last executing test programs: 7.494674778s ago: executing program 4 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x29, 0x3, 0x6, 0x5, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x1, 0x81, 0x4a07}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r4, 0x4b6a, &(0x7f0000000000)={0x1, 0x40000000, 0x0, 0xfeff200d, 0x0, 0x0}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000280)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x8804) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x402, 0x0, @private0, 0x28}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) 6.87031819s ago: executing program 1 (id=1336): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="896ca34cb04525ec1b37b7350d8b369aec7be33ba5d3", 0x16}, {&(0x7f0000000280)="3f0bbd68d7b72a55c1273bebb966673d2310bf21dd8b3b290db5efb7078f7939e2479ceb2c1d03b789fcadaa1b174ba90a70dc46d17570ff9f", 0x39}, {&(0x7f0000000340)="18dfd97789b3229c2edf00345b8a91c144f59210fbcf8145d11128d23adfa173f7278b536be94401721b1915fc4edc4e9b784e6a18535493d2cc98517cd373ecea26513e0b65926c4f4ca4ef3a6366efee3b785d3052c30a05462fd0", 0x5c}, {&(0x7f00000003c0)="5ce0630409894be17c521df0cda453437eafbbd6f9bbaf27d44133f96e8dc13a1b7c20d58f4b77a28be0f03bef952c550d5ef870b52918e993b1ea5f4c72f0d6ca", 0x41}, {&(0x7f00000002c0)="754b94ef1ab6e1ca9f936eaf231b3b4fb814c4604facba1c94e4c00c375279f5b6624a1b0c7feec2eac19bc31783b1cba35c6674b26065f9", 0x38}], 0x5, &(0x7f0000000700)=[{0x90, 0x114, 0x6, "1d567bf2c8e54c90e6ea51f1043c8b22122ed59b8fdb03c5558bef107c6ac35f45b54c9f74757fe4b0b1ea54542a14dfad87ec06a18c52f6c774a9cb7ff77fd3d0c1f7f0a93319afae55d555baa23ec9ce2e5900e659f9977862e333cde044034c590a86ea004a2c2c4b73de1301f4f9d5bfdb0d598c8354d39a8c8b3a37"}, {0x100, 0x1, 0x4, "55f76f74b91f442fafdd863505c4280ae8d55ff9715c169dfa155a2c398f8408c20ba1075fe1cf25d2248f2a70e3ecf1173786fe071f7915ace8a97fcdaba10f330b9f899da7b12b3c488f0392997e1c36dcfc2c47080d50067052d0817235dab378b4b39ea6fe1401b7ff1264198b0b25cb16ef88fad7a9996db0369cd553fb8eaf2f4f1127cf44d95b6b0e305f54633078663e45519da1ab7fd1214cd400f0e08d43241e08a05e4cc1988844483b601defbca8bc2ce13f356faf27f25bf2ba33eb8568ed5d82bbfcde76e7a8b0c392e8919d7140e6bf4280582a06ab0171454183d2bf7a9f56b402eb4784"}], 0x190}}, {{&(0x7f00000004c0)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="821565ce6a0dd00b498f1922fb73bf7ff4453fc0e0b4762b3b5e44ab2b6384a03d76750128b38d4328aeee76e8ce1824b5d547ce713473ae2e73140c87f61a5f1f644e48894a080c66a9e6d9a4ebdcad0ea619bd568106efc5a1f8e19bd28242545415f18b2400883b07bf93318cecfe920a6afeef573e7e96390497e3541fc312fbc04ee3008239e436f50c5e870137788c71d9431f6ac80899e36cc91b", 0x9e}, {&(0x7f0000000980)="a31b453cc78df10bba359040de599e4df5a743d75f319ef663480e5c5b9fc7fa07037a55315a1c92db9bd7106a868d836c6d5ce02774c4dba01178d03fccf441a97d3983a2adcb08d27056f3bae2afc7c6d130934f293dfe9c694f8abcf961e690d58e0953c090218e7d1a37ebf82194498a0e9ae9054fdf1a511113a4a7d82ea39a14159a56b5f40a8c9eac12bd7e38b5d95834f694d2467508f9", 0x9b}, {&(0x7f0000000a40)="6250e120baad853568a70332f019e1829db3f2ffdad3c38170534ec4b8242cb89699639d88320fa14a1f757e7f17a097aa4c3d2a75ebfd801726351c1ac06b1c700654160b064e390ea4685e94c153370cb42932474cea20fc4e901f9f8b2b32a347ab971062e0c61bf345e173705bb4b068d280187183cf9b42122a8761c2508f79016e5bf775052fb2f81a4821c1752ad21fd31a69de2b32c62b484c0dad3fd988111b9cacf14f4308b5fb7d86019f21577121e477c8f34b6cb4514178408ee39fa8531554b257c99b4b5d02d8ce", 0xcf}, {&(0x7f0000000b40)="047f9236c680a2d056fe2c412946ebdbc8340f768747880adcf8c8f9bb556a6b17343886568115f77562b7a558142ec47938ab17ae95ea864960507ddfd5af86f4971f5028c6165dd5347c5ce87f04b318c069e8a4cfca006d71bf2ce3abacdbd8247e3da83bdca86420aae39c41d520c13e53287940a9c515ab05e8d88fd1464d2387407afd6781b975e68adbb357700371bc9155f786a53469c38b67d841496169ed9268cf8bbcec267d46f29d09057ec30c3d710c0aa301a55c144dc0e299e300", 0xc2}, {&(0x7f0000000540)="f49c69b78ffe9c41848726936db61aec171068bc37a6d40ee4b766faea5ebb16ba57ddec22c598b84d3ac573b65eab05baff05a14492", 0x36}, {&(0x7f0000000c40)="dcd946eb2b7485504d2ce459ba5e7796fe3cc57ed5c391e3127e6b2d0e96c7b7ca5848241437eb4c22281c54c807c6b09714e951b8da33218ae867cb56718707dbf595a9ccfb41ec9486f099eb0c7740bb405c82a07311b9e8a4daef6c685509144e3d265a52edf3aee4517f8464d4bcda5076ed3a19935d2fe63502cdbca01a798afa1a7349bc4b871fce0ea8d7b83bdfb36608d00c75e2a56bb4a98ec70d7966496fde458012c54ad46aed8eef43fd72a5e7e99bfd33b3ef003b6c3e1ddd9dea472ff3af09be88323fc01b66c730bdc637b0ef06aded449804c84c5052d4", 0xdf}], 0x6, &(0x7f0000000dc0)=[{0xd8, 0x117, 0xfffffffe, "d207b12c63fd0a4d3e8231ad9cbf5f92204d69b60c468c27e17aa1fd112f29a5546f6158dd47a2e2a07ab50346472c7a7bd3a2681e0fe0e8b3efc3a93ec7b83bbbd5a140dc73e5d006862f55d7249adac9a7e7070835cdc880ce7f8e3e39a94496006aa78348abfe7e520b87e0e4f371ba11ac02c0c0eeb967f3b3893ea3073195af41e5dc834d9de29a76fe8adc197840ba3e27f185ae73909aa954a548eca726d0cedff2c3a63122dfa7d2d17f1e8c87ac68c2d34a8658f9d38c407a9f3006774712"}, {0x40, 0x119, 0xbb, "1a729bf0d94bc9652743380f5c5321e54fda5eb2bdac85821c284a684e47ebc5043e560203145a382f80"}, {0x50, 0x3a, 0x62, "23156b0f98c18e9b0a4ce62baa48fb8dccea9db60e0eee9ac33ca585be576e34d052c999ee8544feb78c3ef21452fb3cdda5561894161fbad545c9bc"}], 0x168}}], 0x2, 0x20040000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec10}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x650543, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) 6.634823709s ago: executing program 3 (id=1337): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x34, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [], "a87f7292"}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@empty}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.286572517s ago: executing program 4 (id=1338): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0xfffffffffffffe1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x10, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x2, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) 5.892284048s ago: executing program 1 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181600, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xb, 0x200) lseek(r2, 0x7, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.833777091s ago: executing program 2 (id=1342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044014}, 0x24040090) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=@newqdisc={0x29c, 0x28, 0x800, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {0xffff, 0xffe0}, {0x4, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x26c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "ef016eee71bfcad6b8a6a7fa620169caaee2fd9f157a400d6d2f1b6bcea881c5585d12dc6330f709002bdd443024e1eb6c884a3f40add42790a87f2a4819938d1900851638ade62177ba6fdd40c10eb4bfb9c535b378754cb1b3c5d4ae87eb7be1d65abb07292ac996a5626a8bc8e906b4c266bce37f4c27f13edb634edb4a67a5dc2a9a261a734a117ec10bc86e12e8e729a7fa5423f5fff19af7063046850b335bc9ff493155e7214614d52c0693302c2ecee56919965f2a4b486be68a6cb91bf299d44c405411a387906c6ea51c2999de998c04400c6b296a4903d131def40788f3a33126324fe09f61c044e1bda1ae674202b6d1a97463d423bb78777a46"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x32a4, 0x4, 0x400, 0x1b, 0xa, 0xc, 0xff}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x4, 0x1000, 0xa, 0xa, 0x11, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x3, 0x10001, 0x11, 0xb, 0x1c, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x81, 0x9, 0xea, 0x14, 0xe, 0x19, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = getpgrp(0xffffffffffffffff) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f00000005c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x20, 0x0, 0x0) 5.773512536s ago: executing program 1 (id=1343): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r0, &(0x7f0000006100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x49800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000005600231200000000000000000798", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) socket(0x80000000000000a, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) 4.845531452s ago: executing program 2 (id=1344): syz_open_dev$MSR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x20200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.62547968s ago: executing program 0 (id=1346): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x7fff, 0x54800) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ipv6={@local, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {0xff}, {}, 0x2c, 0x7, 0x4, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, [0xff000000, 0xff, 0xff], [0xff000000, 0xffffff00, 0x1fffffe00, 0xff000000], 'veth1_to_team\x00', 'bond_slave_1\x00', {}, {}, 0xad, 0x8, 0x1, 0x30}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x74}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000480)={'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x240, 0x310, 0xffffffff, 0x240, 0x240, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, &(0x7f00000004c0), {[{{@ip={@local, @local, 0x0, 0xffffffff, 'team_slave_0\x00', 'geneve0\x00', {0xff}, {0xff}, 0xa, 0x1, 0x28}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x3, 0x0, 0x2, 0x0, 0x6], 0x3, 0x2}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan1\x00', {0x1, 0x991, 0x1, 0xfff, 0x40, 0x7, 0x6, 0xc0000000, 0x8, 0x18}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @loopback, @rand_addr=0x64010102, @port=0x4e22, @gre_key=0xfe01}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x2, [0x3c, 0x15, 0x9, 0x29, 0x3a, 0x37, 0x39, 0x4, 0x8, 0x3, 0x30, 0x32, 0x3d, 0xb, 0x37, 0x34], 0x2, 0x1000, 0x4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @empty, @local, @icmp_id=0x68, @gre_key=0x9}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0xe, 'fu'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x7, 0x0, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @empty, @multicast2, @port=0x4e20, @gre_key=0xf}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) sendmmsg(r1, &(0x7f0000000b40), 0x0, 0x24000081) readahead(r2, 0x5, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1, 0x7, 0xf, 0x10, 0x4082, 0xffffffffffffffff, 0x40000, '\x00', 0x0, r3, 0x1, 0x1, 0x3}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3c55}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6697}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00'}) r6 = openat$cgroup_type(r4, &(0x7f0000000dc0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000e00), 0x9) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000e40)={0x0, 0x4, 0x30, 0xfffffffffffffff7, 0x5}, &(0x7f0000000e80)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000ec0)={r8, @in={{0x2, 0x4e22, @empty}}, [0x9b5f50b, 0x7, 0x8, 0x81, 0x7, 0x100000001, 0x5, 0xffff, 0x9, 0x400, 0x8, 0x2, 0x5, 0xfff, 0x4cc5dcc]}, &(0x7f0000000fc0)=0x100) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x9, 0x3, 0x3b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, &(0x7f0000001000), {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff, 0xff000000], 'macvlan1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x2, 0x8, 0x2, 0x2}, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0x0, 0xff], @ipv6=@private1, [0x0, 0xffffffff, 0xff, 0xffffffff], @ipv4=@remote, [0xffffffff, 0xff000000, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0x2b6142a409090687, 0xffffffff, 0x7f000000], 0x237, 0x81, 0x5e, 0x4e23, 0x4e20, 0x4e21, 0x4e23, 0x4de, 0x880}, 0x41, 0x2}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "747bebc3305d29ca0cd000511cb87fc3ff2c86d7a21d6cc3d5d8e4276acc"}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x7680335e], 0x80000001, 0x18, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5b, 0xd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000001480)={'broute\x00', 0x0, 0x0, 0x0, [0xf, 0x2, 0xa062, 0x20, 0x2, 0x7]}, &(0x7f0000001500)=0x78) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001540)={'veth0_to_bond\x00', 0x100}) sendmsg$inet(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001680)=[{&(0x7f00000015c0)="1851bbe0dce7250473f2206f7dd2ec36d28d426fac095f9369423c4f850d8c0d40e941d0d5a1b0d0fc55994fb8021e653369a3aca6039edcfc59605fa12d0cc789013292a5d884ba9804d32cdab3e51975d6035cea7287436dcc3ff26d9ed639a558cec2bcb8ccf59b1ff7ce64d999b118fc6fbbe0b3fd61f5d52b3ec9f04ff4de4ae73f028c", 0x86}], 0x1, &(0x7f00000016c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x39d0}}], 0x18}, 0x0) sendfile(r1, r4, 0x0, 0x2) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000001740)=""/4096) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000002740)=""/22) 4.532061425s ago: executing program 0 (id=1347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4004054}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xd, 0x3) timer_create(0x3, &(0x7f0000000500)={0x0, 0x35, 0x0, @thr={&(0x7f0000000080)="8aaecf707298dfb70802e10d1b47c7b7488e2ca089a0eff74839fa9383869d48966e827aaae2acb4b139ba2af5cb16304ce80bc32cacff4b6b16c1db47c141be0a4bf3273533e26a52340d7ebb7eb39bf7b2d957e8371597ffbfe42a473583fa394d8eb34f3eb907c41150849f", &(0x7f00000005c0)="7e41c0bcbc8a89cc4a906a58d9f1bca60096251e9f9c72c0d5c551554599aa52587e04ab119e7e6bc43bcf0921512d022edbbc0c13de5eb231c21d6212c83bd27e51263f9484bd4bf7af6806ba238a8ff9c5f6646c432acb73fa5a0f0b8ce0aca97f3d85211ca2637cb785e7fd256193fc633b4997e6ba4d8d822d242472f084caecd453cc04944424cf7af250ebf782f821daaf41f16ae5d1420949513d5fc1409c205dee6ce9d9c5dd6122ea779707b26816986554930b0b25b66a473f49993a56f70c0caac7330bc1007cc8615954e1563b3755c4c1240388845741095447b228007446de00498ca7344c70c57397c7984bfabf0ede255f71b5ed3e6beee7f304d0666e994f388b1d85d52872b3142397fa1b0d199aa54754436cf7a0a3065d8d9adbc4dfac82793406768b754e319290720d59714b2f2269f2110205b03e6b956cc9d7f92eb7597ed3d60e4daaadead5bb9bdfd8016b4b9a6794990c47d6ec1aa2f190eb70ba0b9c800a87e9d11419c701246c7fc85e962fd951de261a3705558078fdc5d8330ad67f3d95c56aff0d009dad916de7a003e7070168f864ff48f7b41d585e1ffc7cff260ddc275985437c141a5e798154db98234f23fbad27e7fba6b8fa39ef3469613c77e7de558e70414eb9cf3aba4f0df38b7d94995265dda049d880d8cf45d76da677ab47f7c1d261f770e7dfbeb8528f894167b78c2be056c5eb835ffdd56d996c4871c509377e61864a10514504eac4d7afcaf389e3610ca2bd48b918e6115e151eb4b8e26111a880c210f7c116d5ae4184310929ea294469caf59086e22fe14d1c593889ab78b8241f1815b3357c6bce57763e2429eeab91772669a44bfcb5f2418656b3476d1139428e03ab457f5df2c6a4323b29931e7312c2eaea8c996538faa20c284913c16294575c7709f528389105d198e850343f32324fb9de506beec224f3885dc53e5b2061822a93f6d70f3199bdd403058002353701dcfe0b607f2175858fa98a22453e9fb5867db6968561ead7631f7b44941bbe647edf1f87e6db698b1c4b87b84f8ac9ebbda187e0b7f7b50a09385df2bfe5dcd1b88395b3b173b9ffbf3e93f7ee2a40176b08fb2404b387ba5f448d756e93f4d88451c5ea41a01124476a3a9c43f88109de1c6e95b557280800958a111dc6a111404ebd0afab249a4a1f082743f28d8d4b5e654e4cf8c8848207db0481f92b9684d3f520140f6c9295248c0e9c79f90c10eeca03f22eae22a5c10d407ecfd213a85257a86d37d3cf363cdba052bcc830e190df58b773a00534a93df808a398d8513d188c9ff47dfb07f83bd0bcf1e0a33ba0479b80088ce6bc975786730ec0bd13d362f77e2961a6bd1eeca06a46eb5ff5f722de5b15e478fbc94ff0a9a420377e8915335d31b2654d7702019f22689a50582c726894fd4cd8b64433bd5a7e9e9e73aa1adee931e0f904cb4720d1e5f5e25931bb903d56f6626a63a3aafe863304bd46a379cec92dd49cf85dc2f3ecdaf2791455168d53a638a250a8475c4d0514eb589140d609f20cad2f6818204a55fc992dd464c6169d6cf81474760c287d6a92380c02d4051927f9ede369330e4fe6d37032ab10bea530db35463a60f58a9a7204ab55ed6a2c48c6eb855c9fdf4e2505bd3bb0b048765dd8d1223d0215c0af049ef43a8d17389ffc24c03a0a34f41ba8f3c5620768503d96e2e4f83f587af7fb6ba6bfa87de81b33687b1aabeefb716bd93223d86c95695650c3e196758a08cf8d865df546a70d9d055619ef19f7a80deba8cc7d9ecbf3c27a55f4b2575428455eeb6e9ae425d2b50a29f5c3629147cde12b0df8851f31296cdb6a8441f3b5c31f49bda785afe0fb0c97f784e9deaad016af09986c3f5fdc4141af7eda24c8f46192c2dd16056af11dd590f3faf8ef2d696400cc36ba85828c4b6675ed65ee25e468eba0561291463783572a1d9f2dfa5478474b4fbb0d60d134dc987086850322244cbc23032bd4750985b281837c516b5000d87dfa25a1680d61b6b0e35300e65ce6d55a928566001514ca9f512f1452ebfcf301a9306af0a6b96590c9d800d917d4dea9fd84c9957f5ee14b6969c1ff6dc56dcb13b92883e73afcbf875dc9043669f797a2c234f6b370a9d7572ad82844fa0dfa8b403b850e09a2c77b34b09a7bad3a6896c42fa33747e56582f46fd0eee3eb71a0cd2a3b8d38c6707674aac55f446faf323e1dd9c72255e447eae8916a5f9220717920ebb64c27cc5867c00373e0bc0db9a661ddd07408193a7cf576da37b019eecbbf24db300f82896c9938485d42ad2fbf50d9bd2d4c6bdfbf1fe1749642a6b88d04f9d271ed5d125c749dde370069245805ce9428c973730fa95838a190526ba57c7ccc55c2b7a67ec4f2bc361aca7a974519802dac1cad8c80e55b130d72b79a99da86213d47f9f3571065bff20c29931e5e69d9b7a5879d584384289383dad8ca0fcfe0447bd5eb6e7d555b3f8a13da94bdd0871a4ae49d0b04c4e6b27df57ba35733b5967a766bb9cc52c211369a87650bcf083ea6e3242885fc83059aa62da714ab66a0606d8e6016908751c39ce42595562917b1f1e24dece937b10508888ed1bb6d97dfed17786eef6fa6492e1e7e86f5a5561f74665378dfe17f87f18c20b7d292cb6c317fdbd0d5651bd5eca3c5e92a9ea2a0da574db43630d251ee591c2c44317f302192de69af2c1be287a3999ce1676bcc07e263239766a34fb90099476e1302fe4c77613c1b05c7a5cd5cc3521db040cba6c3d838f3787cc5500d23907ff61b01fad370e9d10b6910140dc22d31a03edc75e457df67a10fbd199a74433b025a3e2a8acf7c80304b96afbf4dc3958271d7e83756ce7e2dc939bfb542921f97380d9df58367ebaa3144f35b8bb87bfe44e7a98ace95b955d3ba66f5781bb524a9087ef40d405adb3d031f6fc316638ca219da2f7dcddbfe42758cc5681cd042e8af1fcaf67446e0df53d74d8f32526534fefab53fcd68fd6a318969938c80a87cd14424f0df160a4a164c212f580fc8085e60a150bab4b0e6bc9316df5311e11f2925752cad08a5e0048ffc22e34e9a15b72b0a3448