create } for pid=7794 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 157.988385][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.050798][ T30] audit: type=1400 audit(1755588122.471:706): avc: denied { read write } for pid=7797 comm="syz.2.522" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.073743][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.223362][ T30] audit: type=1400 audit(1755588122.471:707): avc: denied { open } for pid=7797 comm="syz.2.522" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.676209][ T9] usb 2-1: USB disconnect, device number 27 [ 158.739190][ T5903] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.847977][ T7810] lo speed is unknown, defaulting to 1000 [ 158.891979][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 158.907883][ T5903] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.930001][ T5903] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 159.033851][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.054622][ T5903] usb 3-1: config 0 descriptor?? [ 159.145188][ T30] audit: type=1400 audit(1755588123.561:708): avc: denied { getopt } for pid=7820 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.227327][ T30] audit: type=1400 audit(1755588123.561:709): avc: denied { getopt } for pid=7820 comm="syz.0.526" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.517272][ T7827] gretap0: entered promiscuous mode [ 159.522798][ T7827] vlan2: entered promiscuous mode [ 159.597750][ T5903] zydacron 0003:13EC:0006.0009: unknown main item tag 0x0 [ 159.655464][ T5903] zydacron 0003:13EC:0006.0009: unknown main item tag 0x0 [ 159.664829][ T5903] zydacron 0003:13EC:0006.0009: unknown main item tag 0x0 [ 159.672425][ T5903] zydacron 0003:13EC:0006.0009: unknown main item tag 0x0 [ 159.679579][ T5903] zydacron 0003:13EC:0006.0009: unknown main item tag 0x0 [ 159.689282][ T5903] zydacron 0003:13EC:0006.0009: hidraw0: USB HID v0.05 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 159.798279][ T5903] usb 3-1: USB disconnect, device number 16 [ 159.886122][ T7828] fido_id[7828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 160.111365][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 160.142256][ T30] audit: type=1400 audit(1755588124.551:710): avc: denied { setopt } for pid=7836 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.183283][ T30] audit: type=1400 audit(1755588124.551:711): avc: denied { write } for pid=7836 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.262195][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 160.290421][ T9] usb 4-1: no configurations [ 160.295717][ T9] usb 4-1: can't read configurations, error -22 [ 160.309132][ T5848] Bluetooth: hci3: unexpected cc 0x0c20 length: 4 > 1 [ 160.441374][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 160.621359][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 160.631243][ T9] usb 4-1: no configurations [ 160.640734][ T9] usb 4-1: can't read configurations, error -22 [ 160.654020][ T9] usb usb4-port1: attempt power cycle [ 161.206690][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 161.562223][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 161.567933][ T9] usb 4-1: no configurations [ 161.572893][ T9] usb 4-1: can't read configurations, error -22 [ 161.758028][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 161.782333][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 161.815931][ T9] usb 4-1: no configurations [ 161.840988][ T9] usb 4-1: can't read configurations, error -22 [ 161.849188][ T9] usb usb4-port1: unable to enumerate USB device [ 162.071418][ T30] audit: type=1400 audit(1755588126.403:712): avc: denied { connect } for pid=7871 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.211496][ T7880] vlan3: entered promiscuous mode [ 162.423814][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 163.393690][ T7905] syz.1.553: attempt to access beyond end of device [ 163.393690][ T7905] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 163.411518][ T7905] XFS (nbd1): SB validate failed with error -5. [ 163.425925][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 163.425941][ T30] audit: type=1326 audit(1755588127.843:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7914 comm="syz.0.554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca8c78ebe9 code=0x0 [ 163.454745][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.478847][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 163.608152][ T30] audit: type=1400 audit(1755588128.013:715): avc: denied { sys_module } for pid=7914 comm="syz.0.554" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.118265][ T30] audit: type=1400 audit(1755588128.503:716): avc: denied { create } for pid=7927 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.300717][ T30] audit: type=1400 audit(1755588128.503:717): avc: denied { bind } for pid=7927 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.813745][ T30] audit: type=1400 audit(1755588128.503:718): avc: denied { write } for pid=7927 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.209838][ T7944] vlan2: entered promiscuous mode [ 165.385672][ T30] audit: type=1400 audit(1755588129.803:719): avc: denied { create } for pid=7945 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.410803][ T30] audit: type=1400 audit(1755588129.803:720): avc: denied { accept } for pid=7945 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.430425][ T30] audit: type=1400 audit(1755588129.803:721): avc: denied { setopt } for pid=7945 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.449709][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.541538][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 165.691368][ T44] usb 2-1: device descriptor read/64, error -71 [ 165.811643][ T30] audit: type=1400 audit(1755588130.223:722): avc: denied { read } for pid=7951 comm="syz.0.565" path="socket:[16955]" dev="sockfs" ino=16955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 165.834591][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.022227][ T44] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 166.427500][ T30] audit: type=1400 audit(1755588130.813:723): avc: denied { getopt } for pid=7956 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.571440][ T44] usb 2-1: device descriptor read/64, error -71 [ 166.682004][ T44] usb usb2-port1: attempt power cycle [ 166.881385][ T840] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 167.064532][ T840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.078368][ T840] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.111207][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.192006][ T840] usb 4-1: config 0 descriptor?? [ 167.214587][ T840] pwc: Askey VC010 type 2 USB webcam detected. [ 167.616204][ T840] pwc: recv_control_msg error -32 req 02 val 2b00 [ 167.656510][ T840] pwc: recv_control_msg error -32 req 02 val 2700 [ 167.778176][ T840] pwc: recv_control_msg error -32 req 02 val 2c00 [ 167.860965][ T840] pwc: recv_control_msg error -32 req 04 val 1000 [ 167.890065][ T840] pwc: recv_control_msg error -32 req 04 val 1300 [ 167.906411][ T840] pwc: recv_control_msg error -32 req 04 val 1400 [ 167.919902][ T840] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.929871][ T840] pwc: recv_control_msg error -32 req 02 val 2100 [ 167.936987][ T840] pwc: recv_control_msg error -32 req 04 val 1500 [ 167.944439][ T840] pwc: recv_control_msg error -32 req 02 val 2500 [ 168.491164][ T7993] fuse: Unknown parameter '0x0000000000000003' [ 168.541425][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 168.780683][ T7997] vlan2: entered promiscuous mode [ 169.048620][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 169.066394][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 169.104417][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 169.450348][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 169.498874][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.512082][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 169.512098][ T30] audit: type=1400 audit(1755588133.923:732): avc: denied { read write } for pid=8001 comm="syz.2.579" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 169.551432][ T30] audit: type=1400 audit(1755588133.923:733): avc: denied { open } for pid=8001 comm="syz.2.579" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 169.649372][ T840] pwc: recv_control_msg error -71 req 02 val 2600 [ 169.662298][ T840] pwc: recv_control_msg error -71 req 02 val 2900 [ 169.669074][ T840] pwc: recv_control_msg error -71 req 02 val 2800 [ 169.699113][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.711442][ T840] pwc: recv_control_msg error -71 req 04 val 1100 [ 169.730426][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.741865][ T840] pwc: recv_control_msg error -71 req 04 val 1200 [ 169.761474][ T840] pwc: Registered as video103. [ 169.773693][ T8009] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 169.784173][ T840] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 169.794133][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 169.803891][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.823080][ T10] usb 2-1: Product: syz [ 169.827501][ T30] audit: type=1400 audit(1755588134.103:734): avc: denied { remount } for pid=8006 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 169.834695][ T840] usb 4-1: USB disconnect, device number 22 [ 169.861460][ T10] usb 2-1: Manufacturer: syz [ 169.881343][ T10] usb 2-1: SerialNumber: syz [ 169.917975][ T10] usb 2-1: config 0 descriptor?? [ 170.081450][ T8017] netlink: 'syz.3.582': attribute type 20 has an invalid length. [ 170.143323][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 170.148158][ T30] audit: type=1400 audit(1755588134.543:735): avc: denied { mount } for pid=8016 comm="syz.0.584" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.161378][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 170.185348][ T8017] dvmrp17: entered allmulticast mode [ 170.313185][ T30] audit: type=1400 audit(1755588134.633:736): avc: denied { write } for pid=7987 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.320611][ T44] usb 2-1: USB disconnect, device number 31 [ 170.332943][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.356512][ T8012] dvmrp17: left allmulticast mode [ 170.402142][ T30] audit: type=1400 audit(1755588134.633:737): avc: denied { read } for pid=7987 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.460218][ T30] audit: type=1400 audit(1755588134.723:738): avc: denied { execute } for pid=8016 comm="syz.0.584" path="/147/file0/bus" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.483022][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.647419][ T30] audit: type=1400 audit(1755588134.723:739): avc: denied { bind } for pid=7987 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 170.667088][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.785639][ T30] audit: type=1400 audit(1755588134.723:740): avc: denied { ioctl } for pid=7987 comm="syz.1.575" path="socket:[17012]" dev="sockfs" ino=17012 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.070270][ T8034] fuse: Unknown parameter '0x0000000000000003' [ 171.993568][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 172.002579][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 172.059678][ T8056] netlink: 116 bytes leftover after parsing attributes in process `syz.3.593'. [ 172.353196][ T44] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 172.572914][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 172.652451][ T44] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 172.661732][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.675716][ T44] usb 2-1: Product: syz [ 172.679907][ T44] usb 2-1: Manufacturer: syz [ 172.690445][ T44] usb 2-1: SerialNumber: syz [ 172.702940][ T44] usb 2-1: config 0 descriptor?? [ 172.727204][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 172.820236][ T30] audit: type=1400 audit(1755588137.240:741): avc: