last executing test programs: 10.661117661s ago: executing program 0 (id=507): socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x16440, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x0, 0x0, 0xb49, 0xda, 0x8, 0x4, 0x3}, 0x0) socket(0x25, 0x800, 0x9) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x30101) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x8, 0x400) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f00000003c0)={0x3, 0x0, '\x00', {0x0, @reserved}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000002c0)=0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = socket(0x1e, 0x1, 0x0) shutdown(r8, 0x2) ppoll(&(0x7f0000000440)=[{r8}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 10.096219973s ago: executing program 2 (id=509): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgid(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TCSETSF2(r1, 0x4d13, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000300)={{0x9, 0x4, 0x80, 0x7, 'syz1\x00', 0xfff}, 0x2, 0x20000000, 0x0, r0, 0x3, 0xc2d0, 'syz0\x00', &(0x7f0000000080)=['syzkaller1\x00', 'syzkaller1\x00', '][}/\'/[h\x00'], 0x1f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x13) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x86) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x60000000}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe48, 0x9f1, 0x17, "de98cd550c0f9c4a"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x28, 0x3d, 0x9, 0x0, 0x7000000, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 10.087051829s ago: executing program 4 (id=510): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) setrlimit(0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 8.732988718s ago: executing program 2 (id=511): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4212, r0, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000431000/0x2000)=nil, 0x2000, 0xa) pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) ptrace$setregs(0xf, r0, 0x4, &(0x7f0000000180)) 8.465246587s ago: executing program 4 (id=512): r0 = socket$netlink(0x10, 0x3, 0x14) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) (async) socket$inet6(0xa, 0x80002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, 0x0, 0x3) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, &(0x7f00000005c0)="100c0681fc317e27cb0ad775b3012cb75126f157defdc1eeb114a72988c5da61ab7db3d452e8d0e629f0b65aab9b42ab51d718db2bbc8886c434f75e424ab53114f75b9b1f80d23886bc1e730b129184e835c5ce1ee5726d91786c07c91e7b41d6444906fea8ad4793ea4257b4b232f067eabae72b25170e13281c80fea90dbfb1ab7b67bba3144bd52ecb9eafaccf783a9d4400000000000000ccac348fb47141313c697b1a3ab44a11bd6113bc4c015b3376cb6cd7eeef14e3c511b782505167f818f3bce67527", 0xc8, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x0, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000006080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000500010000001400040070"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000000)={0x9, 0x0}) (async) removexattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00') (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) 8.246786506s ago: executing program 2 (id=513): r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xff, 0x0, 0x3, 0x0, 0x3}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x80800) 7.219225112s ago: executing program 2 (id=514): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x4, 0x20040}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) syz_io_uring_setup(0x2712, 0x0, &(0x7f00000002c0), &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={0x1d8, r3, 0x1, 0x0, 0x80000000, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c4, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xfe, 0x2, "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"}}, {0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb6, 0x1, "88640d6899095baccf00231a1ab01bf557a1218a47ccb8fac232dfe16c9b164e1a1173d5b068af9ddd4985be32b502cc015963706cf9d22aa72788ec87f2671e4a25c93019600b13e693653d4aa4d40f165cd596ffdbeac3663520a3e22481ab30cef2d154a3c3c3b996c1bc9b2eb3fcc977799a93bedab3ec67acb8dd1d5dcf28dcd613bb4b58f5c91b04b46e4122d5026b39abc3ded3612d91261f6c997c80927582604a60dea67ea16e7fcc543c23158d"}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa706ab144ffe008004500005800000000002f9078ac1414bbac1414bbb481880b0000000000000800000086dd100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"/102], 0x0) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.915951962s ago: executing program 1 (id=517): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x2000000e9, 0x2) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sed\x00', 0x1d, 0x0, 0x3d}, {@remote, 0x4e20, 0x21bd03c3b4675b91, 0x4}}, 0x44) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4008809) openat$kvm(0xffffffffffffff9c, 0x0, 0x80001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@hyper}) mount(0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)='usrquota') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x48, r3, 0x0, 0x0, 0x0}) 6.701518077s ago: executing program 3 (id=518): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgid(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TCSETSF2(r1, 0x4d13, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000300)={{0x9, 0x4, 0x80, 0x7, 'syz1\x00', 0xfff}, 0x2, 0x20000000, 0x0, r0, 0x3, 0xc2d0, 'syz0\x00', &(0x7f0000000080)=['syzkaller1\x00', 'syzkaller1\x00', '][}/\'/[h\x00'], 0x1f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x13) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x86) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x60000000}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe48, 0x9f1, 0x17, "de98cd550c0f9c4a"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x28, 0x3d, 0x9, 0x0, 0x7000000, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 6.545693813s ago: executing program 1 (id=519): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000000)=0x64a3) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe971}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r1) 5.846551867s ago: executing program 4 (id=520): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r2, @ANYBLOB="566ab84c42a01ea6ff16f8a63e2e2e510ca8556bee67f45dec5611a967a81121e99d317af694c44380c4b5f7134b3272d19e35594de25d45b9a7cdc01954de1ef293"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.762598263s ago: executing program 1 (id=521): socket$inet(0x2, 0x4000000000000001, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x100000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 5.677023245s ago: executing program 3 (id=522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.617671552s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x70}}, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x8, 0x2, 0x94, 0x800, 0x2, "51d79b4091cca2809b39e3b144592f1880a698"}) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xff, 0x0, 0x3, 0x0, 0x3}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x80800) 3.965748014s ago: executing program 4 (id=526): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x6c6c9c9e, 0x0) read$msr(r0, &(0x7f000001b5c0)=""/102368, 0x18fe0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0xfffffff6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) 3.267894383s ago: executing program 3 (id=527): r0 = socket(0x1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x2b00000000000000, 0x3000, 0x1000004, 0xe, 0x3d}) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@host, 0x7}, 0x1, 0x0, 0xc3d}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d28616573292900"/234, @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) sendmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x810}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0xc9}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8801}}], 0x2, 0x0) 3.24170809s ago: executing program 4 (id=528): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sysfs$1(0x1, &(0x7f0000000380)='\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) socket$netlink(0x10, 0x3, 0x12) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000005e40)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8855}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.07824184s ago: executing program 0 (id=529): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x2fc6, {0x1, 0x7, 0x0, '\x00', {0x1, 0x38c, 0x1, 0x8, 0x0, 0x0, 0x0, '\x00', 0xe, 0x6, 0x7, 0x6, {0x1006, 0x6}, {0x20000000000004}, {0xa, 0x8fc}, {0xd8, 0xa04}, 0x7, 0x80000e, 0x5, 0x3}}}}) getgroups(0x8, &(0x7f0000000340)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0x0, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES8], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x1264, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0xd69b9000) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000003194b4b3463846f1ea8202010101000007000001080003400000000001000100"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f00000004c0)="4c0cdf0445ba000395dcab4744b833d9d4ae5e5a7e9be6f618ccced6521ec2ad74b9f9b9550ba6c2f30e6ac6e9cde0467fd86c6c73044dfa24602cdd981a89a28e702e095edac4e021db7e7502bb3536d8612e5ce7cc0e45f24b2a7e69bb8440a59abd0407a33ca5b40034093db97925c1e84d30791082dd340e8611e5a5f98ee5f2f366603a9575bdad330d1c282c7badcf5238dbeee4d600baa5ef31f97da05478d2468afe4a9d02d7a8461b7cdb167ca7c872026e81815152c2774021058f984eb7", &(0x7f00000001c0)="70ecb7a7fbbc13402ab45993cbd6d8eef036", 0x2, r4, 0x4}, 0x38) close_range(r9, 0xffffffffffffffff, 0x0) 1.925989773s ago: executing program 3 (id=530): sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x10}}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f00000000c0)={0x7, 0x0, 0x300c, 0x200, 0x7, 0x80000000, 0x9, 0x1}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf0) 1.923202059s ago: executing program 0 (id=531): r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) 1.695459003s ago: executing program 1 (id=532): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, 0xfffffffffffffffd) 1.429182046s ago: executing program 0 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xa0}}, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x8, 0x2, 0x94, 0x800, 0x2, "51d79b4091cca2809b39e3b144592f1880a698"}) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0xf0ffff) 913.756364ms ago: executing program 2 (id=536): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0xfffffffffffffffc, 0x1, 0x1}}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000047fb0fed762a1ce083b54c6e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006469676573745f6e756c6c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/316], 0x184}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) 557.005384ms ago: executing program 0 (id=537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x21, 0x78, {0x78, 0x24, "53ad60947d6f4e0627ce8208f799c5fc289ffdeebbe3770b9f1b7d1f032b7277f0f256686f8d0755fafe10763703efd1d1e8484b4869e316a45929758e71bdb2cfefff64165793b5c14818171f4a7710650b631e5ecb258eca403b892b46dc291c835e5fc027a601d47fd6e741e71eaf6c21f026e80b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 535.285607ms ago: executing program 3 (id=538): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fcntl$getflags(r2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6522, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x401, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe12a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) vmsplice(r4, 0x0, 0x0, 0x3) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 2 (id=539): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}]}, 0x28}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000002c0)={{0x6c, @empty, 0x4e23, 0x5, 'fo\x00', 0xd, 0x800, 0x7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x7, 0x3, 0xfff}}, 0x44) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r9 = dup(r8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x9, 0x2, 0x1) write$UHID_INPUT(r9, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): dm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.457256][ T30] audit: type=1400 audit(1759924427.895:239): avc: denied { listen } for pid=6153 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.509956][ T30] audit: type=1400 audit(1759924427.945:240): avc: denied { accept } for pid=6153 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.594570][ T5901] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.641349][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.68'. [ 85.668431][ T6163] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.668585][ T6163] block device autoloading is deprecated and will be removed. [ 85.776045][ T5901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.776082][ T5901] usb 1-1: config 0 has no interface number 0 [ 85.776118][ T5901] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 85.776139][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.786016][ T6157] md: could not open device unknown-block(128,0). [ 85.786095][ T6157] md: md_import_device returned -6 [ 85.828588][ T6157] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.828602][ T6157] netlink: 228 bytes leftover after parsing attributes in process `syz.4.69'. [ 85.829599][ T5901] usb 1-1: config 0 descriptor?? [ 85.831878][ T5901] usb 1-1: selecting invalid altsetting 1 [ 85.842379][ T6167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.975065][ T5901] dvb_ttusb_budget: ttusb_init_controller: error [ 85.981950][ T5901] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 85.991037][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.053725][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.240621][ T5901] DVB: Unable to find symbol cx22700_attach() [ 86.566754][ T6184] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 86.614715][ T5857] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 87.057113][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.063270][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.108459][ T5901] DVB: Unable to find symbol tda10046_attach() [ 87.137767][ T5901] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 87.259296][ T6188] /dev/sg0: Can't lookup blockdev [ 87.283308][ T6188] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[6188] [ 87.396852][ T5901] usb 1-1: USB disconnect, device number 2 [ 87.410127][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.433492][ T5857] usb 2-1: not running at top speed; connect to a high speed hub [ 87.465919][ T5857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.486814][ T5857] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.505625][ T5857] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.549508][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.565361][ T5857] usb 2-1: Product: syz [ 87.577375][ T5857] usb 2-1: Manufacturer: syz [ 87.585396][ T5857] usb 2-1: SerialNumber: syz [ 88.251800][ T910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.387894][ T6202] ======================================================= [ 88.387894][ T6202] WARNING: The mand mount option has been deprecated and [ 88.387894][ T6202] and is ignored by this kernel. Remove the mand [ 88.387894][ T6202] option from the mount to silence this warning. [ 88.387894][ T6202] ======================================================= [ 88.444596][ T910] usb 3-1: Using ep0 maxpacket: 16 [ 88.522941][ T910] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 88.525302][ T5857] usb 2-1: USB disconnect, device number 4 [ 88.560239][ T910] usb 3-1: config 0 has no interface number 0 [ 88.752416][ T910] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.763587][ T910] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.778794][ T910] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 88.788069][ T910] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 88.796260][ T910] usb 3-1: Product: syz [ 88.800477][ T910] usb 3-1: SerialNumber: syz [ 88.812022][ T910] usb 3-1: config 0 descriptor?? [ 88.833833][ T910] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 88.849397][ T910] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 88.905719][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.949124][ T6199] /dev/sg0: Can't lookup blockdev [ 89.005058][ T6199] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[6199] [ 89.020701][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 89.084628][ T5901] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 89.776681][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 89.776694][ T30] audit: type=1400 audit(1759924431.755:258): avc: denied { unmount } for pid=6204 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.984500][ T30] audit: type=1400 audit(1759924432.325:259): avc: denied { create } for pid=6187 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.275161][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.316233][ T5901] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 90.335788][ T5901] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 90.340896][ T30] audit: type=1400 audit(1759924432.325:260): avc: denied { ioctl } for pid=6187 comm="syz.2.77" path="socket:[9984]" dev="sockfs" ino=9984 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.413272][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.509855][ T5901] usb 5-1: config 0 descriptor?? [ 90.700793][ T6217] trusted_key: encrypted_key: insufficient parameters specified [ 90.842299][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.852871][ T6219] netlink: 304 bytes leftover after parsing attributes in process `syz.0.83'. [ 90.868527][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 90.876620][ T30] audit: type=1400 audit(1759924433.305:261): avc: denied { append } for pid=6211 comm="syz.0.83" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.889180][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.738829][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.747251][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.754374][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.761518][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.768753][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.776276][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.784106][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.785995][ T6229] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 91.792677][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.807214][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.814146][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 91.842507][ T5857] usb 3-1: USB disconnect, device number 3 [ 91.934753][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.942843][ T5901] usb 5-1: media controller created [ 91.968280][ T5857] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 91.986803][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.032403][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 92.038943][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 92.048716][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 92.061159][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 92.068325][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 92.081317][ T5901] usb 5-1: USB disconnect, device number 3 [ 92.115217][ T6232] block nbd0: Unsupported socket: should be TCP or UNIX. [ 92.440075][ T30] audit: type=1400 audit(1759924434.875:262): avc: denied { write } for pid=6234 comm="syz.1.90" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.462512][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.538532][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 92.758713][ T6242] affs: No valid root block on device nullb0 [ 93.335317][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.341722][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.347841][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 93.449262][ T30] audit: type=1400 audit(1759924435.875:263): avc: denied { remount } for pid=6246 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.505633][ T30] audit: type=1400 audit(1759924436.935:264): avc: denied { open } for pid=6262 comm="syz.2.98" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 94.529027][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.563345][ T6276] block device autoloading is deprecated and will be removed. [ 95.925428][ T6281] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 96.852156][ T6270] /dev/sg0: Can't lookup blockdev [ 97.215222][ T30] audit: type=1400 audit(1759924439.645:265): avc: denied { mount } for pid=6285 comm="syz.4.105" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.433676][ T30] audit: type=1400 audit(1759924439.865:266): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.586799][ T6301] FAULT_INJECTION: forcing a failure. [ 98.586799][ T6301] name failslab, interval 1, probability 0, space 0, times 1 [ 98.775113][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT(full) [ 98.775137][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.775146][ T6301] Call Trace: [ 98.775151][ T6301] [ 98.775157][ T6301] dump_stack_lvl+0x16c/0x1f0 [ 98.775187][ T6301] should_fail_ex+0x512/0x640 [ 98.775211][ T6301] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 98.775237][ T6301] should_failslab+0xc2/0x120 [ 98.775256][ T6301] kmem_cache_alloc_noprof+0x75/0x6e0 [ 98.775279][ T6301] ? alloc_pid+0xc7/0xbc0 [ 98.775300][ T6301] ? alloc_pid+0xc7/0xbc0 [ 98.775313][ T6301] alloc_pid+0xc7/0xbc0 [ 98.775335][ T6301] copy_process+0x49a3/0x76a0 [ 98.775369][ T6301] ? __pfx_copy_process+0x10/0x10 [ 98.775394][ T6301] ? lockdep_init_map_type+0x5c/0x280 [ 98.775414][ T6301] ? lockdep_init_map_type+0x5c/0x280 [ 98.775430][ T6301] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 98.775453][ T6301] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 98.775473][ T6301] vhost_task_create+0x1d2/0x370 [ 98.775491][ T6301] ? __pfx_vhost_task_create+0x10/0x10 [ 98.775515][ T6301] ? __pfx_vhost_task_fn+0x10/0x10 [ 98.775544][ T6301] kvm_mmu_post_init_vm+0x1b7/0x380 [ 98.775564][ T6301] kvm_arch_vcpu_ioctl_run+0x66/0x1970 [ 98.775589][ T6301] ? kvm_vcpu_ioctl+0x14c5/0x1690 [ 98.775612][ T6301] kvm_vcpu_ioctl+0x5eb/0x1690 [ 98.775633][ T6301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.775651][ T6301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.775675][ T6301] ? do_vfs_ioctl+0x128/0x14f0 [ 98.775698][ T6301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.775721][ T6301] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.775748][ T6301] ? hook_file_ioctl_common+0x145/0x410 [ 98.775775][ T6301] ? selinux_file_ioctl+0x180/0x270 [ 98.775791][ T6301] ? selinux_file_ioctl+0xb4/0x270 [ 98.775808][ T6301] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.775827][ T6301] __x64_sys_ioctl+0x18b/0x210 [ 98.775852][ T6301] do_syscall_64+0xcd/0xfa0 [ 98.775878][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.775895][ T6301] RIP: 0033:0x7fca5158eec9 [ 98.775909][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.775924][ T6301] RSP: 002b:00007fca523fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.775941][ T6301] RAX: ffffffffffffffda RBX: 00007fca517e5fa0 RCX: 00007fca5158eec9 [ 98.775951][ T6301] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 98.775960][ T6301] RBP: 00007fca523fe090 R08: 0000000000000000 R09: 0000000000000000 [ 98.775969][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.775978][ T6301] R13: 00007fca517e6038 R14: 00007fca517e5fa0 R15: 00007ffd683f7818 [ 98.776002][ T6301] [ 99.405478][ T5857] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.427761][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 99.647026][ T5857] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 99.774524][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.804486][ T5857] usb 5-1: Product: syz [ 99.808675][ T5857] usb 5-1: Manufacturer: syz [ 99.813273][ T5857] usb 5-1: SerialNumber: syz [ 99.892224][ T5857] usb 5-1: config 0 descriptor?? [ 100.987658][ T42] usb 5-1: USB disconnect, device number 4 [ 101.072688][ T30] audit: type=1400 audit(1759924443.505:267): avc: denied { write } for pid=6313 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.558802][ T30] audit: type=1400 audit(1759924443.525:268): avc: denied { map } for pid=6313 comm="syz.1.111" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.436182][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.610112][ T30] audit: type=1400 audit(1759924443.525:269): avc: denied { execute } for pid=6313 comm="syz.1.111" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.694612][ T1213] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.082679][ T30] audit: type=1400 audit(1759924444.155:270): avc: denied { create } for pid=6322 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.242116][ T30] audit: type=1400 audit(1759924444.235:271): avc: denied { create } for pid=6323 comm="syz.0.112" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.247596][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 103.268712][ T30] audit: type=1400 audit(1759924445.595:272): avc: denied { setopt } for pid=6337 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.291661][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'. [ 103.301626][ T30] audit: type=1400 audit(1759924445.725:273): avc: denied { create } for pid=6334 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.536584][ T1213] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 103.549836][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 29, changing to 8 [ 103.552761][ T30] audit: type=1400 audit(1759924445.725:274): avc: denied { write } for pid=6334 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.562197][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.744336][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 103.767739][ T1213] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 104.669262][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.699141][ T30] audit: type=1400 audit(1759924447.135:275): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.722849][ T1213] usb 1-1: config 0 descriptor?? [ 104.836114][ T1213] usb 1-1: can't set config #0, error -71 [ 104.839289][ T30] audit: type=1400 audit(1759924447.245:276): avc: denied { read } for pid=6356 comm="syz.3.119" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.856430][ T1213] usb 1-1: USB disconnect, device number 3 [ 105.085059][ T6360] rdma_op ffff88805544e9f0 conn xmit_rdma 0000000000000000 [ 105.290754][ T30] audit: type=1400 audit(1759924447.315:277): avc: denied { open } for pid=6356 comm="syz.3.119" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.317214][ T30] audit: type=1400 audit(1759924447.475:278): avc: denied { write } for pid=6354 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.473543][ T6379] Invalid ELF header type: 3 != 1 [ 106.480786][ T6379] netlink: 592 bytes leftover after parsing attributes in process `syz.3.126'. [ 107.827280][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 107.827295][ T30] audit: type=1400 audit(1759924448.905:280): avc: denied { module_load } for pid=6378 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 108.147983][ T30] audit: type=1400 audit(1759924450.565:281): avc: denied { create } for pid=6392 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.168249][ C1] sd 0:0:1:0: [sda] tag#4237 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 108.178648][ C1] sd 0:0:1:0: [sda] tag#4237 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 108.354494][ T30] audit: type=1400 audit(1759924450.595:282): avc: denied { ioctl } for pid=6390 comm="syz.3.127" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.365869][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.379689][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.424584][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.471204][ T30] audit: type=1400 audit(1759924450.865:283): avc: denied { ioctl } for pid=6392 comm="syz.1.128" path="socket:[11509]" dev="sockfs" ino=11509 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.749996][ T6405] netlink: 144 bytes leftover after parsing attributes in process `syz.3.131'. [ 108.855417][ T30] audit: type=1400 audit(1759924451.295:284): avc: denied { append } for pid=6402 comm="syz.4.130" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.965230][ T6408] 9pnet_virtio: no channels available for device syz [ 111.643892][ T30] audit: type=1400 audit(1759924454.075:285): avc: denied { create } for pid=6423 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.663127][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.747356][ T30] audit: type=1400 audit(1759924454.075:286): avc: denied { setopt } for pid=6423 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.237127][ T30] audit: type=1400 audit(1759924454.495:287): avc: denied { ioctl } for pid=6431 comm="syz.4.138" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 113.377783][ T30] audit: type=1400 audit(1759924455.775:288): avc: denied { connect } for pid=6438 comm="syz.1.142" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.706964][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 113.754583][ T30] audit: type=1400 audit(1759924455.775:289): avc: denied { name_connect } for pid=6438 comm="syz.1.142" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 114.394902][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.604620][ T5857] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 114.672564][ T30] audit: type=1400 audit(1759924457.105:290): avc: denied { read } for pid=6458 comm="syz.3.146" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.726474][ T6466] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.748178][ T30] audit: type=1400 audit(1759924457.105:291): avc: denied { open } for pid=6458 comm="syz.3.146" path="/40/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.780109][ T6466] block device autoloading is deprecated and will be removed. [ 114.809507][ T6464] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 114.819082][ T6464] netlink: 228 bytes leftover after parsing attributes in process `syz.3.146'. [ 114.869510][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 114.908538][ T5857] usb 3-1: can't read configurations, error -61 [ 115.075051][ T5857] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 115.183164][ T6477] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 115.252711][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 115.984010][ T5857] usb 3-1: can't read configurations, error -61 [ 115.991053][ T5857] usb usb3-port1: attempt power cycle [ 116.162459][ T30] audit: type=1400 audit(1759924458.585:292): avc: denied { connect } for pid=6480 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.181863][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.345740][ T5857] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 116.364646][ T30] audit: type=1400 audit(1759924458.585:293): avc: denied { write } for pid=6480 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.490901][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 116.498672][ T5857] usb 3-1: can't read configurations, error -61 [ 117.084511][ T5857] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.441227][ T5857] usb 3-1: device not accepting address 7, error -71 [ 117.451747][ T5857] usb usb3-port1: unable to enumerate USB device [ 117.553102][ T6496] /dev/sg0: Can't lookup blockdev [ 117.804521][ T30] audit: type=1400 audit(1759924460.075:294): avc: denied { shutdown } for pid=6492 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.851980][ T6500] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 117.871315][ T30] audit: type=1400 audit(1759924460.275:295): avc: denied { read } for pid=6492 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.921592][ T30] audit: type=1400 audit(1759924460.355:296): avc: denied { ioctl } for pid=6492 comm="syz.1.157" path="socket:[11694]" dev="sockfs" ino=11694 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.174534][ T5857] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.247505][ T6504] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=6504 comm=syz.3.159 [ 118.284609][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.284830][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.319738][ T6506] netlink: 220 bytes leftover after parsing attributes in process `syz.3.159'. [ 118.354479][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 118.370170][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.378133][ T5857] usb 3-1: can't read configurations, error -61 [ 118.528168][ T5857] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.108544][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 119.150466][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 119.168009][ T5857] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 119.193027][ T5857] usb 3-1: can't read configurations, error -61 [ 119.200578][ T5857] usb usb3-port1: attempt power cycle [ 119.483963][ T6521] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 119.533177][ T30] audit: type=1400 audit(1759924461.935:297): avc: denied { name_connect } for pid=6516 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 120.045679][ T30] audit: type=1400 audit(1759924461.955:298): avc: denied { listen } for pid=6516 comm="syz.1.163" lport=35401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.077391][ T30] audit: type=1400 audit(1759924461.955:299): avc: denied { accept } for pid=6516 comm="syz.1.163" lport=35401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.169968][ T30] audit: type=1400 audit(1759924461.955:300): avc: denied { setopt } for pid=6516 comm="syz.1.163" lport=35401 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 121.101704][ T30] audit: type=1400 audit(1759924463.475:301): avc: denied { ioctl } for pid=6531 comm="syz.1.166" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.454497][ T30] audit: type=1400 audit(1759924463.875:302): avc: denied { connect } for pid=6538 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.557951][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 121.644536][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.680042][ T30] audit: type=1400 audit(1759924464.105:303): avc: denied { mount } for pid=6541 comm="syz.4.171" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.804856][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 121.811354][ T5901] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.821687][ T5901] usb 2-1: config 0 has no interface number 0 [ 121.831129][ T5901] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.849796][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.890285][ T5901] usb 2-1: Product: syz [ 121.900341][ T5901] usb 2-1: Manufacturer: syz [ 121.909350][ T5901] usb 2-1: SerialNumber: syz [ 121.925841][ T5901] usb 2-1: config 0 descriptor?? [ 121.934955][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 121.939853][ T5901] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.037711][ T30] audit: type=1400 audit(1759924464.475:304): avc: denied { create } for pid=6554 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.081123][ T6558] sctp: [Deprecated]: syz.0.173 (pid 6558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.081123][ T6558] Use struct sctp_sack_info instead [ 122.146344][ T30] audit: type=1400 audit(1759924464.585:305): avc: denied { ioctl } for pid=6531 comm="syz.1.166" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.193804][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.216565][ T5901] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.325467][ T6547] syz.3.170 (6547) used greatest stack depth: 19448 bytes left [ 122.378844][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.387126][ T5901] usb 2-1: USB disconnect, device number 5 [ 122.446255][ T5901] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.551496][ T5901] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.580899][ T5901] quatech2 2-1:0.51: device disconnected [ 123.149242][ T30] audit: type=1400 audit(1759924465.545:306): avc: denied { read append } for pid=6566 comm="syz.4.176" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.091331][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6574 comm=syz.2.178 [ 124.800279][ T6241] udevd[6241]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 124.835819][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 124.835833][ T30] audit: type=1400 audit(1759924467.275:308): avc: denied { kexec_image_load } for pid=6575 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 125.465403][ T6595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.361528][ T30] audit: type=1400 audit(1759924468.795:309): avc: denied { write } for pid=6599 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.380918][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.457375][ T30] audit: type=1400 audit(1759924468.825:310): avc: denied { write } for pid=6599 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.476928][ T30] audit: type=1400 audit(1759924468.825:311): avc: denied { ioctl } for pid=6599 comm="syz.1.184" path="socket:[11913]" dev="sockfs" ino=11913 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.477670][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.185'. [ 126.501519][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.537240][ T30] audit: type=1400 audit(1759924468.965:312): avc: denied { write } for pid=6599 comm="syz.1.184" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.732984][ T30] audit: type=1400 audit(1759924469.165:313): avc: denied { ioctl } for pid=6602 comm="syz.2.185" path="socket:[12445]" dev="sockfs" ino=12445 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.815090][ T5890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.026515][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 127.065780][ T5890] usb 2-1: config 5 has an invalid interface number: 52 but max is 1 [ 127.131245][ T5890] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 127.269503][ T5890] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 127.391413][ T5890] usb 2-1: config 5 has no interface number 0 [ 127.424024][ T5890] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 127.463343][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.508259][ T5890] usb 2-1: Product: syz [ 127.512468][ T5890] usb 2-1: Manufacturer: syz [ 127.558886][ T5890] usb 2-1: SerialNumber: syz [ 127.578964][ T6612] FAULT_INJECTION: forcing a failure. [ 127.578964][ T6612] name failslab, interval 1, probability 0, space 0, times 0 [ 127.592660][ T30] audit: type=1400 audit(1759924470.015:314): avc: denied { write } for pid=6610 comm="syz.4.187" name="fib_trie" dev="proc" ino=4026532818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 127.615442][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.622320][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.4.187 Not tainted syzkaller #0 PREEMPT(full) [ 127.622341][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.622349][ T6612] Call Trace: [ 127.622354][ T6612] [ 127.622358][ T6612] dump_stack_lvl+0x16c/0x1f0 [ 127.622377][ T6612] should_fail_ex+0x512/0x640 [ 127.622393][ T6612] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 127.622405][ T6612] should_failslab+0xc2/0x120 [ 127.622417][ T6612] __kvmalloc_node_noprof+0x141/0x9c0 [ 127.622428][ T6612] ? traverse.part.0.constprop.0+0x397/0x650 [ 127.622448][ T6612] ? traverse.part.0.constprop.0+0x397/0x650 [ 127.622462][ T6612] traverse.part.0.constprop.0+0x397/0x650 [ 127.622478][ T6612] ? _kstrtoull+0x145/0x200 [ 127.622490][ T6612] ? __pfx__kstrtoull+0x10/0x10 [ 127.622503][ T6612] seq_read_iter+0x93c/0x12d0 [ 127.622524][ T6612] seq_read+0x3a3/0x570 [ 127.622539][ T6612] ? __pfx_seq_read+0x10/0x10 [ 127.622557][ T6612] ? get_pid_task+0xfc/0x250 [ 127.622568][ T6612] ? avc_policy_seqno+0x9/0x20 [ 127.622584][ T6612] ? __pfx_seq_read+0x10/0x10 [ 127.622598][ T6612] proc_reg_read+0x240/0x330 [ 127.622613][ T6612] ? __pfx_proc_reg_read+0x10/0x10 [ 127.622627][ T6612] vfs_read+0x1e1/0xcf0 [ 127.622646][ T6612] ? __pfx_vfs_read+0x10/0x10 [ 127.622660][ T6612] ? find_held_lock+0x2b/0x80 [ 127.622673][ T6612] ? __fget_files+0x204/0x3c0 [ 127.622685][ T6612] ? __fget_files+0x20e/0x3c0 [ 127.622694][ T6612] ? __fget_files+0x1e0/0x3c0 [ 127.622707][ T6612] __x64_sys_pread64+0x1eb/0x250 [ 127.622722][ T6612] ? __pfx___x64_sys_pread64+0x10/0x10 [ 127.622736][ T6612] do_syscall_64+0xcd/0xfa0 [ 127.622752][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.622762][ T6612] RIP: 0033:0x7f9c6298eec9 [ 127.622771][ T6612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.622781][ T6612] RSP: 002b:00007f9c638a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 127.622791][ T6612] RAX: ffffffffffffffda RBX: 00007f9c62be6090 RCX: 00007f9c6298eec9 [ 127.622797][ T6612] RDX: 0000000000018fd3 RSI: 0000200000019180 RDI: 000000000000000b [ 127.622803][ T6612] RBP: 00007f9c638a2090 R08: 0000000000000000 R09: 0000000000000000 [ 127.622809][ T6612] R10: 0000000000000c2a R11: 0000000000000246 R12: 0000000000000001 [ 127.622814][ T6612] R13: 00007f9c62be6128 R14: 00007f9c62be6090 R15: 00007ffee9a368c8 [ 127.622828][ T6612] [ 127.861735][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.115460][ T5890] cytherm 2-1:5.52: Cypress thermometer device now attached [ 128.126871][ T5890] usb 2-1: USB disconnect, device number 6 [ 128.133570][ T5890] cytherm 2-1:5.52: Cypress thermometer now disconnected [ 128.356022][ T6615] /dev/sg0: Can't lookup blockdev [ 128.783615][ T30] audit: type=1400 audit(1759924471.215:315): avc: denied { read } for pid=6622 comm="syz.0.191" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 128.859465][ T30] audit: type=1400 audit(1759924471.215:316): avc: denied { open } for pid=6622 comm="syz.0.191" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 129.124673][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.784442][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 129.791347][ T5901] usb 2-1: config 0 has no interfaces? [ 129.850576][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.974737][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.984059][ T5901] usb 2-1: Product: syz [ 129.989850][ T5901] usb 2-1: Manufacturer: syz [ 129.994960][ T5901] usb 2-1: SerialNumber: syz [ 130.002201][ T5901] usb 2-1: config 0 descriptor?? [ 130.404565][ T30] audit: type=1400 audit(1759924472.825:317): avc: denied { ioctl } for pid=6637 comm="syz.0.196" path="/35/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 130.428998][ T6638] md: could not open device unknown-block(128,0). [ 130.444343][ T6638] md: md_import_device returned -6 [ 130.469172][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.508438][ T6638] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 130.564340][ T6638] netlink: 228 bytes leftover after parsing attributes in process `syz.0.196'. [ 130.782349][ T6651] overlay: Unknown parameter 'smackfsdef' [ 131.138114][ T6655] mkiss: ax0: crc mode is auto. [ 131.145716][ T30] audit: type=1400 audit(1759924473.585:318): avc: denied { connect } for pid=6646 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.369681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.376347][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.978939][ T30] audit: type=1400 audit(1759924475.405:319): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.006276][ T6636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.065030][ T30] audit: type=1400 audit(1759924475.405:320): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.090839][ T30] audit: type=1400 audit(1759924475.405:321): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.131430][ T30] audit: type=1400 audit(1759924475.405:322): avc: denied { read } for pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=2842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.154652][ T30] audit: type=1400 audit(1759924475.405:323): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.182545][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 133.200897][ T30] audit: type=1400 audit(1759924475.405:324): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.225057][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 133.297410][ T30] audit: type=1400 audit(1759924475.475:325): avc: denied { ioctl } for pid=6659 comm="syz.0.199" path="socket:[12217]" dev="sockfs" ino=12217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.322737][ T5901] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.322737][ T910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.445146][ T6670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.202'. [ 133.464741][ T910] usb 3-1: device descriptor read/64, error -71 [ 133.488692][ T5901] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 133.530042][ T6671] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 134.304570][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.312814][ T5901] usb 1-1: Product: syz [ 134.538929][ T5901] usb 1-1: Manufacturer: syz [ 134.545486][ T5901] usb 1-1: SerialNumber: syz [ 134.603297][ T5901] usb 1-1: config 0 descriptor?? [ 134.632072][ T5901] hub 1-1:0.0: bad descriptor, ignoring hub [ 134.665626][ T42] usb 2-1: USB disconnect, device number 7 [ 134.694730][ T5901] hub 1-1:0.0: probe with driver hub failed with error -5 [ 134.702461][ T5901] f81232 1-1:0.0: f81534a converter detected [ 134.773294][ T6674] No control pipe specified [ 134.811942][ T30] audit: type=1400 audit(1759924477.245:326): avc: denied { nlmsg_read } for pid=6659 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.811979][ T6660] netlink: 136 bytes leftover after parsing attributes in process `syz.0.199'. [ 135.104598][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 135.226036][ T5901] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 135.255794][ T5901] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 135.298367][ T5901] usb 1-1: USB disconnect, device number 4 [ 135.315424][ T5901] f81232 1-1:0.0: device disconnected [ 135.454762][ T910] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.474592][ T42] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 135.618143][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 135.629650][ T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.640864][ T910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.659327][ T42] usb 2-1: config 0 has an invalid interface number: 141 but max is 0 [ 135.668132][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.679317][ T910] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 135.688845][ T42] usb 2-1: config 0 has no interface number 0 [ 135.695267][ T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.703432][ T42] usb 2-1: config 0 interface 141 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.720115][ T910] usb 3-1: config 0 descriptor?? [ 135.730732][ T42] usb 2-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=17.7d [ 135.747815][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.767958][ T42] usb 2-1: Product: syz [ 135.774747][ T42] usb 2-1: Manufacturer: syz [ 135.779561][ T42] usb 2-1: SerialNumber: syz [ 135.803269][ T42] usb 2-1: config 0 descriptor?? [ 135.813117][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 135.823107][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 135.929646][ T910] usbhid 3-1:0.0: can't add hid device: -71 [ 135.947581][ T910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 135.978821][ T910] usb 3-1: USB disconnect, device number 12 [ 136.544516][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.694531][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 136.703660][ T24] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 136.711960][ T24] usb 4-1: config 0 has no interface number 0 [ 136.723632][ T24] usb 4-1: config 0 interface 48 has no altsetting 0 [ 136.744885][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 136.754030][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.762882][ T24] usb 4-1: Product: syz [ 136.769285][ T24] usb 4-1: Manufacturer: syz [ 136.920711][ T24] usb 4-1: SerialNumber: syz [ 136.940782][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.215'. [ 136.948085][ T24] usb 4-1: config 0 descriptor?? [ 137.049367][ T6714] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 137.924520][ T910] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.056919][ T6717] syzkaller1: entered promiscuous mode [ 138.184985][ T6717] syzkaller1: entered allmulticast mode [ 138.270625][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 138.272553][ T30] audit: type=1400 audit(1759924480.605:328): avc: denied { setopt } for pid=6718 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.405313][ T910] usb 1-1: Using ep0 maxpacket: 16 [ 138.412093][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.423730][ T910] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 138.434002][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.738752][ T6729] netlink: 'syz.4.218': attribute type 10 has an invalid length. [ 139.311124][ T910] usb 1-1: config 0 descriptor?? [ 140.427199][ T30] audit: type=1326 audit(1759924482.865:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 140.655664][ T30] audit: type=1326 audit(1759924482.945:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 140.695348][ T30] audit: type=1326 audit(1759924482.945:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 140.775395][ T30] audit: type=1326 audit(1759924482.945:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 140.926884][ T6744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.968657][ T42] uvcvideo 2-1:0.141: Found UVC 0.00 device syz (0408:4035) [ 140.984518][ T42] uvcvideo 2-1:0.141: Forcing UVC version to 1.0a [ 140.991010][ T42] uvcvideo 2-1:0.141: No valid video chain found. [ 141.008693][ T30] audit: type=1326 audit(1759924482.945:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 141.047010][ T42] usb 2-1: USB disconnect, device number 8 [ 141.103524][ T30] audit: type=1326 audit(1759924482.945:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 141.130182][ T5940] usb 4-1: USB disconnect, device number 3 [ 141.162760][ T30] audit: type=1326 audit(1759924482.945:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 141.252873][ T52] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 141.260498][ T52] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 141.271047][ T30] audit: type=1326 audit(1759924483.065:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 141.294573][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.303732][ T30] audit: type=1326 audit(1759924483.065:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6712 comm="syz.0.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5158eec9 code=0x7ffc0000 [ 141.936116][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.947043][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 141.957028][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.973189][ T24] usb 5-1: config 0 descriptor?? [ 142.032621][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 142.126035][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 142.771089][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 142.812456][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 142.820863][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 142.830371][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 142.837856][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 142.851442][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 142.859932][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 142.870439][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 142.881405][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 142.890182][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 142.898895][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 143.108302][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 143.117096][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 143.130342][ T5814] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 143.138331][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 143.148615][ T24] pwc: recv_control_msg error -32 req 04 val 1200 [ 143.162542][ T24] pwc: Registered as video103. [ 143.184630][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 143.674743][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 143.674783][ T30] audit: type=1400 audit(1759924486.105:368): avc: denied { read write } for pid=6776 comm="syz.2.231" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.531886][ T30] audit: type=1400 audit(1759924486.105:369): avc: denied { open } for pid=6776 comm="syz.2.231" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.556611][ T910] usbhid 1-1:0.0: can't add hid device: -71 [ 144.575203][ T910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.588017][ T10] usb 5-1: USB disconnect, device number 5 [ 144.592513][ T910] usb 1-1: USB disconnect, device number 5 [ 144.658536][ T6780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=6780 comm=syz.0.232 [ 144.802760][ T30] audit: type=1400 audit(1759924487.235:370): avc: denied { block_suspend } for pid=6782 comm="syz.1.234" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.577581][ T6795] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 146.131295][ T910] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.294543][ T6798] : entered promiscuous mode [ 146.688732][ T6801] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 146.716009][ T910] usb 3-1: Using ep0 maxpacket: 32 [ 146.721360][ T6801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.238'. [ 146.752579][ T910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.761542][ T910] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 146.784966][ T910] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 146.812970][ T6803] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 146.824584][ T910] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 146.825086][ T6803] netlink: 224 bytes leftover after parsing attributes in process `syz.4.239'. [ 146.833636][ T910] usb 3-1: config 128 has no interface number 0 [ 146.833684][ T910] usb 3-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x74, changing to 0x4 [ 146.877596][ T910] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x4 has invalid maxpacket 9529, setting to 1024 [ 146.889275][ T910] usb 3-1: config 128 interface 127 altsetting 14 bulk endpoint 0x4 has invalid maxpacket 1024 [ 146.899894][ T910] usb 3-1: config 128 interface 127 has no altsetting 0 [ 146.909210][ T910] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 146.919475][ T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.933385][ T910] usb 3-1: Product: syz [ 146.940689][ T910] usb 3-1: Manufacturer: syz [ 146.948463][ T910] usb 3-1: SerialNumber: syz [ 146.973022][ T6787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.039587][ T6812] netlink: 'syz.3.241': attribute type 12 has an invalid length. [ 147.054570][ T5901] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 147.342932][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.362099][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 147.374915][ T5901] usb 2-1: can't read configurations, error -71 [ 147.411768][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.422332][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.510874][ T30] audit: type=1400 audit(1759924489.885:371): avc: denied { bind } for pid=6786 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.167042][ T30] audit: type=1400 audit(1759924489.885:372): avc: denied { listen } for pid=6786 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.284169][ T910] usb 3-1: USB disconnect, device number 13 [ 148.300687][ T30] audit: type=1400 audit(1759924490.095:373): avc: denied { getopt } for pid=6813 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.339852][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.420483][ T30] audit: type=1400 audit(1759924490.845:374): avc: denied { read } for pid=6828 comm="syz.0.246" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.465772][ T30] audit: type=1400 audit(1759924490.845:375): avc: denied { open } for pid=6828 comm="syz.0.246" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.472499][ T6821] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 148.533829][ T30] audit: type=1400 audit(1759924490.965:376): avc: denied { create } for pid=6833 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.535443][ T6821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.244'. [ 148.717096][ T30] audit: type=1400 audit(1759924491.005:377): avc: denied { write } for pid=6833 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.831443][ T6839] trusted_key: encrypted_key: insufficient parameters specified [ 148.926270][ T30] audit: type=1400 audit(1759924491.005:378): avc: denied { getopt } for pid=6833 comm="syz.4.248" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.404643][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.414500][ T5857] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 149.472713][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 149.482966][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 149.483100][ T6861] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 149.587811][ T5857] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 149.597894][ T5901] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 149.636014][ T5901] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 149.654539][ T5857] usb 3-1: config 0 has no interface number 0 [ 149.665652][ T5901] usb 5-1: Product: syz [ 149.672084][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.688773][ T5901] usb 5-1: Manufacturer: syz [ 149.725560][ T5901] usb 5-1: SerialNumber: syz [ 149.750113][ T5857] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 149.765193][ T5901] usb 5-1: config 0 descriptor?? [ 149.771057][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 149.783536][ T5857] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 149.795550][ T5901] ch341 5-1:0.0: ch341-uart converter detected [ 149.803927][ T5857] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 149.869404][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.882764][ T5857] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 149.893365][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.955268][ T5857] usb 3-1: config 0 descriptor?? [ 149.963481][ T6849] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 149.971073][ T6849] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 150.001421][ T5857] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.806876][ T6869] xt_nfacct: accounting object `syz1' does not exist [ 151.298158][ T5901] usb 5-1: failed to send control message: -110 [ 151.304566][ T5901] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 151.896090][ T6873] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[6873] [ 152.453471][ T6884] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 152.840157][ T5901] usb 5-1: USB disconnect, device number 6 [ 152.847670][ T5901] ch341 5-1:0.0: device disconnected [ 153.361067][ T6892] netlink: 'syz.0.261': attribute type 12 has an invalid length. [ 155.154297][ T30] audit: type=1400 audit(1759924497.585:379): avc: denied { getopt } for pid=6898 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.344541][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.534553][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 155.553693][ T24] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 155.604314][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.669440][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 155.719596][ T24] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 155.770583][ T10] usb 3-1: USB disconnect, device number 14 [ 155.779622][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 