c9314c9d5bb89f4fd90923b433c7f5d70453645cf62ade79cb763c3d7b31ee4b63cb2fa6717c819e822d42da38300c108646159c84a0e6d0bdcc61eac11ab4f57013a2219d18f7a49f1f0d4128ea822616780a24151f59187bf475dd3dc3e3082e2092a73c1c3c0a29684a1846bd2a030488f833c104cec2cfcbb3d58a2edaee7ae92cf8ef9d2601d9a9464eeaf0ab2445bb51fd4d8553e1f57cca20a5c7378168fe5f17dbd96f92f6a8087805389cd3191b88565021734893ea8dcd4c2acfbb6b095ec4df7aa4b2e7e8efab6aa481929f7a33f4b8fe656294cf4f5ff57cbafd622ba4e033e335caceb02865dcc0b7e13216847390c8ac358c29a3110b635215d4c9aae89d0eddee50e679f2dea36913a86f7a6aabda3f94f53f28a82a8730c5c883db65d926d2b11c86d27dbd4712b3a08fa11c4a3755ac3d34de1d3185f43251689803e5a0dd2b123d0c837daf7454119bf629c526a5d91c0aeb05239c0e199cb9c7c324ae66c73b7ee2c244af000e1de5d65003ff6e49ca7a23e0ec2ef62d7b715e4840f4954eb8daddbeb8fb08abe9e40930f6b1ba57b20885bc3332d002c545787b97c1c88ee44fbaf4bb6533b7b1a484fed729ad0515788fe0bf5c070af0e245381b92c382efdbe82bb2cf82bb55ac5e52105b2310b13cd08936394a3ae863249afa210a2a873dc7be43f2bd15c89f2eb4400709995760d9f2855a9e93ef849c013908d57c8864d8b2dbf1e7a8f6b42d72362c41304385e564b81e70c211129103d44f66b03d62006cdd2b6656d0029a2787087ee27914d5331f0e01d764973c3423299a678d5c5df3826e22fce8317d280018942bc537f4378da1e83d956e2951d264768ee24fcf1edd2973126d0116bdee0328223d67ac5e0432fa73d93d9c47dc859df0770d546c20e83f8c63910dd2f927c5530b1ab5aed96de088bf9c05a649ee565976bf59aea6b568e68adf798d9af0da34836a2cf8c89e6d61e8545bb11b0333c66d6f80d69dd95f0b93f926163cda55835ea3b1724a9dbe0da472953def466d0cb9f78bcb89d15d8ff64a6072204e12ff97515e6d757b84160427b70a9dbf99f0415fe8df3b222da7bf67daec22bc517967063214ddabbd42a25578fcecdadf29293331501939a1003c451749f239a1fb7f8cb205d98818c87274f2de0accd34d92917aa203d6ef43ede91add0ccf6f1691206d5956e47407b6932a0a26ddf6e5123f3ac2dae6c590ad1fc8d53c01f96bbe0ae7e9a60dff3ba64866efe4b0b434b91fd569a516e69af37a49e68f2221cb25451a95e2152a80e50b94f383c642d78007ae234e4dc20224a5c5daccffc7725451b48d3ab4def5a042929e3c01b805b3662c71a7d89c7b57cea45fb0895cfe4091406cf59406ca7cf231670ad2291e5e2c526a7d533997f1adb39befa9ae1f154fb3befe59e422d57ec5f833e8dcf74f525619c2b93335ca89268e243ab4bf78d130982b323d2e99f4aff67ee64f31454f31f4e4505712ff00a799581feb9065f9bc67895374996350e0017b0c643929373b0608969de167a13942e504662aae6c940ffc927acec889fa53e5e24be78b79d3395b4e8d7abbe4155036780e4a6af7a3e2d15bb8d6a33e13ad1492c236cdce77b5051c64cf4e406ffdf863a32d598e42f467b6ee5b223fbe6d001999bf277348acf4150202c25223951c17e2181f844f2bd5368b67604e07a84f437eb9b2137081a6add74bf6b70070a15423f56d6fc430a4924c75b8e40670d54e79c3fb94fd615525106a6b8ac52a8ed035243903db2bd86debe9340743fd7a45f324ce6eee6a7467406ef24efc50e90e2d50516c4b2ea8302b2b9a264a31816801121ef9a7de718a4dd117b00adcc0c4699dd506c17c82a26e0b85843e96efc52ca597e1b54648e6e36ae3c3d3005f8dfc0b8a87a4b0818cbca2092eabc6f28f04a78a874bcf322a4a2a36a3661d00375ba2fdcd9eb0d508813fd034e1022b0591378d9c57bd2c825be52bca8815d6c69e31b38fc4514d2dd4d744311e7abacba135ced42046cb56fadc444d1cbb3c7f303adf84dcaf81781cc8a5ec6c5a7312fcf4474a472a12aac72877391333aa38af2cb4a9fd169f95e97d846da6e5315598dd0542c979478b3d3fe002da95a30719af19162adf767fb60565f08e48f0d1b7b53bd73719799a60009ef9d210ed41b8577682ec292f436ce0b184ed2852a113d0c68ddde2f744ab72ea3e85fabaee5641a36f669d727854cac3591715bef9e2c7ca37613edfcc3a5fa949102e308dd431e55ba0b3903d09c8d9a9cc06f92c854b5de0916779c4c2873b3facd001b73e7d78bb2f77016f48d41ed699d4f34f78a0f22fb283013c2b704087de392206a607213a03e110912bcf460bcc03124affc778ee85cce7db1f4c787d83f38f10e64fa262d42cd93625b3563e90f29d7856cba4b2ce37ee1ef2d8acbb4c92c2816d67fbeb2d2875cb817a669ad637d67c7f7cfb3c5f0222f46527bdf45b9f48d482e26b5837212035e66f6f9e7feabf3cb6311261b32ee4888288579995aa60e2e9c7397af31c4ff501d04e969221546bfb7a6ae71492d6f68f53a7b2058e8c869681408abe828533ca6466f0bf6b4924b251d6a0c0cbb282d2b0558873a5e5e42e1bdb9553399cbba57e56fd369a6433a2a"}}, &(0x7f0000000540)=0x0) timer_settime(r7, 0x1, &(0x7f00000015c0)={{0x77359400}}, &(0x7f0000001600)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.132858484s ago: executing program 4 (id=1348): r0 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x70a) semctl$SEM_INFO(r1, 0x1, 0x13, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = getpgid(0x0) syz_open_procfs$userns(r4, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r2], 0x0) r6 = add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000000)='&', 0x1, r0) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r6) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x3000000, 0x40, &(0x7f0000019300)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x2e8, 0x2e8, 0xffffffff, 0x1d8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1d8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x50, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@physdev={{0x68}, {'ip6erspan0\x00', {}, 'netpci0\x00', {}, 0x4, 0xf4b3ef54909bd649}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @icmp_id=0x68}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x8, 0x2, 0x1e6d55f4, 0x8, 0x8, 0x51f2, 0x5}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) recvmmsg(r9, &(0x7f0000003c80)=[{{&(0x7f0000001880)=@ax25={{0x3, @default}, [@bcast, @null, @default, @netrom, @null, @bcast, @rose, @rose]}, 0x80, 0x0, 0x0, &(0x7f0000003c40)=""/36, 0x24}, 0x7}], 0x1, 0x100, &(0x7f0000003d00)={0x0, 0x989680}) keyctl$chown(0x4, r8, 0x0, 0x0) keyctl$link(0x8, r8, r7) 4.017363908s ago: executing program 0 (id=1349): fanotify_init(0x2, 0x1) socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000), &(0x7f0000000280)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 3.784174081s ago: executing program 0 (id=1350): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xf5ff, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) 3.10035584s ago: executing program 4 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080003006b4c18f2a9d4b1020ae1d5560f456dbe2f0f97f0e02f1b12407dabcbcff40e96de0c68bc5527b18f3b08baf85b8357d69b4ebfd8", @ANYRES32=r2, @ANYBLOB="0c00990001010000460000000800270002000000080026006c090000"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000140)={0x1ff, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x100) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x5) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) rmdir(0x0) r10 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x841, 0x0) write$snapshot(r11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.865064334s ago: executing program 2 (id=1352): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x5, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xfffffffd]}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) r10 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r10}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2.770991112s ago: executing program 3 (id=1353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90120600040f0eb029e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 2.503287623s ago: executing program 3 (id=1354): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000004330600f0ffffff18260000", @ANYRES32=0x1, @ANYBLOB="0002000000080000851000000200000018290000", @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x3, 0x1ff, 0x80000000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x1], &(0x7f0000000380)=[{0x5, 0x2, 0x8, 0x7}, {0x4, 0x5, 0x4, 0xf68aea513d3f04ab}, {0x3, 0x2, 0xd, 0x9}, {0x5, 0x1, 0x4, 0x1}], 0x10, 0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270077d1"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getresuid(&(0x7f0000000600), &(0x7f0000000680), &(0x7f00000006c0)) write$binfmt_misc(r4, &(0x7f0000000140), 0x0) pwrite64(r4, &(0x7f0000000080)='3', 0x1, 0x0) 2.357702944s ago: executing program 0 (id=1355): r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0xffffffff80000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.970472312s ago: executing program 3 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff25d8, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x110, 0xffffffffffffffff, 0x0) (async) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) (async) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) (async) sendmmsg$inet6(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)="f9", 0x1}], 0x1}}], 0x1, 0x4000) 1.898444735s ago: executing program 3 (id=1357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0xfb, 0x0, 0x0) 1.858391043s ago: executing program 4 (id=1358): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x118) fanotify_mark(r4, 0x105, 0x800101b, r3, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000aaf9a16c9bf96f5e1f7f3a87ab24fd4237f7a8613327f82d21ed4674de56e5c2ebd757b90d04bd09a2cf9355990b0644aba85dc19a91dcd9853afb438a5852d55f61209d207f0ac17e018e54305a9851c2f502242eb953ea6875bed0ffd38984725482c440be3fb6cf7866c874dbc249f9e32936fa962769487d0281dc4c8eae5f2e941eb074c6d8ae6245da4ba607ecad54dee716417e19cc8702bb993e4ad6709e31a8a5cd44d7948aeb9f27124dfd5ca80c2010386b9d3d065797b36a3462d900a05ef4d9ea33aa330accaca32684b509cf907210000000005bac0c87", @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0}) 1.766693714s ago: executing program 3 (id=1359): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000057"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@default, @null}) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.432150909s ago: executing program 2 (id=1360): syz_open_dev$MSR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x4, 0x4, 0xfffe}) socket$inet_udplite(0x2, 0x2, 0x88) 1.312577501s ago: executing program 4 (id=1361): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x403) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x6, 0xfffffffffffffffa, 0xfffffffffffffffd, 0xff000000, 0xfffffffffff, 0x1000001000, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 1.255135938s ago: executing program 1 (id=1362): socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) (fail_nth: 7) 530.522021ms ago: executing program 0 (id=1363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xdddd0000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x59}, {0x4, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x6, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000002c0)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 383.733824ms ago: executing program 1 (id=1364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="5e9339e5c42e0006bdf5e3cc9869b8170b0546a851f296f3bcdd81e6788e3592cc6a1855674385e0dc2bcb653f1fbe70c648b9d4354c8705cdd7555a94c115890c4ed22cbcf17ca40d17d73be410054cbe2bc935634f2afe01fb44b22ffe904329e510b006d25661ecd2dd591384d3a78932f35bbccd714074162a39b4470cfe0f906c81ae6c662f006a7346b5b1e42d321201", 0x93}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x8, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x2, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xffffffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0x7, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x6, 0x23, 0x0, 0x401, 0xc, 0x7, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x20002, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0xfffff2e9, 0x2, 0x42d2, 0x6, 0x5678f281, 0xfc, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x2, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0xb, 0x0, 0x9, 0x5, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x4, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xa, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x9, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 240.62593ms ago: executing program 2 (id=1365): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1000080002, 0x100000000000088) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) pipe2$9p(&(0x7f00000001c0), 0x84000) socket$kcm(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r8, 0xc0104d04, 0x200000000005) 46.572528ms ago: executing program 2 (id=1366): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fgetxattr(r5, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000140)=""/77, 0x4d) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000000c0)) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) tee(r6, r1, 0xe, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001ec0), 0x0) socket(0x8, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x0, 0x4, 0xc2, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8000, 0x0, 0x2, 0x6}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b"]) 0s ago: executing program 1 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x0, 0x7, 0x2, {0x2}}, 0x0}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000002280)={0x1c, &(0x7f00000021c0)={0x20, 0x6}, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map, r8, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) kernel console output (not intermixed with test programs): 0x82 has invalid wMaxPacketSize 0 [ 292.971010][ T5970] usb 1-1: config 0 interface 113 has no altsetting 0 [ 292.993655][ T5970] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 292.995306][ T24] usb 4-1: USB disconnect, device number 30 [ 293.003828][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.021058][ T5970] usb 1-1: Product: syz [ 293.030974][ T5970] usb 1-1: Manufacturer: syz [ 293.037896][ T5970] usb 1-1: SerialNumber: syz [ 293.048720][ T5970] usb 1-1: config 0 descriptor?? [ 293.061349][ C0] usb 1-1: NFC: Urb failure (status -71) [ 293.068920][ T5970] usb 1-1: NFC: Unable to get FW version [ 293.081224][ T5970] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 293.124439][ T89] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 293.141190][ T89] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 293.174787][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.217030][ T89] usb 2-1: Product: syz [ 293.225762][ T89] usb 2-1: Manufacturer: syz [ 293.241154][ T89] usb 2-1: SerialNumber: syz [ 293.269582][ T89] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 293.286069][ T89] dvb-usb: bulk message failed: -22 (3/0) [ 293.318410][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.327193][ T30] audit: type=1400 audit(3914648853.310:689): avc: denied { map } for pid=8924 comm="syz.0.802" path="socket:[21244]" dev="sockfs" ino=21244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 293.360745][ T24] usb 1-1: USB disconnect, device number 27 [ 293.401168][ T89] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 293.415769][ T89] usb 2-1: media controller created [ 293.448986][ T89] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.510239][ T89] DVB: Unable to find symbol mt352_attach() [ 293.519088][ T89] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 293.532716][ T89] dvb-usb: bulk message failed: -22 (3/0) [ 293.553337][ T89] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 293.588747][ T89] usb 2-1: USB disconnect, device number 16 [ 293.630509][ T89] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 293.761955][ T8944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 293.768643][ T8944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 293.804219][ T8944] vhci_hcd vhci_hcd.0: Device attached [ 293.855271][ T8933] IPv6: NLM_F_REPLACE set, but no existing node found! [ 293.871910][ T30] audit: type=1400 audit(3914648853.850:690): avc: denied { getopt } for pid=8943 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.895475][ T8945] vhci_hcd: connection closed [ 293.910206][ T12] vhci_hcd vhci_hcd.3: stop threads [ 293.923703][ T12] vhci_hcd vhci_hcd.3: release socket [ 293.929080][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 294.245827][ T8959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.810'. [ 294.306221][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 294.432271][ T12] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 294.455442][ T12] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 294.482451][ T12] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 294.508953][ T30] audit: type=1400 audit(3914648854.500:691): avc: denied { write } for pid=8968 comm="syz.3.815" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 294.537742][ T12] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 295.645918][ T8988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.818'. [ 297.262139][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.825'. [ 297.444948][ T9013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.827'. [ 298.356823][ T9026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.374813][ T9026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.596063][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.832'. [ 298.662868][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.832'. [ 298.929747][ T9041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.837'. [ 299.485203][ T30] audit: type=1400 audit(3914648859.480:692): avc: denied { create } for pid=9049 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 299.546340][ T30] audit: type=1400 audit(3914648859.500:693): avc: denied { sys_admin } for pid=9049 comm="syz.2.838" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 299.573025][ T89] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 299.611728][ T30] audit: type=1400 audit(3914648859.600:694): avc: denied { map } for pid=9053 comm="syz.2.840" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.702495][ T30] audit: type=1400 audit(3914648859.630:695): avc: denied { execute } for pid=9053 comm="syz.2.840" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.718342][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 299.756059][ T89] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 299.767916][ T89] usb 1-1: config 0 has no interface number 0 [ 299.790439][ T89] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 299.820154][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.850537][ T89] usb 1-1: config 0 descriptor?? [ 300.177600][ T89] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 301.436336][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.851'. [ 301.599622][ T30] audit: type=1400 audit(3914648861.590:696): avc: denied { ioctl } for pid=9096 comm="syz.4.854" path="socket:[22663]" dev="sockfs" ino=22663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 301.869562][ T89] usb 1-1: USB disconnect, device number 28 [ 302.274133][ T30] audit: type=1400 audit(3914648862.240:697): avc: denied { execmod } for pid=9100 comm="syz.4.856" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 302.307217][ T30] audit: type=1400 audit(3914648862.240:698): avc: denied { execute } for pid=9100 comm="syz.4.856" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 303.366865][ T9128] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.863'. [ 303.401139][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.535155][ T30] audit: type=1326 audit(3914648863.530:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa98f749 code=0x7ffc0000 [ 303.543313][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.558475][ T30] audit: type=1326 audit(3914648863.530:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fa98f749 code=0x7ffc0000 [ 303.841715][ T30] audit: type=1326 audit(3914648863.590:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.4.