denied { write } for pid=8063 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 173.545507][ T8073] PKCS7: Unknown OID: [5] (bad) [ 173.550452][ T8073] PKCS7: Only support pkcs7_signedData type [ 173.559554][ T8073] netlink: 'syz.4.599': attribute type 2 has an invalid length. [ 173.567336][ T8073] netlink: 68 bytes leftover after parsing attributes in process `syz.4.599'. [ 174.609889][ T8045] 9pnet: p9_errstr2errno: server reported unknown error 5- uKDʓ#E‘Yl o#&[1 [ 174.665932][ T44] gspca_stk1135: reg_w 0x200 err -71 [ 174.672292][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.678631][ T44] gspca_stk1135: Sensor write failed [ 174.689244][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.712421][ T44] gspca_stk1135: Sensor write failed [ 174.730306][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.746947][ T44] gspca_stk1135: Sensor read failed [ 174.761696][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.779668][ T44] gspca_stk1135: Sensor read failed [ 174.794141][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 174.815953][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.835950][ T44] gspca_stk1135: Sensor read failed [ 174.841242][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.848892][ T44] gspca_stk1135: Sensor read failed [ 174.854902][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.861957][ T44] gspca_stk1135: Sensor write failed [ 174.867396][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 174.874683][ T44] gspca_stk1135: Sensor write failed [ 174.880165][ T44] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 174.956762][ T44] usb 2-1: USB disconnect, device number 32 [ 175.116411][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 175.116427][ T30] audit: type=1400 audit(1755588139.540:743): avc: denied { mount } for pid=8093 comm="syz.0.606" name="/" dev="autofs" ino=17235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 175.843172][ T8107] lo speed is unknown, defaulting to 1000 [ 178.241608][ T8125] vlan3: entered promiscuous mode [ 178.276044][ T30] audit: type=1400 audit(1755588142.560:744): avc: denied { create } for pid=8115 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.423280][ T8128] comedi: valid board names for 8255 driver are: [ 178.429690][ T8128] 8255 [ 178.434901][ T8128] comedi: valid board names for vmk80xx driver are: [ 178.441701][ T8128] vmk80xx [ 178.445836][ T8128] comedi: valid board names for usbduxsigma driver are: [ 178.452969][ T30] audit: type=1400 audit(1755588142.570:745): avc: denied { write } for pid=8115 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 178.475514][ T8128] usbduxsigma [ 178.478932][ T8128] comedi: valid board names for usbduxfast driver are: [ 178.490200][ T8128] usbduxfast [ 178.491581][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8109 comm=syz.0.610 [ 178.496385][ T8128] comedi: valid board names for usbdux driver are: [ 178.524944][ T8128] usbdux [ 178.527947][ T8128] comedi: valid board names for ni6501 driver are: [ 178.534699][ T8128] ni6501 [ 178.538803][ T8128] comedi: valid board names for dt9812 driver are: [ 178.545940][ T8128] dt9812 [ 178.549044][ T8128] comedi: valid board names for ni_labpc_cs driver are: [ 178.556160][ T8128] ni_labpc_cs [ 178.559704][ T8128] comedi: valid board names for ni_daq_700 driver are: [ 178.566739][ T8128] ni_daq_700 [ 178.570143][ T8128] comedi: valid board names for labpc_pci driver are: [ 178.577049][ T8128] labpc_pci [ 178.580352][ T8128] comedi: valid board names for adl_pci9118 driver are: [ 178.587426][ T8128] pci9118dg [ 178.590802][ T8128] pci9118hg [ 178.594106][ T8128] pci9118hr [ 178.597474][ T8128] comedi: valid board names for 8255_pci driver are: [ 178.604454][ T8128] 8255_pci [ 178.607744][ T8128] comedi: valid board names for s526 driver are: [ 178.614269][ T8128] s526 [ 178.617188][ T8128] comedi: valid board names for multiq3 driver are: [ 178.623880][ T8128] multiq3 [ 178.626962][ T8128] comedi: valid board names for pcmuio driver are: [ 178.633549][ T8128] pcmuio48 [ 178.636715][ T8128] pcmuio96 [ 178.639861][ T8128] comedi: valid board names for pcmmio driver are: [ 178.646470][ T8128] pcmmio [ 178.649448][ T8128] comedi: valid board names for pcmda12 driver are: [ 178.656107][ T8128] pcmda12 [ 178.659310][ T8128] comedi: valid board names for pcmad driver are: [ 178.665877][ T8128] pcmad12 [ 178.669039][ T8128] pcmad16 [ 178.672207][ T8128] comedi: valid board names for ni_labpc driver are: [ 178.678987][ T8128] lab-pc-1200 [ 178.682479][ T8128] lab-pc-1200ai [ 178.686123][ T8128] lab-pc+ [ 178.689242][ T8128] comedi: valid board names for atmio16 driver are: [ 178.695958][ T8128] atmio16 [ 178.699037][ T8128] atmio16d [ 178.702321][ T8128] comedi: valid board names for ni_at_ao driver are: [ 178.709408][ T8128] at-ao-6 [ 178.712552][ T8128] at-ao-10 [ 178.715761][ T8128] comedi: valid board names for ni_at_a2150 driver are: [ 178.722862][ T8128] ni_at_a2150 [ 178.726405][ T8128] comedi: valid board names for adq12b driver are: [ 178.733094][ T8128] adq12b [ 178.736147][ T8128] comedi: valid board names for mpc624 driver are: [ 178.742802][ T8128] mpc624 [ 178.745839][ T8128] comedi: valid board names for c6xdigio driver are: [ 178.752673][ T8128] c6xdigio [ 178.755866][ T8128] comedi: valid board names for aio_iiro_16 driver are: [ 178.762922][ T8128] aio_iiro_16 [ 178.766390][ T8128] comedi: valid board names for aio_aio12_8 driver are: [ 178.773448][ T8128] aio_aio12_8 [ 178.776881][ T8128] aio_ai12_8 [ 178.780266][ T8128] aio_ao12_4 [ 178.783679][ T8128] comedi: valid board names for fl512 driver are: [ 178.790274][ T8128] fl512 [ 178.793264][ T8128] comedi: valid board names for dmm32at driver are: [ 178.799945][ T8128] dmm32at [ 178.803042][ T8128] comedi: valid board names for dt282x driver are: [ 178.809692][ T8128] dt2821 [ 178.812771][ T8128] dt2821-f [ 178.816011][ T8128] dt2821-g [ 178.819197][ T8128] dt2823 [ 178.824422][ T8128] dt2824-pgh [ 178.827782][ T8128] dt2824-pgl [ 178.831156][ T8128] dt2825 [ 178.862261][ T8128] dt2827 [ 178.865295][ T8128] dt2828 [ 178.868295][ T8128] dt2829 [ 178.871437][ T8128] dt21-ez [ 178.874518][ T8128] dt23-ez [ 178.877575][ T8128] dt24-ez [ 178.880613][ T8128] dt24-ez-pgl [ 178.884058][ T8128] comedi: valid board names for dt2817 driver are: [ 178.890589][ T8128] dt2817 [ 178.893582][ T8128] comedi: valid board names for dt2815 driver are: [ 178.900095][ T8128] dt2815 [ 178.903122][ T8128] comedi: valid board names for dt2814 driver are: [ 178.909678][ T8128] dt2814 [ 178.912800][ T8128] comedi: valid board names for dt2811 driver are: [ 178.919452][ T8128] dt2811-pgh [ 178.922840][ T8128] dt2811-pgl [ 178.926153][ T8128] comedi: valid board names for dt2801 driver are: [ 178.932836][ T8128] dt2801 [ 178.935830][ T8128] comedi: valid board names for das6402 driver are: [ 178.942515][ T8128] das6402-12 [ 178.945844][ T8128] das6402-16 [ 178.949145][ T8128] comedi: valid board names for das1800 driver are: [ 178.955915][ T8128] das-1701st [ 178.959339][ T8128] das-1701st-da [ 178.963028][ T8128] das-1702st [ 178.966334][ T8128] das-1702st-da [ 178.969891][ T8128] das-1702hr [ 178.973284][ T8128] das-1702hr-da [ 178.976860][ T8128] das-1701ao [ 178.980135][ T8128] das-1702ao [ 178.983492][ T8128] das-1801st [ 178.986794][ T8128] das-1801st-da [ 178.990342][ T8128] das-1802st [ 178.993664][ T8128] das-1802st-da [ 178.997208][ T8128] das-1802hr [ 179.000516][ T8128] das-1802hr-da [ 179.004120][ T8128] das-1801hc [ 179.007407][ T8128] das-1802hc [ 179.010691][ T8128] das-1801ao [ 179.014029][ T8128] das-1802ao [ 179.017333][ T8128] comedi: valid board names for das800 driver are: [ 179.023923][ T8128] das-800 [ 179.026963][ T8128] cio-das800 [ 179.030246][ T8128] das-801 [ 179.033306][ T8128] cio-das801 [ 179.036597][ T8128] das-802 [ 179.039630][ T8128] cio-das802 [ 179.042969][ T8128] cio-das802/16 [ 179.046623][ T8128] comedi: valid board names for isa-das08 driver are: [ 179.053526][ T8128] isa-das08 [ 179.056738][ T8128] das08-pgm [ 179.059932][ T8128] das08-pgh [ 179.063171][ T8128] das08-pgl [ 179.066381][ T8128] das08-aoh [ 179.069576][ T8128] das08-aol [ 179.072817][ T8128] das08-aom [ 179.076037][ T8128] das08/jr-ao [ 179.079406][ T8128] das08jr-16-ao [ 179.083023][ T8128] pc104-das08 [ 179.086409][ T8128] das08jr/16 [ 179.089713][ T8128] comedi: valid board names for das16m1 driver are: [ 179.096355][ T8128] das16m1 [ 179.099391][ T8128] comedi: valid board names for dac02 driver are: [ 179.105866][ T8128] dac02 [ 179.108733][ T8128] comedi: valid board names for rti802 driver are: [ 179.115277][ T8128] rti802 [ 179.118221][ T8128] comedi: valid board names for rti800 driver are: [ 179.124815][ T8128] rti800 [ 179.127767][ T8128] rti815 [ 179.130789][ T8128] comedi: valid board names for pcm3724 driver are: [ 179.137432][ T8128] pcm3724 [ 179.140579][ T8128] comedi: valid board names for pcl818 driver are: [ 179.147285][ T8128] pcl818l [ 179.150319][ T8128] pcl818h [ 179.153407][ T8128] pcl818hd [ 179.156529][ T8128] pcl818hg [ 179.159640][ T8128] pcl818 [ 179.162642][ T8128] pcl718 [ 179.165581][ T8128] pcm3718 [ 179.168618][ T8128] comedi: valid board names for pcl816 driver are: [ 179.175163][ T8128] pcl816 [ 179.178111][ T8128] pcl814b [ 179.181139][ T8128] comedi: valid board names for pcl812 driver are: [ 179.187687][ T8128] pcl812 [ 179.190626][ T8128] pcl812pg [ 179.193803][ T8128] acl8112pg [ 179.197000][ T8128] acl8112dg [ 179.200194][ T8128] acl8112hg [ 179.203427][ T8128] a821pgl [ 179.206452][ T8128] a821pglnda [ 179.209734][ T8128] a821pgh [ 179.212780][ T8128] a822pgl [ 179.215803][ T8128] a822pgh [ 179.218814][ T8128] a823pgl [ 179.221928][ T8128] a823pgh [ 179.224951][ T8128] pcl813 [ 179.227878][ T8128] pcl813b [ 179.230901][ T8128] acl8113 [ 179.233995][ T8128] iso813 [ 179.236943][ T8128] acl8216 [ 179.239967][ T8128] a826pg [ 179.242980][ T8128] comedi: valid board names for pcl730 driver are: [ 179.249496][ T8128] pcl730 [ 179.252449][ T8128] iso730 [ 179.255390][ T8128] acl7130 [ 179.258417][ T8128] pcm3730 [ 179.261492][ T8128] pcl725 [ 179.264445][ T8128] p8r8dio [ 179.267457][ T8128] acl7225b [ 179.270566][ T8128] p16r16dio [ 179.273801][ T8128] pcl733 [ 179.276740][ T8128] pcl734 [ 179.279682][ T8128] opmm-1616-xt [ 179.283196][ T8128] pearl-mm-p [ 179.286480][ T8128] ir104-pbf [ 179.289682][ T8128] comedi: valid board names for pcl726 driver are: [ 179.296236][ T8128] pcl726 [ 179.299173][ T8128] pcl727 [ 179.302184][ T8128] pcl728 [ 179.305132][ T8128] acl6126 [ 179.308159][ T8128] acl6128 [ 179.311184][ T8128] comedi: valid board names for pcl724 driver are: [ 179.317725][ T8128] pcl724 [ 179.320747][ T8128] pcl722 [ 179.323840][ T8128] pcl731 [ 179.326806][ T8128] acl7122 [ 179.329832][ T8128] acl7124 [ 179.332936][ T8128] pet48dio [ 179.336059][ T8128] pcmio48 [ 179.339081][ T8128] onyx-mm-dio [ 179.342615][ T8128] comedi: valid board names for pcl711 driver are: [ 179.349157][ T8128] pcl711 [ 179.352256][ T8128] pcl711b [ 179.355300][ T8128] acl8112hg [ 179.358486][ T8128] acl8112dg [ 179.361746][ T8128] comedi: valid board names for amplc_pc263 driver are: [ 179.368695][ T8128] pc263 [ 179.371584][ T8128] comedi: valid board names for amplc_pc236 driver are: [ 179.378546][ T8128] pc36at [ 179.381556][ T8128] comedi: valid board names for amplc_dio200 driver are: [ 179.388623][ T8128] pc212e [ 179.391835][ T8128] pc214e [ 179.394788][ T8128] pc215e [ 179.397711][ T8128] pc218e [ 179.400650][ T8128] pc272e [ 179.403681][ T8128] comedi: valid board names for comedi_parport driver are: [ 179.410900][ T8128] comedi_parport [ 179.414737][ T8128] comedi: valid board names for comedi_test driver are: [ 179.421842][ T8128] comedi_test [ 179.425255][ T8128] comedi: valid board names for comedi_bond driver are: [ 179.432251][ T8128] comedi_bond [ 180.591542][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 180.591618][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 180.597751][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 