155.788254][ T24] usb 2-1: Product: syz [ 155.938803][ T24] usb 2-1: config 0 descriptor?? [ 156.143459][ T30] audit: type=1400 audit(1759924498.415:380): avc: denied { map } for pid=6906 comm="syz.4.266" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.269266][ T6916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2838 sclass=netlink_route_socket pid=6916 comm=syz.4.266 [ 156.757242][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.763584][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.324483][ T5901] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.411589][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.478853][ T6926] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 157.488877][ T6926] netlink: 224 bytes leftover after parsing attributes in process `syz.0.271'. [ 157.504589][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 157.512039][ T5901] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 157.526253][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.541455][ T5901] usb 4-1: config 0 descriptor?? [ 157.567298][ T5901] usb 4-1: interface 1 not found [ 157.584534][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 157.592687][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 157.600600][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.614276][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.647371][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.660580][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.674198][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.686166][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.701712][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 157.708809][ T30] audit: type=1400 audit(1759924500.145:381): avc: denied { read } for pid=6930 comm="syz.0.272" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.711912][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 157.738523][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.759511][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.773922][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.792079][ T6912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 157.798797][ T6912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.806773][ T6912] vhci_hcd vhci_hcd.0: Device attached [ 157.815900][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.829219][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.841317][ T6933] vhci_hcd: connection closed [ 157.843903][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.844212][ T5901] usb 4-1: USB disconnect, device number 4 [ 157.848743][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 157.870104][ T3466] vhci_hcd: stop threads [ 157.932094][ T5857] usb 2-1: USB disconnect, device number 11 [ 157.960680][ T3466] vhci_hcd: release socket [ 157.972699][ T3466] vhci_hcd: disconnect device [ 157.994595][ T5939] vhci_hcd: vhci_device speed not set [ 158.003608][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 158.009124][ T30] audit: type=1400 audit(1759924500.195:382): avc: denied { ioctl } for pid=6911 comm="syz.3.268" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 158.062115][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 158.148045][ T30] audit: type=1400 audit(1759924500.215:383): avc: denied { setopt } for pid=6911 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.167774][ T30] audit: type=1400 audit(1759924500.215:384): avc: denied { write } for pid=6911 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.375894][ T6942] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 158.443589][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.455119][ T24] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.263193][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.460947][ T6944] /dev/sg0: Can't lookup blockdev [ 159.528500][ T24] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.540655][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.655229][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 159.746894][ T24] usb 3-1: string descriptor 0 read error: -22 [ 159.753196][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.803148][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.408728][ T6953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 160.415269][ T6953] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 160.453349][ T6953] vhci_hcd vhci_hcd.0: Device attached [ 160.489033][ T24] usb 3-1: can't set config #168, error -71 [ 160.521326][ T24] usb 3-1: USB disconnect, device number 15 [ 160.537757][ T6952] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 160.582728][ T6952] netlink: 228 bytes leftover after parsing attributes in process `syz.1.277'. [ 160.696094][ T42] vhci_hcd: vhci_device speed not set [ 160.710775][ T6955] vhci_hcd: connection closed [ 160.718803][ T3638] vhci_hcd: stop threads [ 160.728648][ T3638] vhci_hcd: release socket [ 160.733183][ T3638] vhci_hcd: disconnect device [ 160.754875][ T42] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 161.604982][ T42] usb 33-1: enqueue for inactive port 0 [ 161.724507][ T42] vhci_hcd: vhci_device speed not set [ 161.745960][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 161.764551][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 162.232793][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.283'. [ 162.452407][ T6980] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 163.884478][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.894482][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 164.273372][ T6989] openvswitch: : Dropping previously announced user features [ 164.716077][ T6997] netlink: 'syz.2.288': attribute type 39 has an invalid length. [ 164.795589][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 164.837842][ T30] audit: type=1400 audit(1759924514.268:385): avc: denied { recv } for pid=5797 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.253 dest=60388 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 165.275958][ T7010] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 167.534553][ T7033] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7033] [ 167.724577][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.731621][ T5814] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 167.762241][ T7035] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[7035] [ 168.236701][ T30] audit: type=1400 audit(1759924517.678:386): avc: denied { watch } for pid=7037 comm="syz.1.300" path="/58" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 168.414483][ T7047] netlink: 'syz.4.301': attribute type 10 has an invalid length. [ 169.174492][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.594657][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 169.743888][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 169.755548][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.765853][ T42] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 169.775183][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.830920][ T42] usb 2-1: config 0 descriptor?? [ 170.940287][ T7063] netlink: 92 bytes leftover after parsing attributes in process `syz.3.306'. [ 171.423961][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 171.440237][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.594577][ T42] usb 2-1: USB disconnect, device number 12 [ 172.074735][ T5901] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 172.139424][ T7078] netlink: 'syz.3.311': attribute type 12 has an invalid length. [ 172.257949][ T5901] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.315626][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.346852][ T5901] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 172.384348][ T5901] usb 5-1: can't read configurations, error -71 [ 172.484517][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 172.496398][ T7084] netlink: 'syz.2.312': attribute type 12 has an invalid length. [ 172.543134][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 172.580216][ T1213] IPVS: starting estimator thread 0... [ 172.666379][ T7086] sctp: [Deprecated]: syz.3.313 (pid 7086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.666379][ T7086] Use struct sctp_sack_info instead [ 172.754650][ T7085] IPVS: using max 54 ests per chain, 129600 per kthread [ 173.125788][ T1213] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.204102][ T7097] netlink: 'syz.4.315': attribute type 10 has an invalid length. [ 173.959339][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 173.978067][ T1213] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 174.037411][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 174.051972][ T1213] usb 2-1: Product: syz [ 174.056446][ T1213] usb 2-1: Manufacturer: syz [ 174.103815][ T1213] usb 2-1: SerialNumber: syz [ 174.622323][ T1213] usb 2-1: config 0 descriptor?? [ 174.889566][ T7109] vxfs: unable to read disk superblock at 1 [ 174.909163][ T5939] usb 2-1: USB disconnect, device number 13 [ 174.917953][ T7109] vxfs: unable to read disk superblock at 8 [ 174.923923][ T7109] vxfs: can't find superblock. [ 174.943190][ T7111] support for the xor transformation has been removed. [ 174.976167][ T7111] ocfs2: Unknown parameter 'barriert' [ 175.766960][ T5857] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.780253][ T5857] usb 1-1: no configurations [ 175.792242][ T5857] usb 1-1: can't read configurations, error -22 [ 175.794773][ T24] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 176.516928][ T7126] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 177.019775][ T24] usb 3-1: device descriptor read/64, error -71 [ 177.563584][ T24] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 178.294519][ T24] usb 3-1: device descriptor read/64, error -71 [ 178.491199][ T24] usb usb3-port1: attempt power cycle [ 178.523775][ T30] audit: type=1400 audit(1759924527.888:387): avc: denied { egress } for pid=7133 comm="syz.1.326" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 178.624640][ T30] audit: type=1400 audit(1759924527.888:388): avc: denied { sendto } for pid=7133 comm="syz.1.326" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 178.904656][ T5939] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 179.054578][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 179.198202][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.325360][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 179.350097][ T24] usb 3-1: config 168 has an invalid descriptor of length 73, skipping remainder of the config [ 179.361058][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 179.390061][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 179.404202][ T5939] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 179.412357][ T5939] usb 2-1: config 0 has no interface number 0 [ 179.419627][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 179.429027][ T5939] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 179.440312][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.451378][ T5939] usb 2-1: Product: syz [ 179.456167][ T24] usb 3-1: config 168 has an invalid descriptor of length 73, skipping remainder of the config [ 179.467070][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 179.478380][ T7140] mmap: syz.3.328 (7140): VmData 25841664 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 179.492156][ T5939] usb 2-1: Manufacturer: syz [ 179.496823][ T5939] usb 2-1: SerialNumber: syz [ 179.503741][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 179.518366][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 179.525838][ T5939] usb 2-1: config 0 descriptor?? [ 179.535616][ T5939] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 179.551692][ T24] usb 3-1: config 168 has an invalid descriptor of length 73, skipping remainder of the config [ 179.564555][ T24] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 179.576208][ T24] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 179.589995][ T24] usb 3-1: config 168 interface 0 has no altsetting 0 [ 179.600295][ T24] usb 3-1: string descriptor 0 read error: -22 [ 179.607753][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 179.617312][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.668678][ T24] adutux 3-1:168.0: interrupt endpoints not found [ 179.741168][ T5939] usb 2-1: qt2_attach - failed to power on unit: -71 [ 179.758477][ T5939] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 179.796130][ T5939] usb 2-1: USB disconnect, device number 14 [ 179.868932][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.894622][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.916275][ T24] usb 3-1: USB disconnect, device number 18 [ 180.025886][ T30] audit: type=1400 audit(1759924529.468:389): avc: denied { connect } for pid=7158 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.239864][ T7163] /dev/sg0: Can't lookup blockdev [ 180.690731][ T7171] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 180.699344][ T7171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.337'. [ 181.576216][ T30] audit: type=1400 audit(1759924531.018:390): avc: denied { write } for pid=7181 comm="syz.4.340" lport=58119 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.721476][ T30] audit: type=1400 audit(1759924531.018:391): avc: denied { shutdown } for pid=7181 comm="syz.4.340" lport=58119 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.837889][ T7188] 9pnet_fd: Insufficient options for proto=fd [ 182.453241][ T30] audit: type=1400 audit(1759924531.878:392): avc: denied { mount } for pid=7186 comm="syz.1.342" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 182.486251][ T7187] fuse: Unknown parameter 'gsoup;d00000000000000000000' [ 182.534486][ T30] audit: type=1400 audit(1759924531.918:393): avc: denied { connect } for pid=7186 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.539531][ T7195] input: syz0 as /devices/virtual/input/input10 [ 182.605766][ T5814] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.612932][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.652206][ T7198] /dev/sg0: Can't lookup blockdev [ 183.037648][ T7203] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 183.360057][ T30] audit: type=1400 audit(1759924532.788:394): avc: denied { create } for pid=7194 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.028182][ T7206] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 184.384618][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 184.434494][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.474736][ T1213] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 184.565067][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 184.571678][ T24] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 184.580293][ T24] usb 3-1: config 0 has no interface number 0 [ 184.586721][ T24] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.599920][ T24] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 184.616140][ T24] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28712, setting to 1024 [ 184.627862][ T24] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 184.638448][ T24] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 184.644545][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 184.648914][ T24] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.664745][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.679634][ T24] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=9d.d0 [ 184.679751][ T1213] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.679777][ T1213] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.699259][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.700210][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 184.720104][ T24] usb 3-1: Product: syz [ 184.728078][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.737094][ T9] usb 4-1: config 0 has no interface number 0 [ 184.743227][ T24] usb 3-1: Manufacturer: syz [ 184.748086][ T1213] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 184.753338][ T24] usb 3-1: SerialNumber: syz [ 184.760604][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.774441][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 184.783712][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.791781][ T9] usb 4-1: Product: syz [ 184.796095][ T5939] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.797830][ T1213] usb 2-1: config 0 descriptor?? [ 184.808841][ T9] usb 4-1: Manufacturer: syz [ 184.809509][ T24] usb 3-1: config 0 descriptor?? [ 184.813442][ T9] usb 4-1: SerialNumber: syz [ 184.829897][ T7212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.840917][ T7212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.875659][ T9] usb 4-1: config 0 descriptor?? [ 184.883409][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 184.964588][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 184.972173][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.981158][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 184.992697][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 185.003846][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.013793][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 185.023481][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 185.033389][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.036862][ T7215] netlink: 7 bytes leftover after parsing attributes in process `syz.1.348'. [ 185.045611][ T5939] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 185.074586][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.083093][ T24] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 185.095496][ T5939] usb 1-1: Product: syz [ 185.100064][ T9] usb 4-1: qt2_attach - failed to power on unit: -71 [ 185.100231][ T5939] usb 1-1: Manufacturer: syz [ 185.112563][ T24] etas_es58x 3-1:0.219: could not retrieve the product info string [ 185.121003][ T5939] usb 1-1: SerialNumber: syz [ 185.126000][ T9] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 185.136531][ T5939] usb 1-1: config 0 descriptor?? [ 185.142110][ T7219] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 185.154320][ T24] usb 3-1: USB disconnect, device number 19 [ 185.168928][ T24] etas_es58x 3-1:0.219: Disconnecting syz syz [ 185.175167][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.186966][ T5939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.190361][ T9] usb 4-1: USB disconnect, device number 5 [ 185.311674][ T6173] udevd[6173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.336837][ T1213] usbhid 2-1:0.0: can't add hid device: -71 [ 185.347130][ T1213] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.354723][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 185.358223][ T1213] usb 2-1: USB disconnect, device number 15 [ 185.372875][ T42] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 185.382722][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.398943][ T42] pvrusb2: Hardware description: Terratec Grabster AV400 [ 185.407048][ T42] pvrusb2: ********** [ 185.411142][ T42] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 185.422467][ T42] pvrusb2: Important functionality might not be entirely working. [ 185.430502][ T42] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 185.431680][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 185.462104][ T42] pvrusb2: ********** [ 185.472061][ T30] audit: type=1400 audit(1759924534.908:395): avc: denied { accept } for pid=7218 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.560277][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.570186][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.588569][ T1213] usb 1-1: USB disconnect, device number 8 [ 185.604277][ T2329] pvrusb2: Invalid write control endpoint [ 185.662368][ T2329] pvrusb2: Invalid write control endpoint [ 185.669073][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 185.680491][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 185.689196][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 185.699696][ T2329] pvrusb2: Device being rendered inoperable [ 185.707196][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 185.725272][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.731261][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 185.737331][ T7205] Bluetooth: hci2: command 0x0406 tx timeout [ 185.737345][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 185.743319][ T7205] Bluetooth: hci4: command 0x0406 tx timeout [ 185.756817][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 185.796595][ T2329] pvrusb2: Attached sub-driver cx25840 [ 185.836112][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 185.871809][ T30] audit: type=1400 audit(1759924535.308:396): avc: denied { map } for pid=7220 comm="syz.4.351" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.896455][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 185.919567][ T30] audit: type=1400 audit(1759924535.308:397): avc: denied { execute } for pid=7220 comm="syz.4.351" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.037693][ T24] usb 5-1: USB disconnect, device number 9 [ 187.189953][ T30] audit: type=1400 audit(1759924536.628:398): avc: denied { accept } for pid=7241 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.996245][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 189.237002][ T7259] netlink: 148 bytes leftover after parsing attributes in process `syz.2.359'. [ 189.328710][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.806630][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.838901][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.903087][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.175024][ T24] usb 1-1: usb_control_msg returned -71 [ 190.192382][ T24] usbtmc 1-1:16.0: can't read capabilities [ 190.516535][ T24] usb 1-1: USB disconnect, device number 9 [ 190.553283][ T7268] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 190.560979][ T7268] netlink: 224 bytes leftover after parsing attributes in process `syz.0.362'. [ 191.476119][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.843185][ T7283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.854957][ T7283] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.184453][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 192.222916][ T7282] netlink: 'syz.3.366': attribute type 12 has an invalid length. [ 192.231235][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 192.281574][ T24] usb 1-1: config 0 has no interface number 0 [ 192.289847][ T7259] syz.2.359 (7259): drop_caches: 2 [ 192.404049][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.413848][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.424467][ T24] usb 1-1: Product: syz [ 192.428709][ T24] usb 1-1: Manufacturer: syz [ 192.668549][ T24] usb 1-1: SerialNumber: syz [ 192.730553][ T24] usb 1-1: config 0 descriptor?? [ 192.736742][ T30] audit: type=1400 audit(1759924542.168:399): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 192.769457][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 192.983074][ T24] usb 1-1: qt2_attach - failed to power on unit: -71 [ 192.995861][ T24] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 193.027711][ T24] usb 1-1: USB disconnect, device number 10 [ 193.710714][ T7301] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[7301] [ 193.894524][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.963309][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.182681][ T7307] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 194.202451][ T7307] netlink: 224 bytes leftover after parsing attributes in process `syz.4.373'. [ 194.563755][ T7309] : entered promiscuous mode [ 195.331089][ T7329] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 196.352071][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 196.474512][ T7342] sctp: [Deprecated]: syz.1.380 (pid 7342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.474512][ T7342] Use struct sctp_sack_info instead [ 197.694464][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.824755][ T7357] syz.4.387 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.948216][ T9] usb 4-1: config index 0 descriptor too short (expected 63, got 36) [ 198.117449][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.396671][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 198.459246][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.477105][ T5939] IPVS: starting estimator thread 0... [ 198.493882][ T9] usb 4-1: config 0 descriptor?? [ 198.494523][ T7368] FAULT_INJECTION: forcing a failure. [ 198.494523][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.504073][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 198.711727][ T7369] IPVS: using max 38 ests per chain, 91200 per kthread [ 198.722491][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(full) [ 198.722517][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.722528][ T7368] Call Trace: [ 198.722535][ T7368] [ 198.722542][ T7368] dump_stack_lvl+0x16c/0x1f0 [ 198.722574][ T7368] should_fail_ex+0x512/0x640 [ 198.722606][ T7368] _copy_from_user+0x2e/0xd0 [ 198.722635][ T7368] do_ip_vs_set_ctl+0xdfa/0x11d0 [ 198.722657][ T7368] ? __lock_acquire+0xb97/0x1ce0 [ 198.722690][ T7368] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 198.722712][ T7368] ? __pfx___might_resched+0x10/0x10 [ 198.722735][ T7368] ? rcu_is_watching+0x12/0xc0 [ 198.722763][ T7368] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 198.722788][ T7368] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 198.722836][ T7368] ? nf_setsockopt+0x8d/0xf0 [ 198.722853][ T7368] nf_setsockopt+0x8d/0xf0 [ 198.722874][ T7368] ip_setsockopt+0xcb/0xf0 [ 198.722899][ T7368] ipv6_setsockopt+0x155/0x170 [ 198.722921][ T7368] tcp_setsockopt+0xa7/0x100 [ 198.722951][ T7368] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 198.722972][ T7368] do_sock_setsockopt+0xf3/0x1d0 [ 198.722993][ T7368] __sys_setsockopt+0x1a0/0x230 [ 198.723022][ T7368] __x64_sys_setsockopt+0xbd/0x160 [ 198.723045][ T7368] ? do_syscall_64+0x91/0xfa0 [ 198.723070][ T7368] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.723095][ T7368] do_syscall_64+0xcd/0xfa0 [ 198.723122][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.723139][ T7368] RIP: 0033:0x7f9c6298eec9 [ 198.723154][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.723172][ T7368] RSP: 002b:00007f9c638a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.723189][ T7368] RAX: ffffffffffffffda RBX: 00007f9c62be6090 RCX: 00007f9c6298eec9 [ 198.723201][ T7368] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 198.723211][ T7368] RBP: 00007f9c638a2090 R08: 0000000000000000 R09: 0000000000000000 [ 198.723221][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.723231][ T7368] R13: 00007f9c62be6128 R14: 00007f9c62be6090 R15: 00007ffee9a368c8 [ 198.723256][ T7368] [ 199.735937][ T30] audit: type=1400 audit(1759924556.158:400): avc: denied { read write } for pid=7353 comm="syz.3.386" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.771234][ T30] audit: type=1400 audit(1759924556.168:401): avc: denied { open } for pid=7353 comm="syz.3.386" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.791520][ T1213] hid (null): invalid report_count 62996 [ 199.801249][ T1213] hid (null): global environment stack underflow [ 199.830328][ T1213] hid (null): invalid report_count 1783818092 [ 199.843060][ T1213] hid (null): unknown global tag 0xd [ 199.853904][ T1213] hid (null): unknown global tag 0xc [ 199.914015][ T30] audit: type=1400 audit(1759924556.198:402): avc: denied { bind } for pid=7377 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.946547][ T1213] hid (null): invalid report_size 15110 [ 199.965612][ T1213] hid (null): unknown global tag 0xc [ 199.981908][ T1213] hid (null): invalid report_size 28584 [ 200.008527][ T1213] hid (null): bogus close delimiter [ 200.029951][ T1213] hid (null): unknown global tag 0x3f [ 200.297891][ T1213] hid (null): unknown global tag 0xd [ 200.303289][ T1213] hid (null): unknown global tag 0xc [ 200.334468][ T1213] hid (null): invalid report_count 1427803000 [ 200.600820][ T7394] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 201.128229][ T1213] hid (null): unknown global tag 0xd [ 201.133552][ T1213] hid (null): unknown global tag 0xd [ 201.159420][ T1213] hid (null): invalid report_size 11772 [ 201.177452][ T1213] hid (null): unknown global tag 0xc [ 201.189056][ T1213] hid (null): unknown global tag 0xc [ 201.199668][ T1213] hid (null): report_id 3776087600 is invalid [ 201.304772][ T1213] hid (null): invalid report_size -84567079 [ 201.310801][ T1213] hid (null): global environment stack overflow [ 201.317639][ T1213] hid (null): global environment stack overflow [ 201.324060][ T1213] hid (null): unknown global tag 0xd [ 201.924549][ T7401] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 202.324496][ T1213] hid (null): report_id 5762 is invalid [ 202.334032][ T1213] hid (null): global environment stack overflow [ 202.377816][ T1213] hid-generic 0005:0005:8001.0002: unexpected long global item [ 202.393306][ T1213] hid-generic 0005:0005:8001.0002: probe with driver hid-generic failed with error -22 [ 202.436871][ T1213] usb 4-1: USB disconnect, device number 6 [ 203.206376][ T7419] /dev/sg0: Can't lookup blockdev [ 204.525954][ T7439] FAULT_INJECTION: forcing a failure. [ 204.525954][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 204.538879][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) [ 204.538901][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.538911][ T7439] Call Trace: [ 204.538917][ T7439] [ 204.538924][ T7439] dump_stack_lvl+0x16c/0x1f0 [ 204.538952][ T7439] should_fail_ex+0x512/0x640 [ 204.538976][ T7439] ? __kmalloc_cache_noprof+0x5f/0x780 [ 204.539002][ T7439] should_failslab+0xc2/0x120 [ 204.539021][ T7439] __kmalloc_cache_noprof+0x72/0x780 [ 204.539044][ T7439] ? tcf_action_init_1+0x278/0x6c0 [ 204.539070][ T7439] ? tcf_action_init_1+0x278/0x6c0 [ 204.539088][ T7439] tcf_action_init_1+0x278/0x6c0 [ 204.539108][ T7439] ? tc_lookup_action_n+0xc9/0xf0 [ 204.539125][ T7439] ? __pfx_tcf_action_init_1+0x10/0x10 [ 204.539146][ T7439] ? __pfx_tc_action_load_ops+0x10/0x10 [ 204.539177][ T7439] ? __nla_parse+0x40/0x60 [ 204.539198][ T7439] tcf_action_init+0x432/0xa50 [ 204.539227][ T7439] ? __pfx_tcf_action_init+0x10/0x10 [ 204.539245][ T7439] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 204.539285][ T7439] ? lock_acquire+0x179/0x350 [ 204.539325][ T7439] ? finish_task_switch.isra.0+0x22a/0xc10 [ 204.539348][ T7439] ? finish_task_switch.isra.0+0x221/0xc10 [ 204.539372][ T7439] tcf_action_add+0xee/0x5c0 [ 204.539403][ T7439] ? __pfx_tcf_action_add+0x10/0x10 [ 204.539461][ T7439] ? __nla_parse+0x40/0x60 [ 204.539483][ T7439] tc_ctl_action+0x35b/0x470 [ 204.539504][ T7439] ? __pfx_tc_ctl_action+0x10/0x10 [ 204.539534][ T7439] ? __pfx_tc_ctl_action+0x10/0x10 [ 204.539555][ T7439] rtnetlink_rcv_msg+0x3c6/0xe90 [ 204.539583][ T7439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.539614][ T7439] ? netlink_rcv_skb+0x2ba/0x420 [ 204.539629][ T7439] ? netlink_rcv_skb+0x2c4/0x420 [ 204.539647][ T7439] netlink_rcv_skb+0x158/0x420 [ 204.539662][ T7439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.539693][ T7439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.539708][ T7439] ? rcu_is_watching+0x12/0xc0 [ 204.539746][ T7439] netlink_unicast+0x5a7/0x870 [ 204.539765][ T7439] ? __pfx_netlink_unicast+0x10/0x10 [ 204.539784][ T7439] ? security_netlink_send+0x99/0x210 [ 204.539808][ T7439] ? security_netlink_send+0x71/0x210 [ 204.539834][ T7439] netlink_sendmsg+0x8c8/0xdd0 [ 204.539853][ T7439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.539872][ T7439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.539892][ T7439] ____sys_sendmsg+0xa98/0xc70 [ 204.539912][ T7439] ? lockdep_hardirqs_on+0x7c/0x110 [ 204.539935][ T7439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.539965][ T7439] ___sys_sendmsg+0x134/0x1d0 [ 204.539990][ T7439] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.540046][ T7439] __sys_sendmsg+0x16d/0x220 [ 204.540070][ T7439] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.540093][ T7439] ? rcu_is_watching+0x12/0xc0 [ 204.540123][ T7439] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 204.540149][ T7439] do_syscall_64+0xcd/0xfa0 [ 204.540174][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.540191][ T7439] RIP: 0033:0x7f9c6298eec9 [ 204.540205][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.540221][ T7439] RSP: 002b:00007f9c63881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.540238][ T7439] RAX: ffffffffffffffda RBX: 00007f9c62be6180 RCX: 00007f9c6298eec9 [ 204.540249][ T7439] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 204.540259][ T7439] RBP: 00007f9c63881090 R08: 0000000000000000 R09: 0000000000000000 [ 204.540268][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.540278][ T7439] R13: 00007f9c62be6218 R14: 00007f9c62be6180 R15: 00007ffee9a368c8 [ 204.540302][ T7439] [ 204.994525][ T5901] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 205.155972][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.167069][ T5901] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 205.176134][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.194101][ T5901] usb 3-1: config 0 descriptor?? [ 205.675964][ T5901] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 205.780842][ T7448] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[7448] [ 206.316111][ T30] audit: type=1400 audit(1759924569.762:403): avc: denied { execute } for pid=7447 comm="syz.1.412" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 206.771852][ T7457] openvswitch: : Dropping previously announced user features [ 207.327442][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 207.359520][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.414'. [ 207.376568][ T5901] usb 3-1: USB disconnect, device number 20 [ 207.968026][ T30] audit: type=1400 audit(1759924571.412:404): avc: denied { mount } for pid=7476 comm="syz.0.420" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 208.011880][ T30] audit: type=1400 audit(1759924571.452:405): avc: denied { mounton } for pid=7476 comm="syz.0.420" path="/84/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 208.151839][ T7481] openvswitch: : Dropping previously announced user features [ 208.358247][ T30] audit: type=1400 audit(1759924571.802:406): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 208.379593][ T5901] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.689446][ T7484] mmap: syz.0.422 (7484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 208.754537][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 208.788046][ T5901] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 208.836911][ T5901] usb 3-1: config 0 has no interface number 0 [ 208.856172][ T5901] usb 3-1: config 0 interface 48 has no altsetting 0 [ 208.875715][ T5901] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 208.885399][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.942951][ T5901] usb 3-1: Product: syz [ 209.015837][ T5901] usb 3-1: Manufacturer: syz [ 209.039619][ T5901] usb 3-1: SerialNumber: syz [ 209.067029][ T5901] usb 3-1: config 0 descriptor?? [ 209.122888][ T7489] openvswitch: : Dropping previously announced user features [ 209.253664][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 209.302046][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 210.113543][ T7494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.419'. [ 210.240118][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 210.274062][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 210.750564][ T7509] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[7509] [ 210.899847][ T7512] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[7512] [ 211.446482][ T5940] usb 3-1: USB disconnect, device number 21 [ 212.492156][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 212.522615][ T7529] netlink: 'syz.0.435': attribute type 12 has an invalid length. [ 212.522776][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'. [ 214.410267][ T30] audit: type=1400 audit(1759924577.852:407): avc: denied { map } for pid=7551 comm="syz.2.444" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.443588][ T30] audit: type=1400 audit(1759924577.852:408): avc: denied { ioctl } for pid=7551 comm="syz.2.444" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.679467][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 214.866966][ T7552] bond0: (slave bond_slave_1): Releasing backup interface [ 214.900464][ T7554] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 215.524793][ T5901] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 215.768192][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.781015][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 215.793796][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.287213][ T5901] usb 2-1: language id specifier not provided by device, defaulting to English [ 216.305377][ T5901] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 216.317486][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.356843][ T5901] usb 2-1: Manufacturer: ‰ [ 216.383346][ T5901] usb 2-1: SerialNumber: syz [ 216.391789][ T30] audit: type=1400 audit(1759924579.822:409): avc: denied { create } for pid=7566 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.431470][ T5901] usb 2-1: config 0 descriptor?? [ 216.444072][ T30] audit: type=1400 audit(1759924579.862:410): avc: denied { setopt } for pid=7566 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 216.453037][ T5901] em28xx 2-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 216.492194][ T5901] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 216.763412][ T30] audit: type=1400 audit(1759924579.862:411): avc: denied { write } for pid=7566 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.117352][ T7580] : entered promiscuous mode [ 217.122137][ T7585] sctp: [Deprecated]: syz.1.446 (pid 7585) Use of int in max_burst socket option. [ 217.122137][ T7585] Use struct sctp_assoc_value instead [ 217.669132][ T5901] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 217.682970][ T5901] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 217.828893][ T5901] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 217.837100][ T5901] em28xx 2-1:0.0: No AC97 audio processor [ 219.831523][ T5939] usb 2-1: USB disconnect, device number 16 [ 219.986995][ T5939] em28xx 2-1:0.0: Disconnecting em28xx [ 220.086632][ T7611] : entered promiscuous mode [ 220.233528][ T5939] em28xx 2-1:0.0: Freeing device [ 220.954767][ T5901] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 220.994936][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 221.025570][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 221.164803][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 221.226566][ T5901] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 221.344870][ T5901] usb 3-1: config 0 has no interface number 0 [ 221.356659][ T5901] usb 3-1: config 0 interface 48 has no altsetting 0 [ 221.374350][ T5901] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 221.394538][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.424520][ T5901] usb 3-1: Product: syz [ 221.428769][ T5901] usb 3-1: Manufacturer: syz [ 221.443608][ T5901] usb 3-1: SerialNumber: syz [ 221.482767][ T5901] usb 3-1: config 0 descriptor?? [ 222.485535][ T7637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.548064][ T7637] block device autoloading is deprecated and will be removed. [ 222.859170][ T7652] comedi comedi2: pcl818: a I/O base address must be specified [ 223.033717][ T7656] openvswitch: : Dropping previously announced user features [ 223.858550][ T7692] tipc: Failed to obtain node identity [ 223.877145][ T7692] tipc: Enabling of bearer rejected, failed to enable media [ 224.585073][ T7700] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 224.598354][ T30] audit: type=1400 audit(1759924588.042:412): avc: denied { setopt } for pid=7699 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 224.781706][ T7707] /dev/sg0: Can't lookup blockdev [ 225.740570][ T910] usb 3-1: USB disconnect, device number 22 [ 225.866231][ T30] audit: type=1400 audit(1759924589.312:413): avc: denied { create } for pid=7716 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 226.102440][ T1213] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.654608][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.764554][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 226.778496][ T1213] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 226.814217][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 226.823773][ T30] audit: type=1400 audit(1759924590.262:414): avc: denied { connect } for pid=7730 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.843475][ T1213] usb 2-1: Product: syz [ 226.848804][ T1213] usb 2-1: Manufacturer: syz [ 226.853412][ T1213] usb 2-1: SerialNumber: syz [ 226.872880][ T1213] usb 2-1: config 0 descriptor?? [ 226.944454][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 226.957888][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 226.968183][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 226.976723][ T30] audit: type=1400 audit(1759924590.412:415): avc: denied { ioctl } for pid=7730 comm="syz.2.487" path="socket:[18758]" dev="sockfs" ino=18758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.002887][ T9] usb 5-1: Product: syz [ 227.010418][ T9] usb 5-1: Manufacturer: syz [ 227.015628][ T9] usb 5-1: SerialNumber: syz [ 227.080735][ T9] usb 5-1: config 0 descriptor?? [ 227.096497][ T1213] usb 2-1: USB disconnect, device number 17 [ 227.409884][ T9] usb 5-1: USB disconnect, device number 10 [ 228.311342][ T7752] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 228.544506][ T5901] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 229.015915][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.055835][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.090210][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 229.209778][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.218331][ T5901] usb 4-1: SerialNumber: syz [ 229.582491][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 229.591697][ T30] audit: type=1400 audit(1759924593.032:416): avc: denied { setopt } for pid=7760 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.617967][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.675467][ T5901] usb-storage 4-1:1.0: USB Mass Storage device detected [ 229.738972][ T5901] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 229.748270][ T7771] loop4: detected capacity change from 0 to 2560 [ 229.755553][ T5901] scsi host1: usb-storage 4-1:1.0 [ 229.770082][ T7771] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 229.782496][ T7767] veth3: entered promiscuous mode [ 229.791137][ T6241] Buffer I/O error on dev loop4, logical block 3, async page read [ 229.930835][ T9] usb 1-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 229.947431][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.955699][ T9] usb 1-1: Product: syz [ 229.959905][ T9] usb 1-1: Manufacturer: syz [ 229.964554][ T9] usb 1-1: SerialNumber: syz [ 229.974930][ T9] usb 1-1: config 0 descriptor?? [ 230.071075][ T9] go7007 1-1:0.0: Sensoray 2250 found [ 230.086968][ T9] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 230.580308][ T5939] usb 1-1: USB disconnect, device number 11 [ 231.232449][ T7792] /dev/sg0: Can't lookup blockdev [ 231.313848][ T24] usb 4-1: USB disconnect, device number 7 [ 231.482106][ T7793] netlink: 'syz.1.500': attribute type 12 has an invalid length. [ 232.016204][ T7799] /dev/sg0: Can't lookup blockdev [ 233.263175][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.545294][ T7825] openvswitch: : Dropping previously announced user features [ 233.782654][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.803076][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.844474][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.895101][ T9] usb 2-1: config 0 descriptor?? [ 233.960666][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 234.299898][ T7836] : entered promiscuous mode [ 234.382171][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.471292][ T7837] netlink: 'syz.3.508': attribute type 12 has an invalid length. [ 234.494267][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.503777][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.649536][ T7841] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 235.172622][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 235.190576][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 235.360444][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 235.415002][ T30] audit: type=1400 audit(1759924598.862:417): avc: denied { create } for pid=7826 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 