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f71fa98f749 code=0x7ffc0000 [ 305.020163][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 305.020178][ T30] audit: type=1400 audit(3914648865.010:770): avc: denied { getopt } for pid=9159 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 305.212999][ T30] audit: type=1400 audit(3914648865.040:771): avc: denied { getopt } for pid=9159 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 305.267198][ T9162] tmpfs: Unknown parameter 'quota$œ²quota_block_hardlimit' [ 305.474892][ T9171] netlink: 44 bytes leftover after parsing attributes in process `syz.2.876'. [ 305.763746][ T30] audit: type=1400 audit(3914648865.760:772): avc: denied { read write } for pid=9157 comm="syz.0.872" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 305.807525][ T30] audit: type=1400 audit(3914648865.760:773): avc: denied { open } for pid=9157 comm="syz.0.872" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 305.843669][ T30] audit: type=1400 audit(3914648865.790:774): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 305.870965][ T30] audit: type=1400 audit(3914648865.800:775): avc: denied { mounton } for pid=9157 comm="syz.0.872" path="/153/file0" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 305.895093][ T30] audit: type=1400 audit(3914648865.810:776): avc: denied { mount } for pid=9157 comm="syz.0.872" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 306.623044][ T30] audit: type=1400 audit(3914648865.920:777): avc: denied { execmem } for pid=9173 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 306.703021][ T30] audit: type=1400 audit(3914648866.510:778): avc: denied { allowed } for pid=9173 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 307.328648][ T30] audit: type=1400 audit(3914648866.510:779): avc: denied { create } for pid=9173 comm="syz.4.877" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 308.133039][ T89] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 308.145412][ T9206] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 308.443940][ T89] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 308.466837][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.512818][ T89] usb 2-1: config 0 has no interface number 0 [ 308.532330][ T89] usb 2-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.569199][ T89] usb 2-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.569321][ T9210] capability: warning: `syz.0.889' uses 32-bit capabilities (legacy support in use) [ 308.604897][ T89] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 308.614873][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.622861][ T89] usb 2-1: Product: syz [ 308.643394][ T89] usb 2-1: Manufacturer: syz [ 308.650036][ T89] usb 2-1: SerialNumber: syz [ 308.651944][ T9213] netlink: 84 bytes leftover after parsing attributes in process `syz.0.889'. [ 308.670938][ T89] usb 2-1: config 0 descriptor?? [ 308.683032][ T9213] nbd: must specify at least one socket [ 308.685093][ T89] asix 2-1:0.251: probe with driver asix failed with error -22 [ 308.697636][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.726994][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.954784][ T89] usb 2-1: USB disconnect, device number 17 [ 310.082626][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 310.082644][ T30] audit: type=1400 audit(3914648869.900:849): avc: denied { create } for pid=9226 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 310.160107][ T30] audit: type=1400 audit(3914648869.910:850): avc: denied { write } for pid=9226 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 310.224568][ T30] audit: type=1400 audit(3914648869.910:851): avc: denied { write } for pid=9226 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 310.310046][ T30] audit: type=1400 audit(3914648869.910:852): avc: denied { nlmsg_write } for pid=9226 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 310.411297][ T30] audit: type=1400 audit(3914648869.910:853): avc: denied { nlmsg_read } for pid=9226 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 310.477571][ T30] audit: type=1400 audit(3914648870.060:854): avc: denied { setopt } for pid=9224 comm="syz.2.891" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.558865][ T30] audit: type=1400 audit(3914648870.060:855): avc: denied { create } for pid=9224 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.582471][ T9229] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 310.588541][ T30] audit: type=1400 audit(3914648870.060:856): avc: denied { setopt } for pid=9224 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.609289][ T30] audit: type=1400 audit(3914648870.260:857): avc: denied { prog_run } for pid=9232 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.857747][ T30] audit: type=1400 audit(3914648870.850:858): avc: denied { ioctl } for pid=9237 comm="syz.2.895" path="socket:[22956]" dev="sockfs" ino=22956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.982460][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.108533][ T9302] netlink: 35 bytes leftover after parsing attributes in process `syz.2.908'. [ 314.683274][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 314.915238][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 315.025757][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.056210][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 121, changing to 10 [ 315.068933][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 33312, setting to 1024 [ 315.132991][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 315.158941][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.203015][ T24] usb 2-1: Product: syz [ 315.214269][ T24] usb 2-1: Manufacturer: syz [ 315.272076][ T24] usb 2-1: SerialNumber: syz [ 315.298881][ T24] usb 2-1: config 0 descriptor?? [ 315.385950][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 315.385967][ T30] audit: type=1400 audit(3914648875.380:896): avc: denied { create } for pid=9329 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 315.490310][ T30] audit: type=1326 audit(3914648875.480:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9334 comm="syz.0.915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb2718f749 code=0x0 [ 315.564775][ T24] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 315.581466][ T30] audit: type=1400 audit(3914648875.570:898): avc: denied { mount } for pid=9339 comm="syz.3.917" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 315.647509][ T9345] macvlan2: entered promiscuous mode [ 315.652827][ T9345] macvlan2: entered allmulticast mode [ 315.659571][ T30] audit: type=1400 audit(3914648875.570:899): avc: denied { search } for pid=9339 comm="syz.3.917" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.036134][ T24] usb 2-1: USB disconnect, device number 18 [ 316.052581][ T30] audit: type=1400 audit(3914648875.570:900): avc: denied { search } for pid=9339 comm="syz.3.917" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.127190][ T30] audit: type=1400 audit(3914648875.570:901): avc: denied { ioctl } for pid=9339 comm="syz.3.917" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 316.161827][ T30] audit: type=1400 audit(3914648875.920:902): avc: denied { append } for pid=9348 comm="syz.3.918" name="v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 316.186538][ T30] audit: type=1400 audit(3914648875.930:903): avc: denied { read append } for pid=9348 comm="syz.3.918" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 316.219710][ T30] audit: type=1400 audit(3914648875.930:904): avc: denied { open } for pid=9348 comm="syz.3.918" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 316.659936][ T9370] comedi comedi2: pcm3724: I/O port conflict (0xcf7,16) [ 316.803056][ T5881] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 317.012919][ T9355] IPv6: NLM_F_REPLACE set, but no existing node found! [ 317.028990][ T30] audit: type=1400 audit(3914648877.020:905): avc: denied { write } for pid=9377 comm="syz.2.923" name="anycast6" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 317.176080][ T5881] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 317.185673][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.205447][ T5881] usb 1-1: Product: syz [ 317.214828][ T5881] usb 1-1: Manufacturer: syz [ 317.229847][ T5881] usb 1-1: SerialNumber: syz [ 317.250056][ T5881] usb 1-1: config 0 descriptor?? [ 317.257300][ T9386] binder: 9385:9386 ioctl c0306201 0 returned -14 [ 317.270200][ T5881] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 317.296055][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.316604][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.150186][ T9420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 319.483044][ T89] usb 1-1: USB disconnect, device number 29 [ 320.043953][ T9439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 320.622402][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 320.663328][ T89] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 320.704919][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 320.704963][ T30] audit: type=1400 audit(3914648880.350:925): avc: denied { connect } for pid=9441 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.273830][ T30] audit: type=1400 audit(3914648880.410:926): avc: denied { write } for pid=9441 comm="syz.3.935" lport=40268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.314210][ T89] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 321.322298][ T89] usb 2-1: config 0 has no interface number 0 [ 321.356630][ T89] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 321.438878][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.452343][ T89] usb 2-1: Product: syz [ 321.457796][ T89] usb 2-1: Manufacturer: syz [ 321.462492][ T89] usb 2-1: SerialNumber: syz [ 321.474518][ T89] usb 2-1: config 0 descriptor?? [ 321.490699][ T89] usb-storage 2-1:0.20: USB Mass Storage device detected [ 321.515089][ T89] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 321.753020][ T5811] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 321.762999][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 321.872209][ T9445] syzkaller0: entered promiscuous mode [ 321.877824][ T9445] syzkaller0: entered allmulticast mode [ 321.947790][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.972222][ T5811] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.985131][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.998400][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.011536][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.024695][ T5811] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 322.033942][ T5811] usb 1-1: config 1 has no interface number 1 [ 322.040142][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.049244][ T5811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 322.062784][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.063803][ T89] usb 2-1: USB disconnect, device number 19 [ 322.071643][ T5811] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.093075][ T24] usb 4-1: config 0 descriptor?? [ 322.112905][ T5811] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.122114][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.130277][ T5811] usb 1-1: Product: syz [ 322.134518][ T5811] usb 1-1: Manufacturer: syz [ 322.139662][ T5811] usb 1-1: SerialNumber: syz [ 322.368730][ T30] audit: type=1400 audit(3914648882.360:927): avc: denied { bind } for pid=9454 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.399632][ T30] audit: type=1400 audit(3914648882.360:928): avc: denied { listen } for pid=9454 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.474263][ T30] audit: type=1400 audit(3914648882.420:929): avc: denied { accept } for pid=9454 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.522523][ T24] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 322.815324][ T30] audit: type=1400 audit(3914648882.810:930): avc: denied { create } for pid=9456 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 322.903663][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.918839][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.419323][ T24] usb 4-1: USB disconnect, device number 31 [ 324.546779][ T5811] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 324.573050][ T5811] usb 1-1: MIDIStreaming interface descriptor not found [ 324.643450][ T5811] usb 1-1: USB disconnect, device number 30 [ 324.692690][ T30] audit: type=1400 audit(3914648884.680:931): avc: denied { setopt } for pid=9504 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 324.741283][ T6685] udevd[6685]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.428782][ T5826] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 326.438335][ T30] audit: type=1400 audit(3914648886.420:932): avc: denied { firmware_load } for pid=9523 comm="syz.3.958" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 326.503547][ T9526] FAULT_INJECTION: forcing a failure. [ 326.503547][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.516689][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.2.