180.603575][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 180.747747][ T8152] FAULT_INJECTION: forcing a failure. [ 180.747747][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 180.770302][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.4.622 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 180.770330][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.770342][ T8152] Call Trace: [ 180.770347][ T8152] [ 180.770354][ T8152] dump_stack_lvl+0x16c/0x1f0 [ 180.770377][ T8152] should_fail_ex+0x512/0x640 [ 180.770399][ T8152] should_failslab+0xc2/0x120 [ 180.770420][ T8152] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 180.770441][ T8152] ? lock_acquire+0x2cd/0x350 [ 180.770466][ T8152] ? sidtab_sid2str_get+0x17a/0x680 [ 180.770494][ T8152] kmemdup_noprof+0x29/0x60 [ 180.770513][ T8152] sidtab_sid2str_get+0x17a/0x680 [ 180.770540][ T8152] sidtab_entry_to_string+0x33/0x110 [ 180.770565][ T8152] security_sid_to_context_core+0x35c/0x640 [ 180.770591][ T8152] avc_audit_post_callback+0x109/0x8f0 [ 180.770610][ T8152] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 180.770630][ T8152] ? skb_put+0x138/0x1b0 [ 180.770652][ T8152] ? audit_log_n_string+0x253/0x540 [ 180.770672][ T8152] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 180.770689][ T8152] common_lsm_audit+0x24e/0x300 [ 180.770713][ T8152] ? __pfx_common_lsm_audit+0x10/0x10 [ 180.770736][ T8152] ? avc_update_node.isra.0+0x4c0/0xb60 [ 180.770756][ T8152] slow_avc_audit+0x186/0x210 [ 180.770773][ T8152] ? __pfx_slow_avc_audit+0x10/0x10 [ 180.770790][ T8152] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 180.770818][ T8152] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 180.770840][ T8152] avc_has_extended_perms+0xa40/0x1090 [ 180.770861][ T8152] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 180.770880][ T8152] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 180.770903][ T8152] ? tomoyo_path_number_perm+0x295/0x580 [ 180.770926][ T8152] ? tomoyo_path_number_perm+0x18d/0x580 [ 180.770952][ T8152] ? preempt_count_add+0x76/0x150 [ 180.770972][ T8152] ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 180.770999][ T8152] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 180.771027][ T8152] ? rcu_is_watching+0x12/0xc0 [ 180.771049][ T8152] ? __fget_files+0x204/0x3c0 [ 180.771068][ T8152] ? hook_file_ioctl_common+0x145/0x410 [ 180.771089][ T8152] ? selinux_file_ioctl+0x180/0x270 [ 180.771112][ T8152] selinux_file_ioctl+0x180/0x270 [ 180.771137][ T8152] security_file_ioctl+0xc6/0x240 [ 180.771162][ T8152] __x64_sys_ioctl+0xb7/0x210 [ 180.771190][ T8152] do_syscall_64+0xcd/0x4c0 [ 180.771209][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.771236][ T8152] RIP: 0033:0x7f0a09b8ebe9 [ 180.771251][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.771268][ T8152] RSP: 002b:00007f0a0aa47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.771286][ T8152] RAX: ffffffffffffffda RBX: 00007f0a09db5fa0 RCX: 00007f0a09b8ebe9 [ 180.771297][ T8152] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 180.771306][ T8152] RBP: 00007f0a0aa47090 R08: 0000000000000000 R09: 0000000000000000 [ 180.771315][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.771325][ T8152] R13: 00007f0a09db6038 R14: 00007f0a09db5fa0 R15: 00007ffeeaa72988 [ 180.771339][ T8152] [ 181.260110][ T30] audit: type=1400 audit(1755588145.170:746): avc: denied { ioctl } for pid=8151 comm="syz.4.622" path="socket:[17368]" dev="sockfs" ino=17368 ioctlcmd=0x8914 ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.493006][ T30] audit: type=1400 audit(1755588145.910:747): avc: denied { map } for pid=8156 comm="syz.2.624" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.557944][ T8161] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 181.691374][ T30] audit: type=1400 audit(1755588145.910:748): avc: denied { execute } for pid=8156 comm="syz.2.624" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.727675][ T8161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.916607][ T8173] batadv_slave_0: entered promiscuous mode [ 181.916628][ T30] audit: type=1400 audit(1755588146.340:749): avc: denied { setopt } for pid=8171 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.924845][ T8171] batadv_slave_0: left promiscuous mode [ 181.942026][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.157847][ T8182] /dev/nullb0: Can't open blockdev [ 182.671156][ T30] audit: type=1400 audit(1755588147.090:750): avc: denied { getopt } for pid=8191 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.744806][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 182.926524][ T8203] netlink: 'syz.0.638': attribute type 2 has an invalid length. [ 182.952903][ T8203] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 182.969330][ T30] audit: type=1400 audit(1755588147.380:751): avc: denied { create } for pid=8202 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 183.072516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.100700][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.158101][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 183.218671][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.231193][ T10] usb 3-1: config 0 descriptor?? [ 183.240620][ T10] hub 3-1:0.0: USB hub found [ 183.422055][ T30] audit: type=1326 audit(1755588147.840:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c78ebe9 code=0x7ffc0000 [ 183.445284][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.455069][ T10] hub 3-1:0.0: 2 ports detected [ 183.691715][ T30] audit: type=1326 audit(1755588147.850:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8c78ebe9 code=0x7ffc0000 [ 183.718283][ T30] audit: type=1326 audit(1755588147.950:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8206 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fca8c78ebe9 code=0x7ffc0000 [ 183.741421][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.753960][ T30] audit: type=1400 audit(1755588148.150:755): avc: denied { mount } for pid=8215 comm="syz.3.643" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 183.776051][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.853887][ T8209] pim6reg: entered allmulticast mode [ 184.006547][ T8206] pim6reg: left allmulticast mode [ 184.528009][ T8235] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.649'. [ 184.752102][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 184.994614][ T8250] lo speed is unknown, defaulting to 1000 [ 185.001275][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 185.052344][ T44] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 185.066959][ T44] usb 4-1: can't read configurations, error -22 [ 185.145983][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 185.281348][ T44] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.442168][ T10] usb 3-1: USB disconnect, device number 17 [ 185.496261][ T8257] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 185.504258][ T8257] netlink: 244 bytes leftover after parsing attributes in process `syz.2.655'. [ 185.524602][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 185.903639][ T44] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 185.921395][ T44] usb 4-1: can't read configurations, error -22 [ 185.941375][ T44] usb usb4-port1: attempt power cycle [ 186.291380][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 186.341886][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 186.362051][ T44] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 186.381874][ T44] usb 4-1: can't read configurations, error -22 [ 186.523156][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 186.562302][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 186.568988][ T44] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 186.601543][ T44] usb 4-1: can't read configurations, error -22 [ 186.669669][ T44] usb usb4-port1: unable to enumerate USB device [ 187.040594][ T8281] gretap0: entered promiscuous mode [ 187.046065][ T8281] vlan2: entered promiscuous mode [ 187.565221][ T8286] overlayfs: missing 'lowerdir' [ 187.603680][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 187.603697][ T30] audit: type=1400 audit(1755588151.990:767): avc: denied { read write } for pid=8232 comm="syz.3.648" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 187.636653][ T30] audit: type=1400 audit(1755588152.030:768): avc: denied { open } for pid=8232 comm="syz.3.648" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 187.661607][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.901418][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 187.995952][ T30] audit: type=1400 audit(1755588152.420:769): avc: denied { ioctl } for pid=8290 comm="syz.1.666" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 188.122670][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 188.133741][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 188.150339][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 188.163189][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 188.177148][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.189773][ T10] usb 3-1: Product: syz [ 188.196691][ T10] usb 3-1: Manufacturer: syz [ 188.201555][ T10] usb 3-1: SerialNumber: syz [ 188.216776][ T10] usb 3-1: config 0 descriptor?? [ 188.224873][ T8288] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 188.233022][ T8288] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 188.244792][ T10] usb 3-1: ucan: probing device on interface #0 [ 189.030806][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 189.040838][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 189.374575][ T10] usb 3-1: ucan: could not read protocol version, ret=-110 [ 189.381943][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 189.687056][ T30] audit: type=1400 audit(1755588154.110:770): avc: denied { execute_no_trans } for pid=8318 comm="syz.4.674" path="/123/file1" dev="tmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.710376][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.781364][ T10] usb 3-1: USB disconnect, device number 18 [ 190.908411][ T44] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 191.329735][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.340557][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.350188][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 191.373146][ T44] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 191.386923][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 191.415970][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.425878][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.448308][ T44] usb 2-1: Product: syz [ 191.458122][ T44] usb 2-1: Manufacturer: syz [ 191.467673][ T44] usb 2-1: SerialNumber: syz [ 191.721511][ T5903] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 192.059688][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 192.111855][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.118640][ T5903] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 192.129791][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.153850][ T5903] usb 4-1: config 0 descriptor?? [ 192.676692][ T5903] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 192.686804][ T5903] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 192.699260][ T5903] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 192.706940][ T5903] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 192.729151][ T5903] zydacron 0003:13EC:0006.000A: unknown main item tag 0x0 [ 192.756876][ T5903] zydacron 0003:13EC:0006.000A: hidraw0: USB HID v0.05 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 192.823698][ T5954] usb 4-1: USB disconnect, device number 27 [ 193.030277][ T8368] fido_id[8368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.318471][ T44] usb 2-1: 0:2 : does not exist [ 193.375158][ T44] usb 2-1: USB disconnect, device number 33 [ 193.497367][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.851372][ T44] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 193.878039][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.884517][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.000940][ T8381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.691'. [ 194.066591][ T5896] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 194.145041][ T5896] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 194.181619][ T5896] usb 5-1: USB disconnect, device number 11 [ 194.201336][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 194.232696][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.252666][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.296177][ T44] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 194.334485][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.381827][ T44] usb 2-1: config 0 descriptor?? [ 194.468443][ T8390] FAULT_INJECTION: forcing a failure. [ 194.468443][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 194.487475][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.2.694 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 194.487504][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.487515][ T8390] Call Trace: [ 194.487520][ T8390] [ 194.487527][ T8390] dump_stack_lvl+0x16c/0x1f0 [ 194.487550][ T8390] should_fail_ex+0x512/0x640 [ 194.487572][ T8390] should_failslab+0xc2/0x120 [ 194.487591][ T8390] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 194.487609][ T8390] ? lock_release+0x201/0x2f0 [ 194.487635][ T8390] ? fuse_alloc_inode+0x2c/0x350 [ 194.487662][ T8390] ? __pfx_fuse_inode_set+0x10/0x10 [ 194.487685][ T8390] fuse_alloc_inode+0x2c/0x350 [ 194.487709][ T8390] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 194.487734][ T8390] alloc_inode+0x64/0x240 [ 194.487760][ T8390] iget5_locked+0x338/0x3d0 [ 194.487784][ T8390] ? __pfx_fuse_inode_eq+0x10/0x10 [ 194.487807][ T8390] ? __pfx_fuse_inode_set+0x10/0x10 [ 194.487830][ T8390] ? __pfx_iget5_locked+0x10/0x10 [ 194.487855][ T8390] ? rcu_is_watching+0x12/0xc0 [ 194.487876][ T8390] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 194.487900][ T8390] fuse_iget+0x165/0x8e0 [ 194.487917][ T8390] ? __pfx_fuse_iget+0x10/0x10 [ 194.487932][ T8390] ? __fuse_simple_request+0x465/0xcb0 [ 194.487956][ T8390] fuse_lookup_name+0x481/0x780 [ 194.487983][ T8390] ? __pfx_fuse_lookup_name+0x10/0x10 [ 194.488009][ T8390] ? rcu_read_unlock+0x17/0x60 [ 194.488027][ T8390] ? rcu_is_watching+0x12/0xc0 [ 194.488047][ T8390] ? lock_release+0x201/0x2f0 [ 194.488077][ T8390] ? rcu_is_watching+0x12/0xc0 [ 194.488100][ T8390] fuse_lookup+0x26a/0x560 [ 194.488125][ T8390] ? lock_release+0x201/0x2f0 [ 194.488149][ T8390] ? __pfx_fuse_lookup+0x10/0x10 [ 194.488173][ T8390] ? d_alloc_parallel+0x828/0x1480 [ 194.488204][ T8390] ? __pfx_d_alloc_parallel+0x10/0x10 [ 194.488232][ T8390] fuse_atomic_open+0x2cd/0x470 [ 194.488247][ T8390] ? __pfx_fuse_atomic_open+0x10/0x10 [ 194.488262][ T8390] lookup_open.isra.0+0x83a/0x1580 [ 194.488291][ T8390] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 194.488324][ T8390] ? lookup_fast+0x156/0x610 [ 194.488341][ T8390] path_openat+0x893/0x2cb0 [ 194.488362][ T8390] ? __pfx_path_openat+0x10/0x10 [ 194.488383][ T8390] do_filp_open+0x20b/0x470 [ 194.488408][ T8390] ? __pfx_do_filp_open+0x10/0x10 [ 194.488434][ T8390] ? alloc_fd+0x471/0x7d0 [ 194.488454][ T8390] do_sys_openat2+0x11b/0x1d0 [ 194.488480][ T8390] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.488503][ T8390] ? __fget_files+0x20e/0x3c0 [ 194.488523][ T8390] __x64_sys_openat+0x174/0x210 [ 194.488546][ T8390] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.488568][ T8390] ? ksys_write+0x1ac/0x250 [ 194.488588][ T8390] do_syscall_64+0xcd/0x4c0 [ 194.488608][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.488624][ T8390] RIP: 0033:0x7f9828f8ebe9 [ 194.488638][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.488654][ T8390] RSP: 002b:00007f9829d1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.488671][ T8390] RAX: ffffffffffffffda RBX: 00007f98291b6090 RCX: 00007f9828f8ebe9 [ 194.488682][ T8390] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 194.488693][ T8390] RBP: 00007f9829d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.488702][ T8390] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 194.488713][ T8390] R13: 00007f98291b6128 R14: 00007f98291b6090 R15: 00007ffef0027f58 [ 194.488729][ T8390] [ 194.835058][ T8391] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 194.948813][ T8391] bridge1: entered allmulticast mode [ 194.996947][ T44] usb 2-1: USB disconnect, device number 34 [ 195.201425][ T5896] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.300091][ T8400] sp0: Synchronizing with TNC [ 195.305594][ T8400] sp0: Found TNC [ 195.318390][ T30] audit: type=1400 audit(1755588159.730:771): avc: denied { bind } for pid=8395 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.370319][ T30] audit: type=1400 audit(1755588159.760:772): avc: denied { read } for pid=5512 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 195.403589][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.431195][ T30] audit: type=1400 audit(1755588159.770:773): avc: denied { search } for pid=5512 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.460296][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.712593][ T840] IPVS: starting estimator thread 0... [ 195.718163][ T5896] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.741347][ T30] audit: type=1400 audit(1755588159.770:774): avc: denied { search } for pid=5512 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.769455][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.821494][ T5896] usb 5-1: config 0 descriptor?? [ 195.837503][ T5896] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 195.841379][ T8405] IPVS: using max 130 ests per chain, 312000 per kthread [ 195.851321][ T30] audit: type=1400 audit(1755588159.770:775): avc: denied { search } for pid=5512 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.992981][ T30] audit: type=1400 audit(1755588159.770:776): avc: denied { read } for pid=5512 comm="dhcpcd" name="n102" dev="tmpfs" ino=4544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.014903][ T30] audit: type=1400 audit(1755588159.770:777): avc: denied { open } for pid=5512 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.044879][ T30] audit: type=1400 audit(1755588159.770:778): avc: denied { getattr } for pid=5512 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.068083][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.078257][ T30] audit: type=1400 audit(1755588160.330:779): avc: denied { create } for pid=8406 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.113119][ T30] audit: type=1400 audit(1755588160.330:780): avc: denied { shutdown } for pid=8406 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 196.620907][ T5896] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 196.771791][ T5896] usb 4-1: too many configurations: 157, using maximum allowed: 8 [ 196.790375][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 196.844172][ T5896] usb 4-1: can't read configurations, error -61 [ 197.021364][ T5896] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 197.093819][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 197.171835][ T5896] usb 4-1: too many configurations: 157, using maximum allowed: 8 [ 197.180871][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 197.188773][ T5896] usb 4-1: can't read configurations, error -61 [ 197.202591][ T5896] usb usb4-port1: attempt power cycle [ 197.634135][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.708'. [ 197.791507][ T5896] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 197.832206][ T5896] usb 4-1: too many configurations: 157, using maximum allowed: 8 [ 197.841222][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 197.849453][ T5896] usb 4-1: can't read configurations, error -61 [ 197.881150][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.705'. [ 197.881217][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 197.973904][ T8451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.021370][ T5896] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 198.044149][ T5896] usb 4-1: too many configurations: 157, using maximum allowed: 8 [ 198.056532][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 198.067747][ T5896] usb 4-1: can't read configurations, error -61 [ 198.074889][ T5896] usb usb4-port1: unable to enumerate USB device [ 199.263726][ T5896] usb 5-1: USB disconnect, device number 12 [ 199.706078][ T8495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4581 sclass=netlink_route_socket pid=8495 comm=syz.2.722 [ 199.748711][ T8499] FAULT_INJECTION: forcing a failure. [ 199.748711][ T8499] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.762929][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.4.723 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 199.762955][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.762966][ T8499] Call Trace: [ 199.762971][ T8499] [ 199.762977][ T8499] dump_stack_lvl+0x16c/0x1f0 [ 199.763000][ T8499] should_fail_ex+0x512/0x640 [ 199.763021][ T8499] _copy_from_iter+0x29f/0x16f0 [ 199.763044][ T8499] ? __alloc_skb+0x200/0x380 [ 199.763067][ T8499] ? __pfx__copy_from_iter+0x10/0x10 [ 199.763089][ T8499] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 199.763111][ T8499] netlink_sendmsg+0x829/0xdd0 [ 199.763130][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.763152][ T8499] ____sys_sendmsg+0xa95/0xc70 [ 199.763176][ T8499] ? copy_msghdr_from_user+0x10a/0x160 [ 199.763193][ T8499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.763213][ T8499] ? __pfx_kstrtouint+0x10/0x10 [ 199.763232][ T8499] ? kstrtouint_from_user+0x13c/0x1d0 [ 199.763249][ T8499] ___sys_sendmsg+0x134/0x1d0 [ 199.763265][ T8499] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.763286][ T8499] ? rcu_is_watching+0x12/0xc0 [ 199.763314][ T8499] __sys_sendmsg+0x16d/0x220 [ 199.763330][ T8499] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.763353][ T8499] do_syscall_64+0xcd/0x4c0 [ 199.763372][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.763389][ T8499] RIP: 0033:0x7f0a09b8ebe9 [ 199.763402][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.763418][ T8499] RSP: 002b:00007f0a0aa47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.763435][ T8499] RAX: ffffffffffffffda RBX: 00007f0a09db5fa0 RCX: 00007f0a09b8ebe9 [ 199.763446][ T8499] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 199.763456][ T8499] RBP: 00007f0a0aa47090 R08: 0000000000000000 R09: 0000000000000000 [ 199.763466][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.763475][ T8499] R13: 00007f0a09db6038 R14: 00007f0a09db5fa0 R15: 00007ffeeaa72988 [ 199.763492][ T8499] [ 200.190103][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 200.213291][ T8507] netlink: 9 bytes leftover after parsing attributes in process `syz.0.721'. [ 200.262510][ T8508] 9pnet_fd: Insufficient options for proto=fd [ 200.511505][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.604882][ T8523] audit_log_lost: 7 callbacks suppressed [ 200.604906][ T8523] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 200.618445][ T8523] audit: out of memory in audit_log_start [ 200.810843][ T30] audit: type=1400 audit(1755588165.020:788): avc: denied { connect } for pid=8520 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.844340][ T30] audit: type=1400 audit(1755588165.050:789): avc: denied { open } for pid=8520 comm="syz.3.727" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.891371][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 200.897806][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.905502][ T24] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 200.914931][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.946532][ T24] usb 3-1: config 0 descriptor?? [ 201.146869][ T8525] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 201.155629][ T8525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.728'. [ 201.369587][ T24] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 201.388052][ T24] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 201.405571][ T24] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 201.414852][ T24] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 201.422474][ T24] zydacron 0003:13EC:0006.000B: unknown main item tag 0x0 [ 201.461653][ T24] zydacron 0003:13EC:0006.000B: hidraw0: USB HID v0.05 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 201.633680][ T5917] usb 3-1: USB disconnect, device number 19 [ 202.005217][ T5855] Bluetooth: hci4: link tx timeout [ 202.010389][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.020357][ T5848] Bluetooth: hci4: link tx timeout [ 202.025631][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.034469][ T5848] Bluetooth: hci4: link tx timeout [ 202.039618][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.049427][ T5848] Bluetooth: hci4: link tx timeout [ 202.055526][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.063274][ T5848] Bluetooth: hci4: link tx timeout [ 202.068421][ T5848] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.236187][ T30] audit: type=1400 audit(1755588167.660:790): avc: denied { write } for pid=8556 comm="syz.1.738" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.236352][ T8558] random: crng reseeded on system resumption [ 203.259047][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.260035][ T30] audit: type=1400 audit(1755588167.660:791): avc: denied { open } for pid=8556 comm="syz.1.738" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 203.324577][ T30] audit: type=1400 audit(1755588167.740:792): avc: denied { firmware_load } for pid=6141 comm="kworker/u8:8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 203.897185][ T840] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.905325][ T30] audit: type=1400 audit(1755588168.050:793): avc: denied { write } for pid=8565 comm="syz.1.741" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 203.932263][ T30] audit: type=1400 audit(1755588168.130:794): avc: denied { ioctl } for pid=8565 comm="syz.1.741" path="socket:[20052]" dev="sockfs" ino=20052 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 204.022462][ T5917] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 204.035350][ T8567] PKCS7: Unknown OID: [5] (bad) [ 204.040550][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 204.108327][ T840] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 204.163568][ T8567] PKCS7: Only support pkcs7_signedData type [ 204.191727][ T840] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.194751][ T8567] netlink: 'syz.2.736': attribute type 2 has an invalid length. [ 204.212088][ T8567] netlink: 68 bytes leftover after parsing attributes in process `syz.2.736'. [ 204.280414][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.293168][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.304483][ T840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.317400][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 204.334286][ T840] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.344298][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.352565][ T5917] usb 4-1: config 0 has no interface number 0 [ 204.359564][ T5917] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 204.389480][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.398528][ T5917] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 204.419282][ T840] usb 5-1: config 0 descriptor?? [ 204.429013][ T5917] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 204.438729][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.446908][ T8561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.460771][ T5917] usb 4-1: config 0 descriptor?? [ 204.642384][ T44] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 204.831434][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 204.837919][ T44] usb 3-1: config 0 has no interfaces? [ 204.845112][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 204.854237][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.862359][ T44] usb 3-1: Product: syz [ 204.864694][ T840] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 204.866506][ T44] usb 3-1: Manufacturer: syz [ 204.866521][ T44] usb 3-1: SerialNumber: syz [ 204.867491][ T44] usb 3-1: config 0 descriptor?? [ 204.903963][ T840] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.033813][ T8600] No control pipe specified [ 205.062650][ T30] audit: type=1400 audit(1755588169.490:795): avc: denied { mount } for pid=8599 comm="syz.1.749" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 205.122462][ T5917] uclogic 0003:28BD:0071.000D: pen parameters not found [ 205.129478][ T5917] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 205.150416][ T44] usb 5-1: USB disconnect, device number 13 [ 205.326138][ T840] usb 4-1: USB disconnect, device number 32 [ 205.617979][ T8606] 9pnet_fd: Insufficient options for proto=fd [ 205.682802][ T30] audit: type=1400 audit(1755588170.110:796): avc: denied { read } for pid=8607 comm="syz.4.751" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.705710][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.715988][ T30] audit: type=1400 audit(1755588170.110:797): avc: denied { open } for pid=8607 comm="syz.4.751" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.739456][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.759686][ T30] audit: type=1400 audit(1755588170.110:798): avc: denied { watch } for pid=8607 comm="syz.4.751" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 205.784892][ T840] usb 3-1: USB disconnect, device number 20 [ 205.795974][ T30] audit: type=1400 audit(1755588170.110:799): avc: denied { watch_sb } for pid=8607 comm="syz.4.751" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.834126][ T30] audit: type=1400 audit(1755588170.260:800): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 206.221368][ T5917] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 206.551522][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 206.558148][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.569158][ T5917] usb 2-1: config 0 has no interfaces? [ 206.577392][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.587236][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.603316][ T5917] usb 2-1: config 0 descriptor?? [ 206.614130][ T8632] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 206.627610][ T8632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.759'. [ 206.713209][ T8612] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 206.909262][ T30] audit: type=1400 audit(1755588171.330:801): avc: denied { ioctl } for pid=8613 comm="syz.1.753" path="socket:[20150]" dev="sockfs" ino=20150 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.107317][ T5896] usb 2-1: USB disconnect, device number 35 [ 207.121438][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 207.271613][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 207.277945][ T44] usb 5-1: config 0 has no interfaces? [ 207.285088][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 207.295004][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.303344][ T44] usb 5-1: Product: syz [ 207.307568][ T44] usb 5-1: Manufacturer: syz [ 207.313165][ T44] usb 5-1: SerialNumber: syz [ 207.318949][ T44] usb 5-1: config 0 descriptor?? [ 207.321967][ T840] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 207.482580][ T840] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.494250][ T840] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.505273][ T840] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.517467][ T840] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.526604][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.537627][ T8643] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 208.300976][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.310677][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.525047][ T30] audit: type=1400 audit(1755588172.950:802): avc: denied { connect } for pid=8655 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.801411][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 208.951436][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 208.952582][ T840] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 208.963528][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 208.963553][ T24] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 208.963569][ T24] usb 2-1: Product: syz [ 208.963582][ T24] usb 2-1: Manufacturer: syz [ 208.963609][ T24] usb 2-1: SerialNumber: syz [ 208.973447][ T840] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 208.982870][ T24] usb 2-1: config 0 descriptor?? [ 209.011129][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 209.029884][ T840] usb 4-1: USB disconnect, device number 33 [ 209.035867][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 209.147486][ T8650] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.180512][ T30] audit: type=1400 audit(1755588173.600:803): avc: denied { bind } for pid=8667 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.283695][ T24] gspca_zc3xx: reg_r err -32 [ 209.288351][ T24] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 209.317349][ T24] usb 5-1: USB disconnect, device number 14 [ 209.811862][ T5917] IPVS: starting estimator thread 0... [ 209.942481][ T8681] IPVS: using max 83 ests per chain, 199200 per kthread [ 210.334479][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 210.343469][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 210.623811][ T78] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.645027][ T78] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.660839][ T78] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.682683][ T78] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.855902][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 210.919537][ T30] audit: type=1400 audit(1755588175.260:804): avc: denied { read } for pid=8682 comm="syz.3.776" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.133298][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.152451][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 211.162670][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.176856][ T24] usb 3-1: config 0 descriptor?? [ 211.181531][ T30] audit: type=1400 audit(1755588175.270:805): avc: denied { ioctl } for pid=8682 comm="syz.3.776" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.207460][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.640268][ T24] lg-g15 0003:046D:C222.000E: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 211.709277][ T840] usb 2-1: USB disconnect, device number 36 [ 211.931523][ T5917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.081407][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 212.091062][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.105218][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.122069][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.138264][ T5917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.156010][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.178517][ T5917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.195942][ T5917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.210001][ T5917] usb 5-1: Manufacturer: syz [ 212.221616][ T5917] usb 5-1: config 0 descriptor?? [ 212.557067][ T8724] tipc: Invalid UDP bearer configuration [ 212.557086][ T8724] tipc: Enabling of bearer rejected, failed to enable media [ 212.691136][ T30] audit: type=1400 audit(1755588177.110:806): avc: denied { create } for pid=8725 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.712671][ T30] audit: type=1400 audit(1755588177.140:807): avc: denied { ioctl } for pid=8725 comm="syz.0.789" path="socket:[20275]" dev="sockfs" ino=20275 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.737180][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.073070][ T8734] vlan2: entered promiscuous mode [ 213.253066][ T5917] rc_core: IR keymap rc-hauppauge not