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.516715][ T9526] Tainted: [L]=SOFTLOCKUP [ 326.516721][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.516731][ T9526] Call Trace: [ 326.516739][ T9526] [ 326.516747][ T9526] dump_stack_lvl+0x16c/0x1f0 [ 326.516773][ T9526] should_fail_ex+0x512/0x640 [ 326.516803][ T9526] _copy_to_user+0x32/0xd0 [ 326.516831][ T9526] simple_read_from_buffer+0xcb/0x170 [ 326.516856][ T9526] proc_fail_nth_read+0x197/0x240 [ 326.516875][ T9526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.516894][ T9526] ? rw_verify_area+0xcf/0x6c0 [ 326.516913][ T9526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.516930][ T9526] vfs_read+0x1e4/0xcf0 [ 326.516952][ T9526] ? __pfx___mutex_lock+0x10/0x10 [ 326.516973][ T9526] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 326.516997][ T9526] ? __pfx_vfs_read+0x10/0x10 [ 326.517021][ T9526] ? __rcu_read_unlock+0x2b5/0x5a0 [ 326.517049][ T9526] ? __fget_files+0x20e/0x3c0 [ 326.517071][ T9526] ? lockdep_hardirqs_on+0x10/0x110 [ 326.517098][ T9526] ksys_read+0x12a/0x250 [ 326.517118][ T9526] ? __pfx_ksys_read+0x10/0x10 [ 326.517140][ T9526] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 326.517164][ T9526] do_syscall_64+0xcd/0xf80 [ 326.517187][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.517204][ T9526] RIP: 0033:0x7ff44438e15c [ 326.517217][ T9526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.517232][ T9526] RSP: 002b:00007ff445183030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.517248][ T9526] RAX: ffffffffffffffda RBX: 00007ff4445e6180 RCX: 00007ff44438e15c [ 326.517259][ T9526] RDX: 000000000000000f RSI: 00007ff4451830a0 RDI: 000000000000000a [ 326.517269][ T9526] RBP: 00007ff445183090 R08: 0000000000000000 R09: 0000000000000000 [ 326.517279][ T9526] R10: 0000000000200401 R11: 0000000000000246 R12: 0000000000000001 [ 326.517289][ T9526] R13: 00007ff4445e6218 R14: 00007ff4445e6180 R15: 00007fffb27055c8 [ 326.517313][ T9526] [ 326.724953][ T9524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9524 comm=syz.2.957 [ 326.781153][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 326.802810][ T9527] xfrm1: entered promiscuous mode [ 326.807988][ T9527] xfrm1: entered allmulticast mode [ 326.846155][ T30] audit: type=1400 audit(3914648886.840:933): avc: denied { setopt } for pid=9523 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.396069][ T30] audit: type=1400 audit(3914648888.390:934): avc: denied { getopt } for pid=9547 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.487643][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.966'. [ 329.382450][ T9549] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 329.453787][ T30] audit: type=1400 audit(3914648889.450:935): avc: denied { read write } for pid=9554 comm="syz.1.967" name="vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 329.540423][ T30] audit: type=1400 audit(3914648889.470:936): avc: denied { open } for pid=9554 comm="syz.1.967" path="/dev/vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 329.623033][ T30] audit: type=1400 audit(3914648889.480:937): avc: denied { read write } for pid=9543 comm="syz.2.964" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.673202][ T30] audit: type=1400 audit(3914648889.480:938): avc: denied { open } for pid=9543 comm="syz.2.964" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.753265][ T30] audit: type=1400 audit(3914648889.480:939): avc: denied { ioctl } for pid=9543 comm="syz.2.964" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.844415][ T30] audit: type=1400 audit(3914648889.600:940): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.883425][ T9563] xt_limit: Overflow, try lower: 167772/2147483648 [ 330.234298][ T30] audit: type=1400 audit(3914648889.600:941): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.516813][ T5970] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 330.552171][ T9582] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.968'. [ 330.576571][ T5970] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.833298][ T9587] overlay: Unknown parameter 'fsname' [ 330.942995][ T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 331.106984][ T24] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 331.135922][ T24] usb 2-1: config 0 has no interface number 0 [ 331.166599][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 331.191993][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.208898][ T24] usb 2-1: Product: syz [ 331.219759][ T24] usb 2-1: Manufacturer: syz [ 331.229091][ T24] usb 2-1: SerialNumber: syz [ 331.255748][ T24] usb 2-1: config 0 descriptor?? [ 331.298037][ T9592] netlink: 'syz.4.978': attribute type 4 has an invalid length. [ 331.454551][ T9598] netlink: 44 bytes leftover after parsing attributes in process `syz.0.979'. [ 331.578892][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 331.580009][ T30] audit: type=1400 audit(3914648891.320:1000): avc: denied { read } for pid=9595 comm="syz.0.979" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 331.671380][ T30] audit: type=1400 audit(3914648891.320:1001): avc: denied { open } for pid=9595 comm="syz.0.979" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 331.700822][ T30] audit: type=1400 audit(3914648891.440:1002): avc: denied { ioctl } for pid=9595 comm="syz.0.979" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.766614][ T30] audit: type=1400 audit(3914648891.540:1003): avc: denied { setattr } for pid=9591 comm="syz.4.978" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.869042][ T30] audit: type=1400 audit(3914648891.860:1004): avc: denied { ioctl } for pid=9584 comm="syz.1.975" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.894070][ T24] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 331.911089][ T24] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 331.925752][ T24] asix 2-1:0.251: probe with driver asix failed with error -5 [ 331.982414][ T30] audit: type=1400 audit(3914648891.920:1005): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.134276][ T30] audit: type=1400 audit(3914648891.920:1006): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.162667][ T30] audit: type=1400 audit(3914648891.920:1007): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.383095][ T9612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.983'. [ 332.648591][ T30] audit: type=1400 audit(3914648891.930:1008): avc: denied { name_bind } for pid=9604 comm="syz.4.982" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 332.674401][ T30] audit: type=1400 audit(3914648891.930:1009): avc: denied { node_bind } for pid=9604 comm="syz.4.982" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 333.077890][ T9618] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 333.164063][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 333.546838][ T9622] hfsplus: unable to find HFS+ superblock [ 333.733011][ T89] usb 2-1: USB disconnect, device number 20 [ 333.833036][ T5970] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 333.993876][ T5970] usb 1-1: device descriptor read/64, error -71 [ 334.219988][ T9634] bridge0: port 3(dummy0) entered disabled state [ 334.226448][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.233857][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.250067][ T5970] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 334.274240][ T9634] bridge0: entered allmulticast mode [ 334.290715][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.312273][ T9628] 9p: Bad value for 'wfdno' [ 334.374286][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.403016][ T5970] usb 1-1: device descriptor read/64, error -71 [ 334.523297][ T5970] usb usb1-port1: attempt power cycle [ 334.863064][ T5970] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 334.885237][ T5970] usb 1-1: device descriptor read/8, error -71 [ 334.930305][ T9640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.967506][ T9640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.123001][ T5970] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 335.143624][ T5970] usb 1-1: device descriptor read/8, error -71 [ 335.249713][ T9642] batman_adv: batadv0: Adding interface: ipvlan2 [ 335.256182][ T9642] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.282073][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.292788][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.302636][ T9642] batman_adv: batadv0: Interface activated: ipvlan2 [ 335.468048][ T5970] usb usb1-port1: unable to enumerate USB device [ 335.610016][ T9647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.993'. [ 337.073189][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 337.073201][ T30] audit: type=1400 audit(3914648897.070:1093): avc: denied { read } for pid=9664 comm="syz.3.998" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.160086][ T30] audit: type=1400 audit(3914648897.100:1094): avc: denied { open } for pid=9664 comm="syz.3.998" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.198811][ T30] audit: type=1400 audit(3914648897.100:1095): avc: denied { ioctl } for pid=9664 comm="syz.3.998" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 337.228385][ T30] audit: type=1400 audit(3914648897.100:1096): avc: denied { read } for pid=9668 comm="syz.1.999" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 337.251404][ T30] audit: type=1400 audit(3914648897.100:1097): avc: denied { open } for pid=9668 comm="syz.1.999" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 337.281217][ T30] audit: type=1400 audit(3914648897.100:1098): avc: denied { create } for pid=9668 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 337.351449][ T30] audit: type=1400 audit(3914648897.100:1099): avc: denied { create } for pid=9668 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 337.389981][ T30] audit: type=1400 audit(3914648897.130:1100): avc: denied { sys_admin } for pid=9668 comm="syz.1.999" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 337.433277][ T5977] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 337.455331][ T30] audit: type=1400 audit(3914648897.140:1101): avc: denied { create } for pid=9668 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.500785][ T30] audit: type=1400 audit(3914648897.140:1102): avc: denied { bind } for pid=9668 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.594516][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 337.605550][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 337.625297][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 337.650379][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 337.657655][ T9677] mmap: syz.0.1003 (9677): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 337.686101][ T5977] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 337.696610][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.709909][ T5977] usb 2-1: Product: syz [ 337.714557][ T5977] usb 2-1: Manufacturer: syz [ 337.719293][ T5977] usb 2-1: SerialNumber: syz [ 337.728583][ T5977] usb 2-1: config 0 descriptor?? [ 338.122676][ T5977] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 338.420746][ T5977] usb 2-1: USB disconnect, device number 21 [ 338.634231][ T9690] syzkaller0: entered promiscuous mode [ 338.733082][ T9690] syzkaller0: entered allmulticast mode [ 339.943562][ T5977] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 340.081912][ T9717] netlink: 'syz.1.1014': attribute type 4 has an invalid length. [ 340.114372][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.124316][ T5977] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 340.134469][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.146484][ T5977] usb 4-1: config 0 descriptor?? [ 340.181241][ T9721] netlink: 'syz.1.1014': attribute type 4 has an invalid length. [ 340.372777][ T5977] usbhid 4-1:0.0: can't add hid device: -71 [ 340.450844][ T5977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.484942][ T5977] usb 4-1: USB disconnect, device number 32 [ 340.538763][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 340.712983][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 340.719817][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 340.728346][ T24] usb 1-1: config 0 has no interface number 0 [ 340.738554][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 340.779987][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.841905][ T24] usb 1-1: Product: syz [ 340.925877][ T24] usb 1-1: Manufacturer: syz [ 340.942231][ T24] usb 1-1: SerialNumber: syz [ 340.956206][ T24] usb 1-1: config 0 descriptor?? [ 340.978982][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 341.119758][ T9731] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1018'. [ 342.256835][ T24] usb 1-1: qt2_attach - failed to power on unit: -71 [ 342.273853][ T24] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 342.313236][ T24] usb 1-1: USB disconnect, device number 35 [ 342.321539][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 342.321551][ T30] audit: type=1400 audit(3914648901.180:1188): avc: denied { write } for pid=9729 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.491657][ T30] audit: type=1400 audit(3914648902.480:1189): avc: denied { getopt } for pid=9740 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.724483][ T30] audit: type=1400 audit(3914648902.720:1190): avc: denied { read write } for pid=9740 comm="syz.1.1020" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 342.811194][ T30] audit: type=1400 audit(3914648902.720:1191): avc: denied { open } for pid=9740 comm="syz.1.1020" path="/dev/video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 342.929452][ T30] audit: type=1400 audit(3914648902.760:1192): avc: denied { perfmon } for pid=9740 comm="syz.1.1020" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 343.261240][ T30] audit: type=1400 audit(3914648902.920:1193): avc: denied { create } for pid=9745 comm="syz.3.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 343.337226][ T30] audit: type=1400 audit(3914648902.950:1194): avc: denied { read } for pid=9745 comm="syz.3.1023" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.392995][ T30] audit: type=1400 audit(3914648902.950:1195): avc: denied { open } for pid=9745 comm="syz.3.1023" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.471113][ T30] audit: type=1400 audit(3914648902.950:1196): avc: denied { ioctl } for pid=9745 comm="syz.3.1023" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.833192][ T30] audit: type=1400 audit(3914648902.960:1197): avc: denied { read } for pid=9745 comm="syz.3.1023" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 343.959877][ T9768] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1028'. [ 345.583056][ T5970] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 345.743132][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 345.783468][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 345.802043][ T5970] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 345.823182][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.903740][ T5970] usb 4-1: config 0 descriptor?? [ 346.649869][ T9783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1032'. [ 347.051471][ T5970] usbhid 4-1:0.0: can't add hid device: -71 [ 347.168954][ T5970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.196728][ T5970] usb 4-1: USB disconnect, device number 33 [ 347.316894][ T9810] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1038'. [ 347.387238][ T9810] unsupported nlmsg_type 40 [ 347.411645][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 347.411661][ T30] audit: type=1400 audit(3914648907.400:1257): avc: denied { create } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.507911][ T30] audit: type=1400 audit(3914648907.430:1258): avc: denied { bind } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.610327][ T30] audit: type=1400 audit(3914648907.440:1259): avc: denied { create } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.654285][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1041'. [ 347.681866][ T30] audit: type=1400 audit(3914648907.440:1260): avc: denied { getopt } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.788333][ T30] audit: type=1400 audit(3914648907.440:1261): avc: denied { listen } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.995732][ T30] audit: type=1400 audit(3914648907.440:1262): avc: denied { connect } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.017662][ T30] audit: type=1400 audit(3914648907.440:1263): avc: denied { setopt } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.038808][ T30] audit: type=1400 audit(3914648907.440:1264): avc: denied { bind } for pid=9809 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 348.345778][ T30] audit: type=1400 audit(3914648907.440:1265): avc: denied { name_bind } for pid=9809 comm="syz.0.1038" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 348.443287][ T30] audit: type=1400 audit(3914648907.440:1266): avc: denied { node_bind } for pid=9809 comm="syz.0.1038" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 348.529396][ T9833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 349.268039][ T9846] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1051'. [ 349.711691][ T9818] syz.0.1042 (9818): drop_caches: 2 [ 349.747482][ T9849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 349.754020][ T9849] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.781795][ T9849] vhci_hcd vhci_hcd.0: Device attached [ 349.799629][ T9856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.854518][ T9856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.528291][ T89] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 350.556816][ T9849] ipt_REJECT: TCP_RESET invalid for non-tcp [ 350.565070][ T9852] vhci_hcd: connection reset by peer [ 350.572519][ T6032] vhci_hcd vhci_hcd.2: stop threads [ 350.602326][ T6032] vhci_hcd vhci_hcd.2: release socket [ 350.612781][ T6032] vhci_hcd vhci_hcd.2: disconnect device [ 351.507070][ T9883] set match dimension is over the limit! [ 352.117059][ T9875] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1060'. [ 352.440208][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 352.440224][ T30] audit: type=1400 audit(3914648912.430:1298): avc: denied { create } for pid=9899 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.467518][ T9901] FAULT_INJECTION: forcing a failure. [ 352.467518][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 352.520178][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.2.1065 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.520274][ T9901] Tainted: [L]=SOFTLOCKUP [ 352.520280][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.520289][ T9901] Call Trace: [ 352.520295][ T9901] [ 352.520302][ T9901] dump_stack_lvl+0x16c/0x1f0 [ 352.520328][ T9901] should_fail_ex+0x512/0x640 [ 352.520353][ T9901] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 352.520373][ T9901] should_failslab+0xc2/0x120 [ 352.520396][ T9901] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 352.520414][ T9901] ? __d_alloc+0x35/0xa80 [ 352.520434][ T9901] ? __d_alloc+0x35/0xa80 [ 352.520446][ T9901] __d_alloc+0x35/0xa80 [ 352.520463][ T9901] d_alloc_pseudo+0x1c/0xc0 [ 352.520483][ T9901] alloc_file_pseudo+0xcf/0x230 [ 352.520501][ T9901] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 352.520518][ T9901] ? _raw_spin_unlock+0x28/0x50 [ 352.520536][ T9901] ? alloc_fd+0x471/0x7d0 [ 352.520561][ T9901] __anon_inode_getfile+0xe8/0x280 [ 352.520582][ T9901] __anon_inode_getfd+0x5c/0x160 [ 352.520602][ T9901] __x64_sys_fsopen+0x18b/0x240 [ 352.520623][ T9901] do_syscall_64+0xcd/0xf80 [ 352.520647][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.520664][ T9901] RIP: 0033:0x7ff44438f749 [ 352.520685][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.520701][ T9901] RSP: 002b:00007ff4451c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 352.520717][ T9901] RAX: ffffffffffffffda RBX: 00007ff4445e5fa0 RCX: 00007ff44438f749 [ 352.520727][ T9901] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 352.520737][ T9901] RBP: 00007ff4451c5090 R08: 0000000000000000 R09: 0000000000000000 [ 352.520746][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.520756][ T9901] R13: 00007ff4445e6038 R14: 00007ff4445e5fa0 R15: 00007fffb27055c8 [ 352.520780][ T9901] [ 352.773539][ T30] audit: type=1400 audit(3914648912.440:1299): avc: denied { name_connect } for pid=9896 comm="syz.0.1067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 352.941990][ T30] audit: type=1400 audit(3914648912.440:1300): avc: denied { listen } for pid=9896 comm="syz.0.1067" lport=51945 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.028572][ T9909] fuse: Unknown parameter '184467440737095516150x0000000000000006' [ 353.439711][ T30] audit: type=1400 audit(3914648912.440:1301): avc: denied { accept } for pid=9896 comm="syz.0.1067" lport=51945 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.551869][ T30] audit: type=1400 audit(3914648912.440:1302): avc: denied { ioctl } for pid=9896 comm="syz.0.1067" path="socket:[25450]" dev="sockfs" ino=25450 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 353.709415][ T30] audit: type=1400 audit(3914648912.480:1303): avc: denied { execute } for pid=9893 comm="syz.4.1066" name="file1" dev="tmpfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 353.732622][ T30] audit: type=1400 audit(3914648913.040:1304): avc: denied { bind } for pid=9906 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 353.762626][ T30] audit: type=1400 audit(3914648913.460:1305): avc: denied { read write } for pid=9911 comm="syz.0.1073" name="vbi0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 354.023176][ T30] audit: type=1400 audit(3914648913.460:1306): avc: denied { open } for pid=9911 comm="syz.0.1073" path="/dev/vbi0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 354.162981][ T30] audit: type=1400 audit(3914648913.470:1307): avc: denied { ioctl } for pid=9911 comm="syz.0.1073" path="/dev/vbi0" dev="devtmpfs" ino=954 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 354.423034][ T5868] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 355.464553][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 355.500512][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 355.523540][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 355.552082][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 355.699930][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 355.780740][ T89] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 355.788873][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.804260][ T5868] usb 2-1: config 0 descriptor?? [ 356.027425][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 356.176434][ T5868] hdpvr 2-1:0.0: firmware version 0xfb dated ûZáöźQ‹r$¢ÿñAàá l¸$°°:-5ƒië¯2ÅÕÎ$ŸÓF@ [ 356.196368][ T5868] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 356.555393][ T9925] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 356.636842][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1076'. [ 357.741614][ T5868] hdpvr 2-1:0.0: Could not setup controls [ 357.748284][ T5868] hdpvr 2-1:0.0: registering videodev failed [ 357.768999][ T5868] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 357.779220][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 357.779230][ T30] audit: type=1400 audit(3914648917.770:1321): avc: denied { open } for pid=9971 comm="syz.2.1088" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 357.820782][ T5868] usb 2-1: USB disconnect, device number 22 [ 357.830775][ T30] audit: type=1400 audit(3914648917.800:1322): avc: denied { ioctl } for pid=9971 comm="syz.2.1088" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 357.876470][ T30] audit: type=1400 audit(3914648917.810:1323): avc: denied { ioctl } for pid=9971 comm="syz.2.1088" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 357.923521][ T30] audit: type=1400 audit(3914648917.810:1324): avc: denied { create } for pid=9971 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 358.465148][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 358.485038][ T30] audit: type=1400 audit(3914648918.480:1325): avc: denied { create } for pid=9977 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.570005][ T30] audit: type=1400 audit(3914648918.480:1326): avc: denied { connect } for pid=9977 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.923881][ T30] audit: type=1400 audit(3914648918.480:1327): avc: denied { ioctl } for pid=9977 comm="syz.3.1090" path="socket:[25566]" dev="sockfs" ino=25566 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.979790][ T30] audit: type=1400 audit(3914648918.970:1328): avc: denied { ioctl } for pid=9988 comm="syz.1.1095" path="socket:[26685]" dev="sockfs" ino=26685 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 359.074447][ T5868] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 359.253310][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 359.264570][ T5868] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 359.286461][ T5868] usb 4-1: config 0 has no interface number 0 [ 359.305663][ T5868] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 359.329297][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.352045][ T5868] usb 4-1: Product: syz [ 359.362176][ T5868] usb 4-1: Manufacturer: syz [ 359.374107][ T5868] usb 4-1: SerialNumber: syz [ 359.388710][ T5868] usb 4-1: config 0 descriptor?? [ 359.506434][ T5868] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 359.640339][ T9995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 359.705473][ T30] audit: type=1400 audit(3914648919.700:1329): avc: denied { execute_no_trans } for pid=10002 comm="syz.2.1099" path="/218/file2" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 359.736744][T10001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10001 comm=syz.0.1098 [ 360.688856][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 360.730421][ T30] audit: type=1400 audit(3914648920.210:1330): avc: denied { create } for pid=9983 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 360.750703][ T5868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 360.817133][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.848588][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 360.864511][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.953835][T10001] netem: invalid attributes len -24 [ 360.959086][T10001] netem: change failed [ 360.968735][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 360.977330][T10007] wg1: entered promiscuous mode [ 360.982789][T10007] wg1: entered allmulticast mode [ 360.998348][ T5940] usb 4-1: USB disconnect, device number 34 [ 361.106881][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 361.151688][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 361.270688][ T5940] quatech2 4-1:0.51: device disconnected [ 362.330021][T10036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.392645][T10036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.602872][T10049] fuse: Unknown parameter 'group_i00000000000000000000' [ 362.851387][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 362.851402][ T30] audit: type=1400 audit(3914648922.840:1346): avc: denied { read write } for pid=10060 comm="syz.3.1119" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 362.899945][ T30] audit: type=1400 audit(3914648922.880:1347): avc: denied { open } for pid=10060 comm="syz.3.1119" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 362.968162][ T30] audit: type=1400 audit(3914648922.960:1348): avc: denied { create } for pid=10067 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.012129][ T30] audit: type=1400 audit(3914648923.000:1349): avc: denied { name_bind } for pid=10067 comm="syz.3.1121" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 363.051891][ T30] audit: type=1400 audit(3914648923.040:1350): avc: denied { kexec_image_load } for pid=10069 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 363.094966][ T5940] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 363.110883][ T30] audit: type=1400 audit(3914648923.100:1351): avc: denied { getopt } for pid=10067 comm="syz.3.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.196931][ T30] audit: type=1400 audit(3914648923.190:1352): avc: denied { create } for pid=10077 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 363.238821][T10081] fuse: Unknown parameter 'group_i00000000000000000000' [ 363.287524][T10085] ip6gre0: entered promiscuous mode [ 363.294552][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 363.314559][ T5940] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 363.321850][T10088] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 363.342056][ T5940] usb 2-1: config 0 has no interface number 0 [ 363.353997][ T89] IPVS: starting estimator thread 0... [ 363.381849][ T5940] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 363.391046][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.413037][ T5940] usb 2-1: Product: syz [ 363.423925][ T5940] usb 2-1: Manufacturer: syz [ 363.435476][ T5940] usb 2-1: SerialNumber: syz [ 363.444297][T10090] IPVS: using max 79 ests per chain, 189600 per kthread [ 363.493143][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 363.493528][ T5940] usb 2-1: config 0 descriptor?? [ 363.543669][ T5940] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 363.674796][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 363.685918][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.697803][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 121, changing to 10 [ 363.736986][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 33312, setting to 1024 [ 363.789443][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 363.801878][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.925743][ T24] usb 4-1: Product: syz [ 363.929920][ T24] usb 4-1: Manufacturer: syz [ 363.950507][ T24] usb 4-1: SerialNumber: syz [ 364.703949][ T24] usb 4-1: config 0 descriptor?? [ 364.710055][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 364.737343][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 364.778895][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 364.796255][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1129'. [ 364.913903][ T24] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 364.982371][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 364.990847][ T5970] usb 2-1: USB disconnect, device number 23 [ 364.999785][ T5970] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 365.025472][ T5970] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 365.489311][ T5970] quatech2 2-1:0.51: device disconnected [ 365.506170][ T5940] usb 4-1: USB disconnect, device number 35 [ 365.569574][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 365.886674][ T30] audit: type=1400 audit(3914648925.880:1353): avc: denied { read } for pid=10107 comm="syz.2.1134" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.918365][ T30] audit: type=1400 audit(3914648925.900:1354): avc: denied { open } for pid=10107 comm="syz.2.1134" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 366.767514][ T30] audit: type=1400 audit(3914648925.910:1355): avc: denied { ioctl } for pid=10107 comm="syz.2.1134" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.671484][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 367.695137][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1141'. [ 367.748727][T10136] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 367.856831][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 367.858772][T10137] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 367.859698][T10136] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.879453][ T30] audit: type=1400 audit(3914648927.850:1363): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 367.977697][T10136] .`: (slave team0): Enslaving as an active interface with an up link [ 368.018648][T10137] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 368.044108][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.067451][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.076438][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.102355][ T30] audit: type=1400 audit(3914648928.090:1364): avc: denied { create } for pid=10127 comm="syz.0.1140" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.137183][T10136] overlayfs: upper fs does not support file handles, falling back to index=off. [ 368.153753][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.203225][ T30] audit: type=1400 audit(3914648928.190:1365): avc: denied { setattr } for pid=10127 comm="syz.0.1140" name="file1" dev="overlay" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.226193][T10136] evm: overlay not supported [ 370.161581][T10167] hub 5-0:1.0: USB hub found [ 370.167275][T10167] hub 5-0:1.0: 1 port detected [ 370.569040][ T30] audit: type=1400 audit(3914648930.140:1366): avc: denied { write } for pid=10157 comm="syz.0.1148" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 370.818164][ T30] audit: type=1400 audit(3914648930.810:1367): avc: denied { getopt } for pid=10174 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.048903][T10178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1151'. [ 371.278556][ T30] audit: type=1400 audit(3914648931.260:1368): avc: denied { execmem } for pid=10171 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 371.382231][ T30] audit: type=1400 audit(3914648931.370:1369): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.652783][ T30] audit: type=1400 audit(3914648931.410:1370): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.343002][ T30] audit: type=1400 audit(3914648931.410:1371): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.421810][ T30] audit: type=1400 audit(3914648931.440:1372): avc: denied { read } for pid=10182 comm="syz.2.1152" dev="nsfs" ino=4026532822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 372.600106][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 372.716053][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 372.816466][T10195] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 373.150570][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 373.150582][ T30] audit: type=1400 audit(3914648933.140:1399): avc: denied { write } for pid=10199 comm="syz.2.1158" name="v4l-subdev3" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.190163][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.209081][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.232997][ T30] audit: type=1400 audit(3914648933.170:1400): avc: denied { open } for pid=10199 comm="syz.2.1158" path="/dev/v4l-subdev3" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.274504][ T30] audit: type=1400 audit(3914648933.180:1401): avc: denied { allowed } for pid=10199 comm="syz.2.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.319228][ T30] audit: type=1400 audit(3914648933.180:1402): avc: denied { read } for pid=10199 comm="syz.2.1158" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.387581][T10198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.394891][T10198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.667731][ T30] audit: type=1400 audit(3914648933.180:1403): avc: denied { ioctl } for pid=10199 comm="syz.2.1158" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.122755][T10198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.146267][T10198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.154116][T10198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 374.155313][ T30] audit: type=1400 audit(3914648933.190:1404): avc: denied { read append } for pid=10197 comm="syz.3.1157" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 374.187351][ T30] audit: type=1400 audit(3914648933.190:1405): avc: denied { open } for pid=10197 comm="syz.3.1157" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 374.216494][ T30] audit: type=1400 audit(3914648933.660:1406): avc: denied { watch } for pid=10203 comm="syz.4.1159" path="/293/file0" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 374.239656][ T30] audit: type=1400 audit(3914648933.660:1407): avc: denied { watch_sb watch_reads } for pid=10203 comm="syz.4.1159" path="/293/file0" dev="tmpfs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.297658][T10214] x_tables: ip_tables: osf match: only valid for protocol 6 [ 374.306861][ T30] audit: type=1400 audit(3914648933.710:1408): avc: denied { create } for pid=10197 comm="syz.3.