found [ 213.262411][ T5917] Registered IR keymap rc-empty [ 213.269391][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.283474][ T44] usb 3-1: USB disconnect, device number 21 [ 213.292340][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.332060][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 213.366055][ T30] audit: type=1400 audit(1755588177.760:808): avc: denied { write } for pid=8736 comm="syz.2.791" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.398166][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 213.414889][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.441460][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.461449][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.468443][ T8744] PKCS7: Unknown OID: [5] (bad) [ 213.476181][ T8744] PKCS7: Only support pkcs7_signedData type [ 213.508683][ T8744] netlink: 'syz.3.792': attribute type 2 has an invalid length. [ 213.516488][ T8744] netlink: 68 bytes leftover after parsing attributes in process `syz.3.792'. [ 213.562599][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.581404][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.601367][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.621417][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.641376][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.651336][ T44] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 213.714116][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.756784][ T5917] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 213.781974][ T5917] mceusb 5-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 213.798846][ T5917] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 213.801473][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 213.832542][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.840715][ T44] usb 3-1: config 0 has no interface number 0 [ 213.847403][ T44] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 213.858613][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.880361][ T44] usb 3-1: config 0 descriptor?? [ 213.890867][ T44] usb 3-1: selecting invalid altsetting 1 [ 213.896953][ T5917] usb 5-1: USB disconnect, device number 15 [ 213.905353][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 213.928494][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.942782][ T24] IPVS: starting estimator thread 0... [ 213.976049][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 214.000981][ T5896] usb 4-1: config 0 has no interfaces? [ 214.008728][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 214.019899][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.029782][ T5896] usb 4-1: Product: syz [ 214.034895][ T5896] usb 4-1: Manufacturer: syz [ 214.039572][ T5896] usb 4-1: SerialNumber: syz [ 214.044537][ T44] DVB: Unable to find symbol cx22700_attach() [ 214.051411][ T8756] IPVS: using max 81 ests per chain, 194400 per kthread [ 214.059019][ T5896] usb 4-1: config 0 descriptor?? [ 214.091172][ T44] DVB: Unable to find symbol tda10046_attach() [ 214.099414][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 214.113506][ T44] usb 3-1: USB disconnect, device number 22 [ 214.563729][ T840] IPVS: starting estimator thread 0... [ 214.721379][ T8771] IPVS: using max 127 ests per chain, 304800 per kthread [ 215.182865][ T8783] lo speed is unknown, defaulting to 1000 [ 215.469835][ T30] audit: type=1400 audit(1755588179.890:809): avc: denied { lock } for pid=8782 comm="syz.0.806" path="socket:[21016]" dev="sockfs" ino=21016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 215.709324][ T44] usb 4-1: USB disconnect, device number 34 [ 215.717414][ T30] audit: type=1400 audit(1755588180.020:810): avc: denied { kexec_image_load } for pid=8782 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 216.821697][ T8817] netlink: 68 bytes leftover after parsing attributes in process `syz.1.812'. [ 217.084192][ T8819] netlink: 'syz.0.815': attribute type 2 has an invalid length. [ 217.091931][ T8819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.815'. [ 217.472463][ T8826] FAULT_INJECTION: forcing a failure. [ 217.472463][ T8826] name failslab, interval 1, probability 0, space 0, times 0 [ 217.791449][ T30] audit: type=1400 audit(1755588181.980:811): avc: denied { name_bind } for pid=8823 comm="syz.2.817" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 217.821376][ T8826] CPU: 1 UID: 0 PID: 8826 Comm: syz.4.816 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 217.821405][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.821415][ T8826] Call Trace: [ 217.821420][ T8826] [ 217.821427][ T8826] dump_stack_lvl+0x16c/0x1f0 [ 217.821447][ T8826] should_fail_ex+0x512/0x640 [ 217.821461][ T8826] ? fanotify_handle_event+0x2487/0x48b0 [ 217.821478][ T8826] should_failslab+0xc2/0x120 [ 217.821490][ T8826] __kmalloc_noprof+0xd2/0x510 [ 217.821500][ T8826] ? __pfx_fanotify_encode_fh_len+0x10/0x10 [ 217.821519][ T8826] fanotify_handle_event+0x2487/0x48b0 [ 217.821538][ T8826] ? __pfx_fanotify_handle_event+0x10/0x10 [ 217.821555][ T8826] ? rcu_is_watching+0x12/0xc0 [ 217.821569][ T8826] ? lock_acquire+0x2cd/0x350 [ 217.821585][ T8826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.821597][ T8826] ? __pfx_fanotify_handle_event+0x10/0x10 [ 217.821613][ T8826] fsnotify+0xc58/0x1dc0 [ 217.821624][ T8826] ? __pfx_fsnotify+0x10/0x10 [ 217.821637][ T8826] __fsnotify_parent+0x915/0xc40 [ 217.821649][ T8826] ? __pfx___fsnotify_parent+0x10/0x10 [ 217.821659][ T8826] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 217.821672][ T8826] ? do_dentry_open+0x759/0x1530 [ 217.821683][ T8826] ? __pfx_chrdev_open+0x10/0x10 [ 217.821696][ T8826] ? vfs_open+0x2e3/0x3f0 [ 217.821708][ T8826] vfs_open+0x2e3/0x3f0 [ 217.821722][ T8826] path_openat+0x1de4/0x2cb0 [ 217.821735][ T8826] ? __pfx_path_openat+0x10/0x10 [ 217.821747][ T8826] do_filp_open+0x20b/0x470 [ 217.821758][ T8826] ? __pfx_do_filp_open+0x10/0x10 [ 217.821773][ T8826] ? alloc_fd+0x471/0x7d0 [ 217.821785][ T8826] do_sys_openat2+0x11b/0x1d0 [ 217.821799][ T8826] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.821813][ T8826] ? __fget_files+0x20e/0x3c0 [ 217.821825][ T8826] __x64_sys_openat+0x174/0x210 [ 217.821839][ T8826] ? __pfx___x64_sys_openat+0x10/0x10 [ 217.821853][ T8826] ? ksys_write+0x1ac/0x250 [ 217.821864][ T8826] do_syscall_64+0xcd/0x4c0 [ 217.821876][ T8826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.821888][ T8826] RIP: 0033:0x7f0a09b8ebe9 [ 217.821896][ T8826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.821906][ T8826] RSP: 002b:00007f0a0aa26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.821916][ T8826] RAX: ffffffffffffffda RBX: 00007f0a09db6090 RCX: 00007f0a09b8ebe9 [ 217.821923][ T8826] RDX: 0000000000020040 RSI: 0000200000000140 RDI: 00000000ffffff9c [ 217.821929][ T8826] RBP: 00007f0a0aa26090 R08: 0000000000000000 R09: 0000000000000000 [ 217.821941][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.821950][ T8826] R13: 00007f0a09db6128 R14: 00007f0a09db6090 R15: 00007ffeeaa72988 [ 217.821966][ T8826] [ 218.105832][ T8826] : renamed from vlan1 (while UP) [ 218.575791][ T8839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.818'. [ 219.132182][ T30] audit: type=1326 audit(1755588183.550:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.269018][ T30] audit: type=1326 audit(1755588183.550:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.320974][ T30] audit: type=1326 audit(1755588183.550:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.513920][ T30] audit: type=1326 audit(1755588183.550:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.595356][ T30] audit: type=1326 audit(1755588183.550:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.623571][ T30] audit: type=1326 audit(1755588183.550:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 219.861443][ T30] audit: type=1326 audit(1755588183.550:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 220.011367][ T30] audit: type=1326 audit(1755588183.550:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 220.034567][ T30] audit: type=1326 audit(1755588183.550:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8852 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc206b8ebe9 code=0x7ffc0000 [ 220.057736][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.562592][ T8879] : renamed from bridge_slave_0 (while UP) [ 221.241340][ T840] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.391704][ T840] usb 5-1: device descriptor read/64, error -71 [ 221.581471][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 222.131350][ T44] usb 2-1: device descriptor read/64, error -71 [ 222.381470][ T44] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 222.381482][ T840] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 222.512818][ T840] usb 5-1: device descriptor read/64, error -71 [ 222.541640][ T44] usb 2-1: device descriptor read/64, error -71 [ 222.635295][ T840] usb usb5-port1: attempt power cycle [ 222.671471][ T44] usb usb2-port1: attempt power cycle [ 223.001397][ T840] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.011443][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 223.031828][ T840] usb 5-1: device descriptor read/8, error -71 [ 223.162144][ T44] usb 2-1: device descriptor read/8, error -71 [ 223.271366][ T840] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.301673][ T840] usb 5-1: device descriptor read/8, error -71 [ 223.421443][ T840] usb usb5-port1: unable to enumerate USB device [ 223.431514][ T44] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 223.475223][ T44] usb 2-1: device descriptor read/8, error -71 [ 223.592196][ T44] usb usb2-port1: unable to enumerate USB device [ 223.762141][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.011380][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 224.032392][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.046883][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.066736][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.087839][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.108219][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.132615][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 224.133090][ T5896] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.133805][ T30] audit: type=1400 audit(1755588188.560:853): avc: denied { create } for pid=8917 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.139180][ T5896] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.139200][ T5896] usb 3-1: Manufacturer: syz [ 224.182338][ T5896] usb 3-1: config 0 descriptor?? [ 224.197373][ T30] audit: type=1400 audit(1755588188.600:854): avc: denied { bind } for pid=8917 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.247774][ T30] audit: type=1400 audit(1755588188.670:855): avc: denied { write } for pid=8917 comm="syz.3.841" path="socket:[21748]" dev="sockfs" ino=21748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.293743][ T30] audit: type=1400 audit(1755588188.720:856): avc: denied { read } for pid=8917 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.508445][ T30] audit: type=1400 audit(1755588188.920:857): avc: denied { getopt } for pid=8917 comm="syz.3.