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.423048][ T5868] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 374.605330][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.623539][ T5868] usb 4-1: not running at top speed; connect to a high speed hub [ 374.636357][ T5868] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 374.660270][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.730851][ T5868] usb 4-1: config 1 has no interface number 0 [ 374.743952][ T5868] usb 4-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 374.760739][ T5868] usb 4-1: config 1 interface 138 has no altsetting 0 [ 374.790016][ T5868] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 374.821710][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.849357][ T5868] usb 4-1: Product: syz [ 374.863095][ T5868] usb 4-1: Manufacturer: syz [ 374.876457][ T5868] usb 4-1: SerialNumber: syz [ 375.083895][T10223] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1164'. [ 375.342026][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.803747][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 376.060829][T10231] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10231 comm=syz.2.1165 [ 376.174397][ T5813] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.180511][ T5138] Bluetooth: hci3: command 0x0c1a tx timeout [ 376.186920][ T5826] Bluetooth: hci4: command 0x0401 tx timeout [ 376.396995][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.464729][ T5868] usb 4-1: USB disconnect, device number 36 [ 377.603075][ T5895] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 377.792887][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 377.802682][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 377.899288][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 378.029544][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 378.070580][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 378.100747][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.143366][ T5895] usb 1-1: config 0 descriptor?? [ 378.156380][T10260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.180268][T10260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.205942][T10260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.242398][T10260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.373205][ T5895] hdpvr 1-1:0.0: firmware version 0xfb dated ûZáöźQ‹r$¢ÿñAàá l¸$°°:-5ƒië¯2ÅÕÎ$ŸÓF@ [ 378.402971][ T5895] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 378.450213][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 378.450226][ T30] audit: type=1400 audit(3914648938.440:1487): avc: denied { create } for pid=10263 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 378.503005][ T30] audit: type=1400 audit(3914648938.480:1488): avc: denied { read } for pid=10263 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.523573][ T30] audit: type=1400 audit(3914648938.490:1489): avc: denied { ioctl } for pid=10263 comm="syz.1.1173" path="socket:[27362]" dev="sockfs" ino=27362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 378.603988][ T30] audit: type=1400 audit(3914648938.570:1490): avc: denied { create } for pid=10261 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.693223][ T30] audit: type=1400 audit(3914648938.650:1491): avc: denied { read } for pid=10263 comm="syz.1.1173" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.716716][ T30] audit: type=1400 audit(3914648938.650:1492): avc: denied { open } for pid=10263 comm="syz.1.1173" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.747243][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.756576][ T30] audit: type=1400 audit(3914648938.650:1493): avc: denied { ioctl } for pid=10263 comm="syz.1.1173" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 378.831177][ T30] audit: type=1400 audit(3914648938.820:1494): avc: denied { name_bind } for pid=10249 comm="syz.0.1171" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 378.894436][T10272] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 378.923099][T10272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1171'. [ 378.954598][ T30] audit: type=1400 audit(3914648938.820:1495): avc: denied { node_bind } for pid=10249 comm="syz.0.1171" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 379.438515][T10280] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1176'. [ 379.502547][ T30] audit: type=1400 audit(3914648939.450:1496): avc: denied { read } for pid=10271 comm="syz.3.1176" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 380.647315][ T5895] hdpvr 1-1:0.0: Could not setup controls [ 380.820229][ T5895] hdpvr 1-1:0.0: registering videodev failed [ 380.889500][ T5895] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 381.021224][ T5895] usb 1-1: USB disconnect, device number 36 [ 381.673810][T10311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 382.191707][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 383.913488][T10338] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.057487][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 384.057519][ T30] audit: type=1400 audit(3914648943.920:1520): avc: denied { mounton } for pid=10323 comm="syz.3.1187" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 384.184256][T10338] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 384.748520][T10345] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 385.105976][ T30] audit: type=1400 audit(3914648945.774:1521): avc: denied { ioctl } for pid=10342 comm="syz.3.1190" path="socket:[27560]" dev="sockfs" ino=27560 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.078594][T10358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 386.984319][ T30] audit: type=1400 audit(3914648947.324:1522): avc: denied { write } for pid=10354 comm="syz.2.1194" name="kcm" dev="proc" ino=4026533024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 387.034686][ T30] audit: type=1400 audit(3914648947.344:1523): avc: denied { bind } for pid=10354 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.055512][ T30] audit: type=1400 audit(3914648947.344:1524): avc: denied { setopt } for pid=10354 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 387.129714][ T30] audit: type=1400 audit(3914648948.054:1525): avc: denied { connect } for pid=10364 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.149961][ T30] audit: type=1400 audit(3914648948.054:1526): avc: denied { open } for pid=10364 comm="syz.3.1195" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 387.257714][ T30] audit: type=1400 audit(3914648948.254:1527): avc: denied { create } for pid=10366 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.294117][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 387.348906][ T30] audit: type=1400 audit(3914648948.264:1528): avc: denied { connect } for pid=10366 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.369303][ T30] audit: type=1400 audit(3914648948.264:1529): avc: denied { write } for pid=10366 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.672317][T10381] sctp: [Deprecated]: syz.3.1201 (pid 10381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.672317][T10381] Use struct sctp_sack_info instead [ 388.683232][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 388.823649][ T5868] usb 4-1: device descriptor read/64, error -71 [ 389.040341][T10389] IPv6: NLM_F_REPLACE set, but no existing node found! [ 389.083150][ T5868] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 389.223722][ T5868] usb 4-1: device descriptor read/64, error -71 [ 389.354953][ T5868] usb usb4-port1: attempt power cycle [ 389.401447][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 389.401462][ T30] audit: type=1400 audit(3914648950.394:1550): avc: denied { create } for pid=10405 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 389.715469][T10418] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 389.773431][ T5868] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 389.943577][ T5868] usb 4-1: device descriptor read/8, error -71 [ 390.071590][ T30] audit: type=1400 audit(3914648951.064:1551): avc: denied { ioctl } for pid=10422 comm="syz.1.1211" path="socket:[28916]" dev="sockfs" ino=28916 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.127093][ T30] audit: type=1400 audit(3914648951.064:1552): avc: denied { write } for pid=10422 comm="syz.1.1211" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 390.182993][ T5868] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 390.225702][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.233423][ T5868] usb 4-1: device descriptor read/8, error -71 [ 390.275039][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.348177][ T30] audit: type=1400 audit(3914648951.344:1553): avc: denied { ioctl } for pid=10427 comm="syz.2.1214" path="socket:[29762]" dev="sockfs" ino=29762 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 390.383378][ T5868] usb usb4-port1: unable to enumerate USB device [ 390.763323][ T30] audit: type=1400 audit(3914648951.754:1554): avc: denied { create } for pid=10434 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.802982][ T30] audit: type=1400 audit(3914648951.754:1555): avc: denied { bind } for pid=10434 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.834170][T10436] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1215'. [ 390.928326][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 390.993510][ T30] audit: type=1400 audit(3914648951.994:1556): avc: denied { create } for pid=10440 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.028215][ T30] audit: type=1400 audit(3914648951.994:1557): avc: denied { bind } for pid=10440 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.119609][ T30] audit: type=1400 audit(3914648952.114:1558): avc: denied { mount } for pid=10440 comm="syz.0.1217" name="/" dev="hugetlbfs" ino=28953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 391.165679][T10447] FAULT_INJECTION: forcing a failure. [ 391.165679][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.179040][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.0.1217 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.179067][T10447] Tainted: [L]=SOFTLOCKUP [ 391.179073][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.179083][T10447] Call Trace: [ 391.179088][T10447] [ 391.179095][T10447] dump_stack_lvl+0x16c/0x1f0 [ 391.179122][T10447] should_fail_ex+0x512/0x640 [ 391.179150][T10447] strncpy_from_user+0x3b/0x2e0 [ 391.179176][T10447] getname_flags.part.0+0x8f/0x550 [ 391.179197][T10447] getname_flags+0x93/0xf0 [ 391.179217][T10447] do_sys_openat2+0xb9/0x290 [ 391.179233][T10447] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.179258][T10447] __x64_sys_openat+0x174/0x210 [ 391.179274][T10447] ? __pfx___x64_sys_openat+0x10/0x10 [ 391.179288][T10447] ? rcu_is_watching+0x12/0xc0 [ 391.179306][T10447] do_syscall_64+0xcd/0xf80 [ 391.179323][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.179336][T10447] RIP: 0033:0x7ffb2718f749 [ 391.179347][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.179359][T10447] RSP: 002b:00007ffb253d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.179377][T10447] RAX: ffffffffffffffda RBX: 00007ffb273e6180 RCX: 00007ffb2718f749 [ 391.179385][T10447] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 391.179393][T10447] RBP: 00007ffb253d5090 R08: 0000000000000000 R09: 0000000000000000 [ 391.179401][T10447] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 391.179409][T10447] R13: 00007ffb273e6218 R14: 00007ffb273e6180 R15: 00007ffcf1186c98 [ 391.179426][T10447] [ 391.426318][ T30] audit: type=1400 audit(3914648952.424:1559): avc: denied { mounton } for pid=10446 comm="syz.2.1219" path="/249/file0" dev="tmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 391.551358][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.578661][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.674568][T10458] netlink: 'syz.2.1221': attribute type 9 has an invalid length. [ 391.682314][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'. [ 391.694281][T10458] hsr0: entered promiscuous mode [ 391.699480][T10458] macvlan0: entered promiscuous mode [ 391.705315][T10458] macvlan0: entered allmulticast mode [ 391.710682][T10458] hsr0: entered allmulticast mode [ 391.715718][T10458] hsr_slave_0: entered allmulticast mode [ 391.721345][T10458] hsr_slave_1: entered allmulticast mode [ 391.728174][T10459] netlink: 'syz.2.1221': attribute type 9 has an invalid length. [ 391.736294][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'. [ 391.748295][T10459] macvlan1: entered promiscuous mode [ 391.753711][T10459] macvlan1: entered allmulticast mode [ 391.878357][T10462] sp0: Synchronizing with TNC [ 391.907013][T10462] [U] è` [ 392.774944][T10443] IPv6: NLM_F_REPLACE set, but no existing node found! [ 393.379601][ T5826] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 393.513603][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1229'. [ 394.313130][ T5940] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 394.419934][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 394.419949][ T30] audit: type=1400 audit(3914648955.414:1571): avc: denied { view } for pid=10502 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 394.472972][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 394.480154][ T5940] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 394.489708][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.502748][ T5940] usb 1-1: config 0 descriptor?? [ 394.584379][ T30] audit: type=1400 audit(3914648955.574:1572): avc: denied { name_bind } for pid=10502 comm="syz.4.1237" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 394.738965][ T30] audit: type=1400 audit(3914648955.634:1573): avc: denied { ioctl } for pid=10498 comm="syz.1.1235" path="/dev/vbi4" dev="devtmpfs" ino=980 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 395.076487][ T30] audit: type=1400 audit(3914648955.934:1574): avc: denied { create } for pid=10491 comm="syz.0.1232" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 395.102989][ T5895] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 395.135337][ T5940] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 395.194946][ T5940] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 395.228910][ T30] audit: type=1400 audit(3914648956.224:1575): avc: denied { firmware_load } for pid=5940 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 395.253210][ T5940] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 395.376592][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 395.394306][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.423206][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 395.440040][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 395.458595][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.485832][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.506514][ T30] audit: type=1400 audit(3914648956.504:1576): avc: denied { create } for pid=10513 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.528802][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 395.615926][ T30] audit: type=1400 audit(3914648956.524:1577): avc: denied { write } for pid=10513 comm="syz.2.1240" path="socket:[30015]" dev="sockfs" ino=30015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 395.673060][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.681074][ T5895] usb 2-1: Product: syz [ 395.693026][ T5895] usb 2-1: Manufacturer: syz [ 395.698279][ T5895] usb 2-1: SerialNumber: syz [ 395.703057][ T30] audit: type=1400 audit(3914648956.664:1578): avc: denied { read write } for pid=10513 comm="syz.2.1240" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 395.755721][ T5895] usb 2-1: config 0 descriptor?? [ 395.774704][ T5895] xbox_remote_probe: Unexpected endpoint_in [ 395.819840][ T30] audit: type=1400 audit(3914648956.664:1579): avc: denied { open } for pid=10513 comm="syz.2.1240" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 395.903148][ T30] audit: type=1400 audit(3914648956.674:1580): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 396.134284][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.167876][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.551496][ T5970] usb 2-1: USB disconnect, device number 24 [ 397.849621][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1249'. [ 398.110101][ T5826] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 398.413603][T10565] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 399.522646][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 399.522661][ T30] audit: type=1400 audit(3914648960.514:1626): avc: denied { read } for pid=10574 comm="syz.3.1256" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 399.704758][ T30] audit: type=1400 audit(3914648960.564:1627): avc: denied { open } for pid=10574 comm="syz.3.1256" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 399.812184][ T30] audit: type=1400 audit(3914648960.654:1628): avc: denied { create } for pid=10577 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 399.819081][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 399.916070][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 399.927021][ T30] audit: type=1400 audit(3914648960.654:1629): avc: denied { ioctl } for pid=10577 comm="syz.1.1257" path="socket:[30342]" dev="sockfs" ino=30342 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.045525][ T30] audit: type=1400 audit(3914648960.814:1630): avc: denied { write } for pid=10581 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.112660][ T30] audit: type=1400 audit(3914648961.104:1631): avc: denied { getopt } for pid=10588 comm="syz.4.