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.890272][ T5896] rc_core: IR keymap rc-hauppauge not found [ 224.940004][ T5896] Registered IR keymap rc-empty [ 224.974101][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.011459][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.084315][ T5896] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 225.678677][ T5896] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 225.729857][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.791564][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.813845][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.858226][ T8942] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 225.873343][ T30] audit: type=1400 audit(1755588190.280:858): avc: denied { create } for pid=8940 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.898352][ T8942] bond0: (slave wlan1): Opening slave failed [ 225.911410][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.926587][ T30] audit: type=1400 audit(1755588190.280:859): avc: denied { ioctl } for pid=8940 comm="syz.1.847" path="socket:[21342]" dev="sockfs" ino=21342 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.951393][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.962879][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 225.981949][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.006472][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.031855][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.221343][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.262494][ T5896] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.292983][ T5896] mceusb 3-1:0.0: Registered ᠁ with mce emulator interface version 1 [ 226.302056][ T5896] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.317263][ T5896] usb 3-1: USB disconnect, device number 23 [ 226.981913][ T8967] vlan2: entered promiscuous mode [ 227.551326][ T5896] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 227.718812][ T8981] syz.2.858 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.771332][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 227.780108][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 227.808842][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.816408][ T8981] lo speed is unknown, defaulting to 1000 [ 227.858817][ T5896] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 227.894317][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.977248][ T5896] usb 5-1: config 0 descriptor?? [ 228.575581][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 228.657558][ T8974] binder: 8973:8974 ioctl c0306201 0 returned -14 [ 228.820713][ T9010] binder: 8973:9010 ioctl 541b 0 returned -22 [ 228.833558][ T5896] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 229.030338][ T5896] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 40 [ 229.054294][ T5896] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 229.131336][ T5896] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 229.151360][ T5917] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 229.167836][ T5896] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 229.189490][ T5896] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 229.259588][ T5896] usb 5-1: USB disconnect, device number 20 [ 229.302892][ T5917] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 229.320025][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 229.420949][ T5917] usb 4-1: can't read configurations, error -61 [ 229.581295][ T5917] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 229.822149][ T5917] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 229.843064][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 229.854871][ T5917] usb 4-1: can't read configurations, error -61 [ 229.861148][ T30] audit: type=1400 audit(1755588194.280:860): avc: denied { name_bind } for pid=9020 comm="syz.4.873" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 229.884442][ T5917] usb usb4-port1: attempt power cycle [ 230.270585][ T5917] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 230.322180][ T5917] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 230.331347][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.339136][ T5917] usb 4-1: can't read configurations, error -61 [ 230.481309][ T5917] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 230.502280][ T5917] usb 4-1: too many configurations: 90, using maximum allowed: 8 [ 230.511488][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.519195][ T5917] usb 4-1: can't read configurations, error -61 [ 230.527753][ T5917] usb usb4-port1: unable to enumerate USB device [ 231.211356][ T5896] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 231.381332][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 231.394464][ T9044] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 231.431441][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 231.494042][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.513621][ T5896] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 231.522914][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.615093][ T5896] usb 5-1: config 0 descriptor?? [ 231.641684][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 231.649270][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 231.661126][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.757233][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.827789][ T9051] lo speed is unknown, defaulting to 1000 [ 231.835981][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.850011][ T30] audit: type=1400 audit(1755588196.240:861): avc: denied { create } for pid=9045 comm="syz.1.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 231.934790][ T24] usb 3-1: Product: syz [ 231.951670][ T30] audit: type=1400 audit(1755588196.240:862): avc: denied { ioctl } for pid=9045 comm="syz.1.880" path="socket:[23037]" dev="sockfs" ino=23037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 231.981387][ T24] usb 3-1: Manufacturer: syz [ 231.986416][ T24] usb 3-1: SerialNumber: syz [ 231.993751][ T24] usb 3-1: config 0 descriptor?? [ 232.006581][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.074178][ T5896] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0 [ 232.088283][ T5896] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0 [ 232.123202][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 232.151471][ T5896] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0 [ 232.219827][ T5896] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0 [ 232.244288][ T5896] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0 [ 232.411702][ T5896] zydacron 0003:13EC:0006.0010: hidraw0: USB HID v0.05 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 232.471481][ T5896] usb 5-1: USB disconnect, device number 21 [ 232.588566][ T9056] fido_id[9056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.630020][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 232.636470][ T24] em28xx 3-1:0.0: Config register raw data: 0x41 [ 232.842070][ T5896] usb 3-1: USB disconnect, device number 24 [ 232.849485][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 232.861769][ T5896] em28xx 3-1:0.0: Freeing device [ 233.881966][ T9069] cgroup: noprefix used incorrectly [ 234.042632][ T9069] netlink: 'syz.4.886': attribute type 11 has an invalid length. [ 234.059430][ T30] audit: type=1400 audit(1755588198.480:863): avc: denied { map } for pid=9068 comm="syz.4.886" path="socket:[23129]" dev="sockfs" ino=23129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.321342][ T5917] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 234.432068][ T840] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 235.310425][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 235.951346][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 237.311712][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 243.309392][ T5917] usb 4-1: device descriptor read/all, error -110 [ 244.309526][ T840] usb 5-1: device descriptor read/all, error -110 [ 245.310330][ T5917] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 246.309203][ T840] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 248.309485][ T5917] usb 4-1: device descriptor read/64, error -32 [ 249.309197][ T840] usb 5-1: device descriptor read/64, error -32 [ 249.315579][ T5917] usb usb4-port1: attempt power cycle [ 250.309337][ T840] usb usb5-port1: attempt power cycle [ 252.309211][ T5917] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 253.309207][ T840] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 255.309917][ T5917] usb 4-1: device descriptor read/8, error -32 [ 255.317004][ T840] usb 5-1: device descriptor read/8, error -32 [ 255.317199][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.309209][ T840] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 258.316830][ T5917] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 261.309918][ T840] usb 5-1: device descriptor read/8, error -32 [ 261.316132][ T5917] usb 4-1: device descriptor read/8, error -32 [ 262.309337][ T840] usb usb5-port1: unable to enumerate USB device [ 262.315727][ T5917] usb usb4-port1: unable to enumerate USB device [ 262.328408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.754280][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.760579][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.351184][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.358137][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5996/1:b..l P6157/1:b..l P5843/1:b..l [ 343.368288][ C0] rcu: (detected by 0, t=10502 jiffies, g=25317, q=1497 ncpus=2) [ 343.376061][ C0] task:udevd state:R running task stack:24936 pid:5843 tgid:5843 ppid:5217 task_flags:0x40014c flags:0x00004002 [ 343.389498][ C0] Call Trace: [ 343.392750][ C0] [ 343.395653][ C0] __schedule+0x1190/0x5de0 [ 343.400144][ C0] ? unwind_get_return_address+0x59/0xa0 [ 343.405749][ C0] ? arch_stack_walk+0x88/0x100 [ 343.410574][ C0] ? __pfx___schedule+0x10/0x10 [ 343.415402][ C0] ? stack_trace_save+0x8e/0xc0 [ 343.420244][ C0] preempt_schedule_irq+0x51/0x90 [ 343.425239][ C0] irqentry_exit+0x36/0x90 [ 343.429624][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.435587][ C0] RIP: 0010:unwind_next_frame+0x15f1/0x20a0 [ 343.441451][ C0] Code: 0f 84 b5 ed ff ff 48 89 ef e8 0b e0 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 84 cb f9 ff ff e8 f4 ee b6 00 e9 c1 f9 ff ff 48 b8 00 00 00 00 [ 343.461036][ C0] RSP: 0018:ffffc900039e7440 EFLAGS: 00000246 [ 343.467404][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc900039e8000 [ 343.475369][ C0] RDX: 1ffff9200073ce9e RSI: ffffc900039e7d88 RDI: ffffc900039e74f0 [ 343.483327][ C0] RBP: ffff888022f062c8 R08: 0000000000000001 R09: 0000000000000000 [ 343.491293][ C0] R10: ffffc900039e74b0 R11: 0000000000010b2d R12: ffffc900039e7500 [ 343.499246][ C0] R13: ffffc900039e74b0 R14: ffffc900039e7db8 R15: ffffc900039e74e4 [ 343.507227][ C0] ? exit_mmap+0x403/0xb90 [ 343.511637][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.517789][ C0] arch_stack_walk+0x94/0x100 [ 343.522456][ C0] ? __mmput+0x12a/0x410 [ 343.526694][ C0] stack_trace_save+0x8e/0xc0 [ 343.531360][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.536710][ C0] ? debug_check_no_obj_freed+0x31f/0x600 [ 343.542411][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.547150][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 343.553101][ C0] save_stack+0x160/0x1f0 [ 343.557415][ C0] ? __pfx_save_stack+0x10/0x10 [ 343.562242][ C0] ? free_unref_folios+0xa61/0x16b0 [ 343.567431][ C0] ? folios_put_refs+0x56f/0x740 [ 343.572352][ C0] ? free_pages_and_swap_cache+0x245/0x4a0 [ 343.578134][ C0] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 343.584260][ C0] ? tlb_finish_mmu+0x168/0x7c0 [ 343.589096][ C0] ? exit_mmap+0x403/0xb90 [ 343.593503][ C0] ? lock_release+0x201/0x2f0 [ 343.598180][ C0] ? rcu_read_lock_held+0x9/0x50 [ 343.603107][ C0] __reset_page_owner+0x84/0x1a0 [ 343.608033][ C0] free_unref_folios+0xa61/0x16b0 [ 343.613032][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.617785][ C0] folios_put_refs+0x56f/0x740 [ 343.622524][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 343.627778][ C0] free_pages_and_swap_cache+0x245/0x4a0 [ 343.633384][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 343.639517][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.644525][ C0] ? lock_release+0x201/0x2f0 [ 343.649177][ C0] ? __pfx___might_resched+0x10/0x10 [ 343.654437][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 343.660406][ C0] tlb_finish_mmu+0x168/0x7c0 [ 343.665061][ C0] exit_mmap+0x403/0xb90 [ 343.669293][ C0] ? uprobe_clear_state+0xfc/0x400 [ 343.674391][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 343.679139][ C0] ? lock_release+0x201/0x2f0 [ 343.683803][ C0] ? lock_release+0x201/0x2f0 [ 343.688469][ C0] __mmput+0x12a/0x410 [ 343.692509][ C0] mmput+0x62/0x70 [ 343.696215][ C0] do_exit+0x7c7/0x2bf0 [ 343.700344][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.705349][ C0] ? __pfx_do_exit+0x10/0x10 [ 343.709912][ C0] ? do_group_exit+0x1c3/0x2a0 [ 343.714823][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.719569][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.724306][ C0] do_group_exit+0xd3/0x2a0 [ 343.728801][ C0] __x64_sys_exit_group+0x3e/0x50 [ 343.733800][ C0] x64_sys_call+0x14fa/0x1720 [ 343.738461][ C0] do_syscall_64+0xcd/0x4c0 [ 343.742934][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.748809][ C0] RIP: 0033:0x7fccdf0f16c5 [ 343.753192][ C0] RSP: 002b:00007ffeb0d4ba08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 343.761591][ C0] RAX: ffffffffffffffda RBX: 0000557136e6bb60 RCX: 00007fccdf0f16c5 [ 343.769550][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 343.777507][ C0] RBP: 0000557136c1b2c0 R08: 0000000000000000 R09: 0000000000000000 [ 343.785449][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.793390][ C0] R13: 00007ffeb0d4ba50 R14: 0000000000000000 R15: 0000000000000000 [ 343.801335][ C0] [ 343.804338][ C0] task:udevd state:R running task stack:26408 pid:6157 tgid:6157 ppid:5217 task_flags:0x40014c flags:0x00004002 [ 343.817778][ C0] Call Trace: [ 343.821041][ C0] [ 343.823950][ C0] __schedule+0x1190/0x5de0 [ 343.828439][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.833448][ C0] ? __pfx___schedule+0x10/0x10 [ 343.838272][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.843009][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 343.848973][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.854764][ C0] ? rcu_is_watching+0x12/0xc0 [ 343.859508][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 343.865459][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 343.871502][ C0] preempt_schedule_notrace+0x62/0xe0 [ 343.876844][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 343.882025][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 343.887904][ C0] rcu_is_watching+0x8e/0xc0 [ 343.892464][ C0] lock_release+0x201/0x2f0 [ 343.896940][ C0] unwind_next_frame+0x3f9/0x20a0 [ 343.901933][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 343.907970][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.914096][ C0] arch_stack_walk+0x94/0x100 [ 343.918744][ C0] ? kmem_cache_free+0x16d/0x4d0 [ 343.923657][ C0] stack_trace_save+0x8e/0xc0 [ 343.928328][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.933693][ C0] ? stack_trace_save+0x8e/0xc0 [ 343.938547][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 343.943904][ C0] kasan_save_stack+0x33/0x60 [ 343.948563][ C0] ? kasan_save_stack+0x33/0x60 [ 343.953382][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 343.958742][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 343.964801][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 343.969979][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 343.976101][ C0] __call_rcu_common.constprop.0+0xa5/0xa10 [ 343.981970][ C0] kmem_cache_free+0x16d/0x4d0 [ 343.986714][ C0] ? exit_mmap+0x511/0xb90 [ 343.991116][ C0] exit_mmap+0x511/0xb90 [ 343.995339][ C0] ? uprobe_clear_state+0xfc/0x400 [ 344.000423][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 344.005159][ C0] ? lock_release+0x201/0x2f0 [ 344.009814][ C0] ? lock_release+0x201/0x2f0 [ 344.014483][ C0] __mmput+0x12a/0x410 [ 344.018529][ C0] mmput+0x62/0x70 [ 344.022220][ C0] do_exit+0x7c7/0x2bf0 [ 344.026349][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.031350][ C0] ? __pfx_do_exit+0x10/0x10 [ 344.035911][ C0] ? do_group_exit+0x1c3/0x2a0 [ 344.040644][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.045377][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.050111][ C0] do_group_exit+0xd3/0x2a0 [ 344.054587][ C0] __x64_sys_exit_group+0x3e/0x50 [ 344.059587][ C0] x64_sys_call+0x14fa/0x1720 [ 344.064240][ C0] do_syscall_64+0xcd/0x4c0 [ 344.068713][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.074570][ C0] RIP: 0033:0x7fccdf0f16c5 [ 344.078951][ C0] RSP: 002b:00007ffeb0d4ba08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 344.087334][ C0] RAX: ffffffffffffffda RBX: 0000557136e8ca40 RCX: 00007fccdf0f16c5 [ 344.095274][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 344.103220][ C0] RBP: 0000557136c1b2c0 R08: 0000000000000000 R09: 0000000000000000 [ 344.111171][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.119119][ C0] R13: 00007ffeb0d4ba50 R14: 0000000000000000 R15: 0000000000000000 [ 344.127063][ C0] [ 344.130055][ C0] task:udevd state:R running task stack:26896 pid:5996 tgid:5996 ppid:5217 task_flags:0x40014c flags:0x00004002 [ 344.143492][ C0] Call Trace: [ 344.146744][ C0] [ 344.149659][ C0] __schedule+0x1190/0x5de0 [ 344.154137][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 344.158874][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 344.164041][ C0] ? kernel_text_address+0x8d/0x100 [ 344.169208][ C0] ? unwind_get_return_address+0x59/0xa0 [ 344.174811][ C0] ? __pfx___schedule+0x10/0x10 [ 344.179641][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.184647][ C0] ? debug_check_no_obj_freed+0x31f/0x600 [ 344.190359][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.195108][ C0] preempt_schedule_irq+0x51/0x90 [ 344.200109][ C0] irqentry_exit+0x36/0x90 [ 344.204495][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.210450][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 344.215809][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db 7e 95 f5 cc [ 344.235388][ C0] RSP: 0018:ffffc9000485f6a8 EFLAGS: 00000293 [ 344.241435][ C0] RAX: 0000000000000000 RBX: 00000000000518d2 RCX: ffffffff822d8f31 [ 344.249376][ C0] RDX: ffff888035b18000 RSI: ffffffff822d8f3f RDI: 0000000000000006 [ 344.257316][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000001000 [ 344.265271][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000000a [ 344.273214][ C0] R13: 0000000000001000 R14: 0000000000000000 R15: ffffea0001463480 [ 344.281163][ C0] ? lookup_page_ext+0x61/0x1d0 [ 344.285992][ C0] ? lookup_page_ext+0x6f/0x1d0 [ 344.290821][ C0] lookup_page_ext+0x6f/0x1d0 [ 344.295466][ C0] page_ext_get+0x58/0x1a0 [ 344.299850][ C0] __reset_page_owner+0x2b/0x1a0 [ 344.304755][ C0] free_unref_folios+0xa61/0x16b0 [ 344.309757][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.314509][ C0] folios_put_refs+0x56f/0x740 [ 344.319254][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 344.324512][ C0] free_pages_and_swap_cache+0x245/0x4a0 [ 344.330121][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 344.336248][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.341245][ C0] ? lock_release+0x201/0x2f0 [ 344.345896][ C0] ? __pfx___might_resched+0x10/0x10 [ 344.351153][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 344.357111][ C0] tlb_finish_mmu+0x168/0x7c0 [ 344.361785][ C0] exit_mmap+0x403/0xb90 [ 344.366003][ C0] ? uprobe_clear_state+0xfc/0x400 [ 344.371096][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 344.375831][ C0] ? lock_release+0x201/0x2f0 [ 344.380481][ C0] ? lock_release+0x201/0x2f0 [ 344.385134][ C0] __mmput+0x12a/0x410 [ 344.389174][ C0] mmput+0x62/0x70 [ 344.392866][ C0] do_exit+0x7c7/0x2bf0 [ 344.396997][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.401988][ C0] ? __pfx_do_exit+0x10/0x10 [ 344.406549][ C0] ? do_group_exit+0x1c3/0x2a0 [ 344.411285][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.416031][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.420782][ C0] do_group_exit+0xd3/0x2a0 [ 344.425259][ C0] __x64_sys_exit_group+0x3e/0x50 [ 344.430256][ C0] x64_sys_call+0x14fa/0x1720 [ 344.434904][ C0] do_syscall_64+0xcd/0x4c0 [ 344.439379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.445239][ C0] RIP: 0033:0x7fccdf0f16c5 [ 344.449622][ C0] RSP: 002b:00007ffeb0d4ba08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 344.458013][ C0] RAX: ffffffffffffffda RBX: 0000557136e6c4a0 RCX: 00007fccdf0f16c5 [ 344.465952][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 344.473906][ C0] RBP: 0000557136c1b2c0 R08: 0000000000000000 R09: 0000000000000000 [ 344.481846][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.489786][ C0] R13: 00007ffeb0d4ba50 R14: 0000000000000000 R15: 0000000000000000 [ 344.497727][ C0] [ 344.500717][ C0] rcu: rcu_preempt kthread starved for 9969 jiffies! g25317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 344.511785][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 344.521732][ C0] rcu: RCU grace-period kthread stack dump: [ 344.527585][ C0] task:rcu_preempt state:R running task stack:28000 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 344.541022][ C0] Call Trace: [ 344.544274][ C0] [ 344.547181][ C0] __schedule+0x1190/0x5de0 [ 344.551657][ C0] ? __pfx___schedule+0x10/0x10 [ 344.556496][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 344.562103][ C0] ? schedule+0x2d7/0x3a0 [ 344.566414][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.571150][ C0] ? lock_release+0x201/0x2f0 [ 344.575804][ C0] schedule+0xe7/0x3a0 [ 344.579848][ C0] schedule_timeout+0x123/0x290 [ 344.584704][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 344.590049][ C0] ? __pfx_process_timeout+0x10/0x10 [ 344.595321][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 344.601113][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 344.606563][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 344.611300][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 344.616570][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 344.621502][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 344.626352][ C0] rcu_gp_kthread+0x270/0x380 [ 344.631010][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 344.636180][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.640917][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.646088][ C0] ? __kthread_parkme+0x19e/0x250 [ 344.651091][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 344.656256][ C0] kthread+0x3c5/0x780 [ 344.660307][ C0] ? __pfx_kthread+0x10/0x10 [ 344.664882][ C0] ? rcu_is_watching+0x12/0xc0 [ 344.669621][ C0] ? __pfx_kthread+0x10/0x10 [ 344.674179][ C0] ret_from_fork+0x5d7/0x6f0 [ 344.678753][ C0] ? __pfx_kthread+0x10/0x10 [ 344.683314][ C0] ret_from_fork_asm+0x1a/0x30 [ 344.688064][ C0] [ 344.691055][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 344.697354][ C0] Sending NMI from CPU 0 to CPUs 1: [ 344.702544][ C1] NMI backtrace for cpu 1 [ 344.702555][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 344.702570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.702578][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 344.702593][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 344.702605][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 344.702617][ C1] RAX: 0000000000b3fc2c RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 344.702625][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162880 RDI: ffffffff819133c1 [ 344.702634][ C1] RBP: ffffed1003c5d488 R08: 0000000000000000 R09: ffffed10170a6655 [ 344.702642][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 344.702650][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab3f90 R15: 0000000000000000 [ 344.702659][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 344.702672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.702681][ C1] CR2: 00005652e5669000 CR3: 0000000072505000 CR4: 00000000003526f0 [ 344.702689][ C1] Call Trace: [ 344.702695][ C1] [ 344.702699][ C1] default_idle+0x13/0x20 [ 344.702714][ C1] default_idle_call+0x6d/0xb0 [ 344.702728][ C1] do_idle+0x391/0x510 [ 344.702745][ C1] ? __pfx_do_idle+0x10/0x10 [ 344.702760][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 344.702775][ C1] ? do_idle+0x2e8/0x510 [ 344.702820][ C1] cpu_startup_entry+0x4f/0x60 [ 344.702835][ C1] start_secondary+0x21d/0x2b0 [ 344.702854][ C1] ? __pfx_start_secondary+0x10/0x10 [ 344.702873][ C1] common_startup_64+0x13e/0x148 [ 344.702892][ C1] [ 344.879423][ C0] sched: DL replenish lagged too much