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.114708][T10589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1260'. [ 400.288683][ T30] audit: type=1400 audit(3914648961.284:1632): avc: denied { create } for pid=10590 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 400.319312][ T30] audit: type=1400 audit(3914648961.314:1633): avc: denied { ioctl } for pid=10590 comm="syz.4.1261" path="socket:[29145]" dev="sockfs" ino=29145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 400.353928][ T30] audit: type=1400 audit(3914648961.314:1634): avc: denied { read } for pid=10593 comm="syz.2.1262" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 400.449494][ T30] audit: type=1400 audit(3914648961.314:1635): avc: denied { open } for pid=10593 comm="syz.2.1262" path="/dev/userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.542113][T10626] hub 5-0:1.0: USB hub found [ 401.553541][T10626] hub 5-0:1.0: 1 port detected [ 402.016231][T10631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1271'. [ 403.056644][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 403.084273][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1277'. [ 404.766639][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 404.766652][ T30] audit: type=1400 audit(3914648965.654:1653): avc: denied { ioctl } for pid=10663 comm="syz.4.1282" path="socket:[30601]" dev="sockfs" ino=30601 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.789244][ T30] audit: type=1400 audit(3914648966.784:1654): avc: denied { execute } for pid=10673 comm="syz.4.1285" name="file2" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 405.953575][ T30] audit: type=1400 audit(3914648966.804:1655): avc: denied { execute_no_trans } for pid=10673 comm="syz.4.1285" path="/323/file2" dev="tmpfs" ino=1762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 406.313581][ T30] audit: type=1400 audit(3914648966.814:1656): avc: denied { setopt } for pid=10673 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 406.337682][ T30] audit: type=1400 audit(3914648966.904:1657): avc: denied { write } for pid=10671 comm="syz.3.1283" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.372453][ T30] audit: type=1400 audit(3914648966.904:1658): avc: denied { ioctl } for pid=10671 comm="syz.3.1283" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.353025][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 407.549376][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 407.562511][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 407.775430][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 121, changing to 10 [ 407.836820][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1288'. [ 408.299694][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 33312, setting to 1024 [ 408.565352][ T24] usb 4-1: string descriptor 0 read error: -71 [ 408.571559][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 408.613671][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.633500][T10696] FAULT_INJECTION: forcing a failure. [ 408.633500][T10696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.673044][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.3.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.673071][T10696] Tainted: [L]=SOFTLOCKUP [ 408.673076][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.673085][T10696] Call Trace: [ 408.673090][T10696] [ 408.673097][T10696] dump_stack_lvl+0x16c/0x1f0 [ 408.673123][T10696] should_fail_ex+0x512/0x640 [ 408.673149][T10696] should_fail_alloc_page+0xe7/0x130 [ 408.673171][T10696] prepare_alloc_pages+0x401/0x670 [ 408.673195][T10696] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 408.673212][T10696] ? should_fail_alloc_page+0xee/0x130 [ 408.673233][T10696] ? rcu_is_watching+0x12/0xc0 [ 408.673249][T10696] ? trace_mm_page_alloc+0x11b/0x180 [ 408.673269][T10696] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 408.673288][T10696] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.673304][T10696] ? find_held_lock+0x2b/0x80 [ 408.673326][T10696] ? is_bpf_text_address+0x8a/0x1a0 [ 408.673343][T10696] ? bpf_ksym_find+0x127/0x1c0 [ 408.673366][T10696] ? kernel_text_address+0x8d/0x100 [ 408.673386][T10696] ? __kernel_text_address+0xd/0x40 [ 408.673404][T10696] ? unwind_get_return_address+0x59/0xa0 [ 408.673433][T10696] alloc_pages_bulk_noprof+0x77a/0x1410 [ 408.673448][T10696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.673469][T10696] ? policy_nodemask+0xea/0x4e0 [ 408.673492][T10696] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 408.673510][T10696] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 408.673530][ T24] usb 4-1: config 0 descriptor?? [ 408.673540][T10696] __kasan_populate_vmalloc+0xfb/0x220 [ 408.673563][T10696] alloc_vmap_area+0x98d/0x2a50 [ 408.673589][T10696] ? __pfx_alloc_vmap_area+0x10/0x10 [ 408.673612][T10696] __get_vm_area_node+0x1ca/0x330 [ 408.673635][T10696] __vmalloc_node_range_noprof+0x247/0x16b0 [ 408.673656][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 408.673678][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 408.673699][T10696] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.673718][T10696] ? find_held_lock+0x2b/0x80 [ 408.673738][T10696] ? avc_has_perm_noaudit+0x117/0x3b0 [ 408.673763][T10696] ? avc_has_perm_noaudit+0x149/0x3b0 [ 408.673786][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 408.673800][T10696] __vmalloc_node_noprof+0xad/0xf0 [ 408.673819][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 408.673837][T10696] __vmalloc_noprof+0xa3/0x120 [ 408.673857][T10696] ? __pfx___vmalloc_noprof+0x10/0x10 [ 408.673884][T10696] ? rcu_is_watching+0x12/0xc0 [ 408.673897][T10696] ? cap_capable+0x10d/0x3f0 [ 408.673917][T10696] bpf_prog_alloc_no_stats+0x58/0x610 [ 408.673931][T10696] ? security_capable+0x7e/0x260 [ 408.673947][T10696] bpf_prog_alloc+0x3b/0x230 [ 408.673960][T10696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.673977][T10696] bpf_prog_load+0x19bc/0x2cc0 [ 408.674002][T10696] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.674022][T10696] ? avc_has_perm_noaudit+0x149/0x3b0 [ 408.674046][T10696] ? avc_has_perm+0x144/0x1f0 [ 408.674077][T10696] ? selinux_bpf+0xdd/0x130 [ 408.674098][T10696] ? bpf_lsm_bpf+0x9/0x10 [ 408.674115][T10696] __sys_bpf+0x3e72/0x4980 [ 408.674138][T10696] ? __pfx___sys_bpf+0x10/0x10 [ 408.674157][T10696] ? find_held_lock+0x2b/0x80 [ 408.674181][T10696] ? find_held_lock+0x2b/0x80 [ 408.674207][T10696] ? __mutex_unlock_slowpath+0x161/0x790 [ 408.674238][T10696] ? fput+0x70/0xf0 [ 408.674250][T10696] ? ksys_write+0x1ac/0x250 [ 408.674267][T10696] ? __pfx_ksys_write+0x10/0x10 [ 408.674288][T10696] __x64_sys_bpf+0x78/0xc0 [ 408.674307][T10696] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.674325][T10696] do_syscall_64+0xcd/0xf80 [ 408.674343][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.674357][T10696] RIP: 0033:0x7f370d78f749 [ 408.674371][T10696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.674386][T10696] RSP: 002b:00007f370e687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.674401][T10696] RAX: ffffffffffffffda RBX: 00007f370d9e5fa0 RCX: 00007f370d78f749 [ 408.674411][T10696] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 408.674419][T10696] RBP: 00007f370e687090 R08: 0000000000000000 R09: 0000000000000000 [ 408.674428][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.674437][T10696] R13: 00007f370d9e6038 R14: 00007f370d9e5fa0 R15: 00007fffe9ef7508 [ 408.674457][T10696] [ 408.676718][T10696] syz.3.1290: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 409.234952][ T24] usb 4-1: can't set config #0, error -71 [ 409.254145][ T24] usb 4-1: USB disconnect, device number 41 [ 409.255013][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.3.1290 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.255039][T10696] Tainted: [L]=SOFTLOCKUP [ 409.255045][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.255053][T10696] Call Trace: [ 409.255058][T10696] [ 409.255064][T10696] dump_stack_lvl+0x16c/0x1f0 [ 409.255087][T10696] warn_alloc+0x248/0x3a0 [ 409.255104][T10696] ? __pfx_warn_alloc+0x10/0x10 [ 409.255119][T10696] ? kfree+0x2f8/0x6e0 [ 409.255131][T10696] ? __get_vm_area_node+0x2cd/0x330 [ 409.255154][T10696] ? __get_vm_area_node+0x2cd/0x330 [ 409.255170][T10696] ? __get_vm_area_node+0x1dc/0x330 [ 409.255187][T10696] ? __get_vm_area_node+0x208/0x330 [ 409.255210][T10696] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 409.255237][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 409.255259][T10696] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.255277][T10696] ? find_held_lock+0x2b/0x80 [ 409.255299][T10696] ? avc_has_perm_noaudit+0x117/0x3b0 [ 409.255324][T10696] ? avc_has_perm_noaudit+0x149/0x3b0 [ 409.255346][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 409.255361][T10696] __vmalloc_node_noprof+0xad/0xf0 [ 409.255380][T10696] ? bpf_prog_alloc_no_stats+0x58/0x610 [ 409.255397][T10696] __vmalloc_noprof+0xa3/0x120 [ 409.255417][T10696] ? __pfx___vmalloc_noprof+0x10/0x10 [ 409.255439][T10696] ? rcu_is_watching+0x12/0xc0 [ 409.255453][T10696] ? cap_capable+0x10d/0x3f0 [ 409.255469][T10696] bpf_prog_alloc_no_stats+0x58/0x610 [ 409.255484][T10696] ? security_capable+0x7e/0x260 [ 409.255500][T10696] bpf_prog_alloc+0x3b/0x230 [ 409.255513][T10696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 409.255530][T10696] bpf_prog_load+0x19bc/0x2cc0 [ 409.255555][T10696] ? __pfx_bpf_prog_load+0x10/0x10 [ 409.255575][T10696] ? avc_has_perm_noaudit+0x149/0x3b0 [ 409.255599][T10696] ? avc_has_perm+0x144/0x1f0 [ 409.255630][T10696] ? selinux_bpf+0xdd/0x130 [ 409.255650][T10696] ? bpf_lsm_bpf+0x9/0x10 [ 409.255667][T10696] __sys_bpf+0x3e72/0x4980 [ 409.255690][T10696] ? __pfx___sys_bpf+0x10/0x10 [ 409.255708][T10696] ? find_held_lock+0x2b/0x80 [ 409.255732][T10696] ? find_held_lock+0x2b/0x80 [ 409.255758][T10696] ? __mutex_unlock_slowpath+0x161/0x790 [ 409.255790][T10696] ? fput+0x70/0xf0 [ 409.255802][T10696] ? ksys_write+0x1ac/0x250 [ 409.255819][T10696] ? __pfx_ksys_write+0x10/0x10 [ 409.255840][T10696] __x64_sys_bpf+0x78/0xc0 [ 409.255859][T10696] ? lockdep_hardirqs_on+0x7c/0x110 [ 409.255880][T10696] do_syscall_64+0xcd/0xf80 [ 409.255899][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.255913][T10696] RIP: 0033:0x7f370d78f749 [ 409.255924][T10696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.255937][T10696] RSP: 002b:00007f370e687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.255952][T10696] RAX: ffffffffffffffda RBX: 00007f370d9e5fa0 RCX: 00007f370d78f749 [ 409.255961][T10696] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 409.255969][T10696] RBP: 00007f370e687090 R08: 0000000000000000 R09: 0000000000000000 [ 409.255977][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.255985][T10696] R13: 00007f370d9e6038 R14: 00007f370d9e5fa0 R15: 00007fffe9ef7508 [ 409.256005][T10696] [ 409.585260][T10696] Mem-Info: [ 409.588394][T10696] active_anon:18973 inactive_anon:0 isolated_anon:0 [ 409.588394][T10696] active_file:21833 inactive_file:41309 isolated_file:0 [ 409.588394][T10696] unevictable:768 dirty:299 writeback:0 [ 409.588394][T10696] slab_reclaimable:12478 slab_unreclaimable:101049 [ 409.588394][T10696] mapped:31289 shmem:4038 pagetables:1333 [ 409.588394][T10696] sec_pagetables:0 bounce:0 [ 409.588394][T10696] kernel_misc_reclaimable:0 [ 409.588394][T10696] free:1249722 free_pcp:46620 free_cma:0 [ 409.645373][T10696] Node 0 active_anon:75792kB inactive_anon:0kB active_file:87292kB inactive_file:165032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125116kB dirty:1196kB writeback:0kB shmem:14516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12544kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.684195][T10696] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.722942][T10696] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.753775][T10696] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 409.759661][T10696] Node 0 DMA32 free:1095892kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67792kB inactive_anon:0kB active_file:87292kB inactive_file:165032kB unevictable:1536kB writepending:1196kB zspages:0kB present:3129332kB managed:2540852kB mlocked:0kB bounce:0kB free_pcp:165424kB local_pcp:38024kB free_cma:0kB [ 409.796351][T10696] lowmem_reserve[]: 0 0 1 1 1 [ 409.801083][T10696] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.831066][T10696] lowmem_reserve[]: 0 0 0 0 0 [ 409.836851][T10696] Node 1 Normal free:3895736kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21956kB local_pcp:13600kB free_cma:0kB [ 409.873135][T10696] lowmem_reserve[]: 0 0 0 0 0 [ 409.878014][T10696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.891608][T10696] Node 0 DMA32: 1868*4kB (UME) 2197*8kB (UME) 893*16kB (UME) 295*32kB (UM) 113*64kB (UME) 120*128kB (UM) 26*256kB (UME) 27*512kB (UM) 26*1024kB (UME) 8*2048kB (UM) 235*4096kB (UM) = 1097416kB [ 409.912211][T10696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.968057][T10696] Node 1 Normal: 198*4kB (U) 40*8kB (UE) 36*16kB (UME) 117*32kB (UE) 40*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895736kB [ 409.987144][T10696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.997952][T10696] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 410.817653][ T30] audit: type=1400 audit(3914648970.924:1659): avc: denied { read } for pid=10702 comm="syz.2.1289" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.817694][ T30] audit: type=1400 audit(3914648970.924:1660): avc: denied { open } for pid=10702 comm="syz.2.1289" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.817716][ T30] audit: type=1400 audit(3914648970.924:1661): avc: denied { ioctl } for pid=10702 comm="syz.2.1289" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.817737][ T30] audit: type=1400 audit(3914648971.084:1662): avc: denied { watch } for pid=10702 comm="syz.2.1289" path="/265/file0" dev="tmpfs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 410.817758][ T30] audit: type=1400 audit(3914648971.084:1663): avc: denied { watch_sb watch_reads } for pid=10702 comm="syz.2.1289" path="/265/file0" dev="tmpfs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 410.882978][T10696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.883000][T10696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 410.883014][T10696] 80581 total pagecache pages [ 410.883021][T10696] 0 pages in swap cache [ 410.883026][T10696] Free swap = 124996kB [ 410.883033][T10696] Total swap = 124996kB [ 410.883040][T10696] 2097051 pages RAM [ 410.883047][T10696] 0 pages HighMem/MovableOnly [ 410.883053][T10696] 429812 pages reserved [ 410.883059][T10696] 0 pages cma reserved [ 410.990816][ T30] audit: type=1400 audit(3914648971.984:1664): avc: denied { create } for pid=10700 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.143580][ T30] audit: type=1400 audit(3914648972.144:1665): avc: denied { connect } for pid=10710 comm="syz.0.1294" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.933059][ T30] audit: type=1400 audit(3914648972.904:1666): avc: denied { create } for pid=10712 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 411.933110][ T30] audit: type=1400 audit(3914648972.904:1667): avc: denied { getopt } for pid=10712 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 412.246419][ T30] audit: type=1400 audit(3914648973.244:1668): avc: denied { read write } for pid=10726 comm="syz.0.1299" name="vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 413.132994][ T5895] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 413.272963][ T5895] usb 4-1: device descriptor read/64, error -71 [ 413.558204][ T5895] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 413.823138][ T5895] usb 4-1: device descriptor read/64, error -71 [ 414.368322][ T5895] usb usb4-port1: attempt power cycle [ 415.499503][ T5895] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 415.745885][ T5895] usb 4-1: device not accepting address 44, error -71 [ 415.883353][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 415.883367][ T30] audit: type=1400 audit(3914648976.884:1692): avc: denied { read append } for pid=10784 comm="syz.1.1316" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 416.006857][ T30] audit: type=1400 audit(3914648976.914:1693): avc: denied { ioctl open } for pid=10784 comm="syz.1.1316" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 416.074981][ T30] audit: type=1400 audit(3914648977.074:1694): avc: denied { create } for pid=10788 comm="syz.1.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 416.185434][ T30] audit: type=1400 audit(3914648977.184:1695): avc: denied { ioctl } for pid=10788 comm="syz.1.1317" path="socket:[29574]" dev="sockfs" ino=29574 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 416.308248][ T30] audit: type=1400 audit(3914648977.304:1696): avc: denied { ioctl } for pid=10793 comm="syz.0.1318" path="socket:[30921]" dev="sockfs" ino=30921 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 416.476758][T10799] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 416.613222][T10803] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.661804][T10803] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 416.721643][ T30] audit: type=1400 audit(3914648977.714:1697): avc: denied { create } for pid=10798 comm="syz.0.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 416.803012][ T30] audit: type=1400 audit(3914648977.724:1698): avc: denied { write } for pid=10798 comm="syz.0.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 416.818110][T10799] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 417.086481][T10821] sp0: Synchronizing with TNC [ 417.092169][ T30] audit: type=1400 audit(3914648978.084:1699): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 417.118094][ T30] audit: type=1400 audit(3914648978.094:1700): avc: denied { search } for pid=5482 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.139883][ T30] audit: type=1400 audit(3914648978.094:1701): avc: denied { search } for pid=5482 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.212991][ T5895] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 417.306562][T10825] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1324'. [ 417.389107][ T5895] usb 2-1: device descriptor read/64, error -71 [ 417.657024][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 417.742896][ T89] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 417.853050][ T5895] usb 2-1: device descriptor read/64, error -71 [ 418.001555][ T89] usb 4-1: config 0 has no interfaces? [ 418.026313][ T89] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.271309][ T5895] usb usb2-port1: attempt power cycle [ 418.503017][ T89] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 418.515505][ T89] usb 4-1: Product: syz [ 418.520800][ T89] usb 4-1: Manufacturer: syz [ 418.526643][ T89] usb 4-1: SerialNumber: syz [ 418.606155][ T89] usb 4-1: config 0 descriptor?? [ 418.653283][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 418.683418][ T5895] usb 2-1: device descriptor read/8, error -71 [ 418.943997][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 418.963391][ T5895] usb 2-1: device descriptor read/8, error -71 [ 419.083244][ T5895] usb usb2-port1: unable to enumerate USB device [ 419.377047][ T5895] usb 4-1: USB disconnect, device number 46 [ 419.515919][T10856] net_ratelimit: 5 callbacks suppressed [ 419.515949][T10856] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 420.164172][T10864] block nbd1: not configured, cannot reconfigure [ 420.883054][ T89] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 421.923056][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 421.931509][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.947325][ T89] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 421.957418][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.977417][ T89] usb 4-1: Product: syz [ 421.981599][ T89] usb 4-1: Manufacturer: syz [ 422.005278][ T89] usb 4-1: SerialNumber: syz [ 422.040842][ T89] usb 4-1: config 0 descriptor?? [ 422.053784][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 422.053798][ T30] audit: type=1400 audit(3914648983.054:1723): avc: denied { remount } for pid=10888 comm="syz.0.1345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 422.161091][ T30] audit: type=1400 audit(3914648983.154:1724): avc: denied { getopt } for pid=10891 comm="syz.0.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.354680][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.368576][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.601206][ T30] audit: type=1400 audit(3914648983.584:1725): avc: denied { setopt } for pid=10895 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 422.820253][ T89] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 422.828881][ T89] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 422.855659][ T89] usb 4-1: USB disconnect, device number 47 [ 423.615866][ T30] audit: type=1400 audit(3914648984.264:1726): avc: denied { read } for pid=10905 comm="syz.2.1344" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 423.676586][ T30] audit: type=1400 audit(3914648984.264:1727): avc: denied { open } for pid=10905 comm="syz.2.1344" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 423.720962][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1351'. [ 424.140273][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.152948][ T30] audit: type=1804 audit(3914648985.134:1728): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1352" name="/newroot/278/file0" dev="tmpfs" ino=1487 res=1 errno=0 [ 424.193202][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.659136][T10924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1354'. [ 424.742343][ T30] audit: type=1400 audit(3914648985.734:1729): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.815117][ T30] audit: type=1400 audit(3914648985.734:1730): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.859966][ T30] audit: type=1400 audit(3914648985.734:1731): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 424.896590][ T30] audit: type=1400 audit(3914648985.794:1732): avc: denied { prog_load } for pid=10930 comm="syz.3.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.313053][ T5868] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 425.706051][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 426.207844][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.241912][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.271288][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.293080][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.322377][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.359464][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.560429][T10959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.726574][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.771006][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.525918][ T5868] usb 4-1: GET_CAPABILITIES returned 0 [ 427.531398][ T5868] usbtmc 4-1:16.0: can't read capabilities [ 531.832877][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 531.839831][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5818/1:b..l P10964/1:b..l [ 531.849366][ C0] rcu: (detected by 0, t=10502 jiffies, g=37793, q=60 ncpus=2) [ 531.856982][ C0] task:syz-executor state:R running task stack:28312 pid:10964 tgid:10964 ppid:5821 task_flags:0x400040 flags:0x00080000 [ 531.870984][ C0] Call Trace: [ 531.874260][ C0] [ 531.877186][ C0] ? __schedule+0x10b9/0x6150 [ 531.881856][ C0] __schedule+0x1139/0x6150 [ 531.886348][ C0] ? __lock_acquire+0x436/0x2890 [ 531.891288][ C0] ? __pfx___schedule+0x10/0x10 [ 531.896126][ C0] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 531.902188][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 531.908244][ C0] preempt_schedule_notrace+0x62/0xe0 [ 531.913609][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 531.919496][ C0] rcu_is_watching+0x8e/0xc0 [ 531.924075][ C0] unwind_next_frame+0xa3b/0x20b0 [ 531.929098][ C0] ? asm_exc_page_fault+0x26/0x30 [ 531.934116][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.940261][ C0] arch_stack_walk+0x94/0x100 [ 531.944941][ C0] stack_trace_save+0x8e/0xc0 [ 531.949608][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 531.954975][ C0] save_stack+0x160/0x1f0 [ 531.959295][ C0] ? __pfx_save_stack+0x10/0x10 [ 531.964139][ C0] ? post_alloc_hook+0x1af/0x220 [ 531.969070][ C0] ? get_page_from_freelist+0xd0b/0x31a0 [ 531.974685][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 531.980739][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 531.985753][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 531.991288][ C0] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 531.996742][ C0] ? do_wp_page+0x202f/0x5010 [ 532.001409][ C0] ? __handle_mm_fault+0x1bd2/0x2bb0 [ 532.006683][ C0] ? handle_mm_fault+0x3fe/0xad0 [ 532.011611][ C0] ? do_user_addr_fault+0x60c/0x1370 [ 532.016886][ C0] ? exc_page_fault+0x64/0xc0 [ 532.021553][ C0] ? asm_exc_page_fault+0x26/0x30 [ 532.026568][ C0] ? __lock_acquire+0x436/0x2890 [ 532.031499][ C0] __set_page_owner+0x91/0x560 [ 532.036257][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 532.041619][ C0] ? bad_range+0x261/0x4c0 [ 532.046028][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.051219][ C0] post_alloc_hook+0x1af/0x220 [ 532.055982][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 532.061433][ C0] ? __pfx___might_resched+0x10/0x10 [ 532.066707][ C0] ? should_fail_alloc_page+0xee/0x130 [ 532.072167][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 532.078049][ C0] ? __lock_acquire+0x436/0x2890 [ 532.082979][ C0] ? __lock_acquire+0x436/0x2890 [ 532.087906][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 532.094231][ C0] ? find_held_lock+0x2b/0x80 [ 532.098904][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 532.104092][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 532.108846][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.114729][ C0] ? policy_nodemask+0xea/0x4e0 [ 532.119578][ C0] alloc_pages_mpol+0x1fb/0x550 [ 532.124422][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 532.129791][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 532.135157][ C0] vma_alloc_folio_noprof+0xed/0x1e0 [ 532.140436][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 532.146328][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 532.151081][ C0] do_wp_page+0x202f/0x5010 [ 532.155589][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 532.160432][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.165803][ C0] __handle_mm_fault+0x1bd2/0x2bb0 [ 532.170915][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 532.176191][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 532.181646][ C0] ? lock_vma_under_rcu+0x176/0x580 [ 532.186854][ C0] handle_mm_fault+0x3fe/0xad0 [ 532.191615][ C0] do_user_addr_fault+0x60c/0x1370 [ 532.196723][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.201479][ C0] exc_page_fault+0x64/0xc0 [ 532.205973][ C0] asm_exc_page_fault+0x26/0x30 [ 532.210814][ C0] RIP: 0033:0x7f05452649a2 [ 532.215213][ C0] RSP: 002b:00007ffd91f25630 EFLAGS: 00010246 [ 532.221264][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 532.229219][ C0] RDX: 00007f054541566e RSI: 0000000000000040 RDI: 00007ffd91f25780 [ 532.237176][ C0] RBP: 00007ffd91f25780 R08: 0000000000000557 R09: 0000000000000000 [ 532.245130][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000102 [ 532.253084][ C0] R13: 00000000000927c0 R14: 0000000000068258 R15: 00007ffd91f258e0 [ 532.261054][ C0] [ 532.264061][ C0] task:syz-executor state:R running task stack:23736 pid:5818 tgid:5818 ppid:5809 task_flags:0x400140 flags:0x00080000 [ 532.277531][ C0] Call Trace: [ 532.280792][ C0] [ 532.283713][ C0] ? __schedule+0x10b9/0x6150 [ 532.288380][ C0] __schedule+0x1139/0x6150 [ 532.292878][ C0] ? stack_trace_save+0x8e/0xc0 [ 532.297718][ C0] ? __pfx___schedule+0x10/0x10 [ 532.302560][ C0] ? mark_held_locks+0x49/0x80 [ 532.307313][ C0] preempt_schedule_irq+0x51/0x90 [ 532.312333][ C0] irqentry_exit+0x1d8/0x8c0 [ 532.316915][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.322883][ C0] RIP: 0010:lock_release+0x183/0x2d0 [ 532.328154][ C0] Code: 0f c1 05 f8 00 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 532.347749][ C0] RSP: 0018:ffffc90002ea7410 EFLAGS: 00000206 [ 532.353806][ C0] RAX: 67ac7d9b5c3dee00 RBX: ffffffff8e3c96a0 RCX: ffffc90002ea741c [ 532.361761][ C0] RDX: 0000000000000003 RSI: ffffffff8daa7ee5 RDI: ffffffff8bf2b400 [ 532.369719][ C0] RBP: 0000000000000001 R08: ffffffff912fbf06 R09: 0000000009ecfde3 [ 532.377672][ C0] R10: 0000000000000002 R11: 0000000000012887 R12: ffffffff816cb9a4 [ 532.385627][ C0] R13: 0000000000000206 R14: ffff88807aae0000 R15: 0000000000000004 [ 532.393585][ C0] ? unwind_next_frame+0x3f4/0x20b0 [ 532.398795][ C0] unwind_next_frame+0x3f9/0x20b0 [ 532.403811][ C0] ? kasan_save_track+0x14/0x30 [ 532.408655][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 532.414801][ C0] arch_stack_walk+0x94/0x100 [ 532.419476][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 532.424496][ C0] stack_trace_save+0x8e/0xc0 [ 532.429159][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 532.434515][ C0] ? __lock_acquire+0x436/0x2890 [ 532.439448][ C0] kasan_save_stack+0x33/0x60 [ 532.444126][ C0] ? kasan_save_stack+0x33/0x60 [ 532.448965][ C0] ? kasan_save_track+0x14/0x30 [ 532.453841][ C0] kasan_save_track+0x14/0x30 [ 532.458508][ C0] __kasan_slab_alloc+0x89/0x90 [ 532.463350][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 532.468797][ C0] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 532.474855][ C0] ? anon_vma_clone+0xd8/0x5c0 [ 532.479619][ C0] ? anon_vma_clone+0xd8/0x5c0 [ 532.484377][ C0] anon_vma_clone+0xd8/0x5c0 [ 532.488960][ C0] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 532.494578][ C0] ? vm_area_dup+0x27/0x8d0 [ 532.499087][ C0] anon_vma_fork+0x7a/0x620 [ 532.503587][ C0] ? vm_area_dup+0x5a1/0x8d0 [ 532.508171][ C0] dup_mmap+0x12d3/0x20e0 [ 532.512500][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 532.517187][ C0] copy_process+0x3b9f/0x7430 [ 532.521861][ C0] ? do_wp_page+0x1c04/0x5010 [ 532.526536][ C0] ? __pfx_copy_process+0x10/0x10 [ 532.531552][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 532.536579][ C0] kernel_clone+0xfc/0x910 [ 532.540986][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 532.546010][ C0] __do_sys_clone+0xce/0x120 [ 532.550587][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 532.555769][ C0] ? count_memcg_events+0x122/0x290 [ 532.560967][ C0] ? do_user_addr_fault+0x843/0x1370 [ 532.566252][ C0] do_syscall_64+0xcd/0xf80 [ 532.570751][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.576637][ C0] RIP: 0033:0x7f71fa985e93 [ 532.581036][ C0] RSP: 002b:00007ffd9f0fafa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 532.589433][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f71fa985e93 [ 532.597391][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 532.605351][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 532.613307][ C0] R10: 00005555888147d0 R11: 0000000000000246 R12: 0000000000000000 [ 532.621265][ C0] R13: 00000000000927c0 R14: 0000000000067c60 R15: 00007ffd9f0fb140 [ 532.629240][ C0] [ 532.632244][ C0] rcu: rcu_preempt kthread starved for 10523 jiffies! g37793 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 532.643421][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 532.653374][ C0] rcu: RCU grace-period kthread stack dump: [ 532.659243][ C0] task:rcu_preempt state:R running task stack:27720 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 532.672720][ C0] Call Trace: [ 532.675983][ C0] [ 532.678901][ C0] ? __schedule+0x10b9/0x6150 [ 532.683566][ C0] __schedule+0x1139/0x6150 [ 532.688073][ C0] ? __pfx___schedule+0x10/0x10 [ 532.692909][ C0] ? find_held_lock+0x2b/0x80 [ 532.697582][ C0] ? schedule+0x2d7/0x3a0 [ 532.701901][ C0] schedule+0xe7/0x3a0 [ 532.705959][ C0] schedule_timeout+0x123/0x290 [ 532.710797][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 532.716156][ C0] ? __pfx_process_timeout+0x10/0x10 [ 532.721430][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 532.727224][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 532.732675][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 532.737434][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 532.742710][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.747897][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 532.752826][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 532.757669][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.763465][ C0] rcu_gp_kthread+0x26d/0x380 [ 532.768134][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 532.773322][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.778073][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.783261][ C0] ? __kthread_parkme+0x19e/0x250 [ 532.788273][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 532.793463][ C0] kthread+0x3c5/0x780 [ 532.797523][ C0] ? __pfx_kthread+0x10/0x10 [ 532.802102][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.806849][ C0] ? __pfx_kthread+0x10/0x10 [ 532.811438][ C0] ret_from_fork+0x983/0xb10 [ 532.816035][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 532.821148][ C0] ? __switch_to+0x7af/0x10d0 [ 532.825827][ C0] ? __pfx_kthread+0x10/0x10 [ 532.830411][ C0] ret_from_fork_asm+0x1a/0x30 [ 532.835183][ C0] [ 532.838192][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 532.844500][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.854986][ C0] Tainted: [L]=SOFTLOCKUP [ 532.859294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.869337][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 532.874963][ C0] Code: d6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 532.894568][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 532.900635][ C0] RAX: 0000000001cef9e7 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 532.908595][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 532.916551][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 532.924507][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 532.932465][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 532.940421][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 532.949338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.955912][ C0] CR2: 00007f1eec5440e8 CR3: 0000000075f25000 CR4: 00000000003526f0 [ 532.963874][ C0] Call Trace: [ 532.967138][ C0] [ 532.970055][ C0] default_idle+0x13/0x20 [ 532.974384][ C0] default_idle_call+0x6c/0xb0 [ 532.979139][ C0] do_idle+0x38d/0x510 [ 532.983208][ C0] ? __pfx_do_idle+0x10/0x10 [ 532.987798][ C0] cpu_startup_entry+0x4f/0x60 [ 532.992557][ C0] rest_init+0x16b/0x2b0 [ 532.996795][ C0] ? acpi_subsystem_init+0x133/0x180 [ 533.002065][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 533.007598][ C0] start_kernel+0x3ef/0x4d0 [ 533.012098][ C0] x86_64_start_reservations+0x18/0x30 [ 533.017552][ C0] x86_64_start_kernel+0x130/0x190 [ 533.022661][ C0] common_startup_64+0x13e/0x148 [ 533.027599][ C0]