235.447623][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 235.460686][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 235.474805][ T30] audit: type=1400 audit(1759924598.862:418): avc: denied { shutdown } for pid=7826 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.495175][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 235.514680][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 235.579528][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 235.585107][ T7205] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 235.593951][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 235.601495][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 235.612960][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 235.643438][ T30] audit: type=1400 audit(1759924599.052:419): avc: denied { bind } for pid=7848 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 235.644535][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 235.673040][ T30] audit: type=1400 audit(1759924599.112:420): avc: denied { connect } for pid=7845 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.699364][ T30] audit: type=1400 audit(1759924599.112:421): avc: denied { bind } for pid=7845 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.823205][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 235.846148][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.874965][ T9] pwc: Registered as video103. [ 235.891770][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 235.955052][ T9] usb 2-1: USB disconnect, device number 18 [ 236.074836][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 236.085634][ T24] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 236.106710][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.616089][ T24] usb 5-1: config 0 has no interface number 0 [ 236.641885][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.656280][ T24] usb 5-1: config 0 has no interface number 0 [ 236.691281][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.716051][ T24] usb 5-1: config 0 has no interface number 0 [ 236.754493][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.824801][ T24] usb 5-1: config 0 has no interface number 0 [ 236.833174][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.848740][ T24] usb 5-1: config 0 has no interface number 0 [ 236.862117][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.885666][ T24] usb 5-1: config 0 has no interface number 0 [ 236.917371][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 236.965911][ T24] usb 5-1: config 0 has no interface number 0 [ 236.973258][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 237.016743][ T24] usb 5-1: config 0 has no interface number 0 [ 237.044949][ T24] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 237.054023][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.125256][ T24] usb 5-1: Product: syz [ 237.144502][ T24] usb 5-1: Manufacturer: syz [ 237.149124][ T24] usb 5-1: SerialNumber: syz [ 237.160197][ T24] usb 5-1: config 0 descriptor?? [ 237.176524][ T24] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 237.194679][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 237.402360][ T24] etas_es58x 5-1:0.2: could not retrieve the product info string [ 237.484685][ T24] usb 5-1: USB disconnect, device number 11 [ 237.809810][ T24] etas_es58x 5-1:0.2: Disconnecting syz syz [ 237.810776][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.154467][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 238.194276][ T30] audit: type=1400 audit(1759924601.632:422): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 238.204735][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.262072][ T9] usb 3-1: config 0 descriptor?? [ 238.395225][ T7877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.521'. [ 238.410971][ T7879] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 238.500119][ T7885] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 238.528902][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.607643][ T30] audit: type=1400 audit(1759924602.042:423): avc: denied { read open } for pid=7887 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.697936][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.911567][ T7886] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 239.103034][ T30] audit: type=1400 audit(1759924602.112:424): avc: denied { getattr } for pid=7887 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.254647][ T7886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.522'. [ 239.268895][ T7879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.299836][ T7886] workqueue: Failed to create a rescuer kthread for wq "phy9": -EINTR [ 239.738854][ T7884] bond1: (slave ip6gretap1): making interface the new active one [ 239.801739][ T7884] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 240.863043][ T30] audit: type=1400 audit(1759924604.272:425): avc: denied { add_name } for pid=7875 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.867022][ T7915] Failed to get privilege flags for destination (handle=0x2:0x7) [ 240.885419][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.957465][ T30] audit: type=1400 audit(1759924604.272:426): avc: denied { create } for pid=7875 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.154866][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 241.184935][ T30] audit: type=1400 audit(1759924604.272:427): avc: denied { write } for pid=7875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.211009][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.241769][ T30] audit: type=1400 audit(1759924604.272:428): avc: denied { append } for pid=7875 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.033539][ T30] audit: type=1400 audit(1759924604.682:429): avc: denied { remove_name } for pid=7920 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.162112][ T30] audit: type=1400 audit(1759924604.682:430): avc: denied { unlink } for pid=7920 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.337988][ T30] audit: type=1400 audit(1759924605.102:431): avc: denied { map } for pid=7926 comm="syz.0.529" path="socket:[20149]" dev="sockfs" ino=20149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 242.580119][ T30] audit: type=1400 audit(1759924605.632:432): avc: denied { create } for pid=7918 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 242.994906][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 243.102096][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 243.108149][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 243.129448][ T9] usb 3-1: USB disconnect, device number 23 [ 243.164603][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 243.209298][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.298361][ T10] usb 2-1: config 0 has no interface number 0 [ 243.316535][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 243.443479][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 243.589278][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 243.635288][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.694026][ T10] usb 2-1: Product: syz [ 243.706197][ T10] usb 2-1: SerialNumber: syz [ 243.722615][ T10] usb 2-1: config 0 descriptor?? [ 243.805573][ T30] audit: type=1400 audit(1759924607.242:433): avc: denied { watch_reads } for pid=7969 comm="syz.2.536" path="/91" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.807397][ T7979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.536'. [ 243.864050][ T10] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 243.934450][ T910] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 243.983888][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input12 [ 244.094596][ T910] usb 1-1: Using ep0 maxpacket: 8 [ 244.102424][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.141740][ T910] usb 1-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 244.174519][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.220027][ T910] usb 1-1: config 0 descriptor?? [ 244.226897][ T7999] loop4: detected capacity change from 0 to 2560 [ 244.265962][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 244.269059][ T24] usb 2-1: USB disconnect, device number 19 [ 244.272923][ C0] ------------[ cut here ]------------ [ 244.272958][ C0] URB ffff888076a7d700 submitted while active [ 244.273419][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 [ 244.299695][ C0] Modules linked in: [ 244.303770][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 244.312701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.322828][ C0] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 244.328472][ C0] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 d4 ae fa c6 05 0d 11 5e 09 01 90 48 c7 c7 20 62 51 8c 48 89 de e8 4c 0d 6d fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 244.348096][ C0] RSP: 0018:ffffc90000007a90 EFLAGS: 00010082 [ 244.354180][ C0] RAX: 0000000000000000 RBX: ffff888076a7d700 RCX: ffffc90002161000 [ 244.362162][ C0] RDX: 0000000000040000 RSI: ffffffff817aaf75 RDI: 0000000000000001 [ 244.370124][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 244.378102][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.386143][ C0] R13: ffff888057548857 R14: ffff88807dc10440 R15: 000000000000000f [ 244.394095][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 244.403009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.409573][ C0] CR2: 0000000000000000 CR3: 000000007a407000 CR4: 00000000003526f0 [ 244.417527][ C0] Call Trace: [ 244.420794][ C0] [ 244.423620][ C0] ? find_held_lock+0x2b/0x80 [ 244.428303][ C0] ? __pfx____ratelimit+0x10/0x10 [ 244.433325][ C0] cm109_urb_irq_callback+0x2ed/0xb80 [ 244.438694][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 244.444052][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 244.449237][ C0] dummy_timer+0x1809/0x3a00 [ 244.453823][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 244.458838][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 244.464462][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.470265][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 244.475882][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 244.481852][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.486776][ C0] ? rcu_is_watching+0x12/0xc0 [ 244.491524][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.497316][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.502239][ C0] __hrtimer_run_queues+0x202/0xad0 [ 244.507431][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 244.513135][ C0] ? read_tsc+0x9/0x20 [ 244.517196][ C0] hrtimer_run_softirq+0x17d/0x350 [ 244.522296][ C0] handle_softirqs+0x216/0x8e0 [ 244.527052][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.532328][ C0] __irq_exit_rcu+0x109/0x170 [ 244.536986][ C0] irq_exit_rcu+0x9/0x30 [ 244.541214][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 244.546837][ C0] [ 244.549747][ C0] [ 244.552667][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.558634][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 244.564255][ C0] Code: e7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 244.583847][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 244.590074][ C0] RAX: 00000000010a245b RBX: 0000000000000000 RCX: ffffffff8b6522d9 [ 244.598028][ C0] RDX: 0000000000000000 RSI: ffffffff8db02646 RDI: ffffffff8bf1cfc0 [ 244.606079][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 244.614044][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 244.621996][ C0] R13: ffffffff8e097a00 R14: ffffffff908323d0 R15: 0000000000000000 [ 244.629958][ C0] ? ct_kernel_exit+0x139/0x190 [ 244.634808][ C0] default_idle+0x13/0x20 [ 244.639122][ C0] default_idle_call+0x6c/0xb0 [ 244.643963][ C0] do_idle+0x38d/0x500 [ 244.648021][ C0] ? __pfx_do_idle+0x10/0x10 [ 244.652602][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 244.657839][ C0] cpu_startup_entry+0x4f/0x60 [ 244.662590][ C0] rest_init+0x16b/0x2b0 [ 244.666818][ C0] ? acpi_subsystem_init+0x133/0x180 [ 244.672096][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 244.677630][ C0] start_kernel+0x3f3/0x4e0 [ 244.682125][ C0] x86_64_start_reservations+0x18/0x30 [ 244.687572][ C0] x86_64_start_kernel+0x130/0x190 [ 244.692673][ C0] common_startup_64+0x13e/0x148 [ 244.697607][ C0] [ 244.700607][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 244.707869][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 244.716781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.726818][ C0] Call Trace: [ 244.730076][ C0] [ 244.732913][ C0] dump_stack_lvl+0x3d/0x1f0 [ 244.737493][ C0] vpanic+0x640/0x6f0 [ 244.741467][ C0] ? usb_submit_urb+0x16f5/0x1990 [ 244.746480][ C0] panic+0xca/0xd0 [ 244.750197][ C0] ? __pfx_panic+0x10/0x10 [ 244.754616][ C0] check_panic_on_warn+0xab/0xb0 [ 244.759533][ C0] __warn+0xf6/0x3c0 [ 244.763413][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 244.768429][ C0] ? usb_submit_urb+0x16f5/0x1990 [ 244.773446][ C0] report_bug+0x3c3/0x580 [ 244.777768][ C0] ? usb_submit_urb+0x16f5/0x1990 [ 244.782779][ C0] handle_bug+0x184/0x210 [ 244.787122][ C0] exc_invalid_op+0x17/0x50 [ 244.791606][ C0] asm_exc_invalid_op+0x1a/0x20 [ 244.796471][ C0] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 244.802176][ C0] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 23 d4 ae fa c6 05 0d 11 5e 09 01 90 48 c7 c7 20 62 51 8c 48 89 de e8 4c 0d 6d fa 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 244.821768][ C0] RSP: 0018:ffffc90000007a90 EFLAGS: 00010082 [ 244.827827][ C0] RAX: 0000000000000000 RBX: ffff888076a7d700 RCX: ffffc90002161000 [ 244.835795][ C0] RDX: 0000000000040000 RSI: ffffffff817aaf75 RDI: 0000000000000001 [ 244.843759][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 244.851712][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 244.859679][ C0] R13: ffff888057548857 R14: ffff88807dc10440 R15: 000000000000000f [ 244.867644][ C0] ? __warn_printk+0x1a5/0x350 [ 244.872422][ C0] ? find_held_lock+0x2b/0x80 [ 244.877085][ C0] ? __pfx____ratelimit+0x10/0x10 [ 244.882103][ C0] cm109_urb_irq_callback+0x2ed/0xb80 [ 244.887472][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 244.892832][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 244.898017][ C0] dummy_timer+0x1809/0x3a00 [ 244.902605][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 244.907622][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 244.913241][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 244.919473][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 244.925091][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 244.931061][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.936007][ C0] ? rcu_is_watching+0x12/0xc0 [ 244.940761][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 244.946558][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 244.951484][ C0] __hrtimer_run_queues+0x202/0xad0 [ 244.956675][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 244.962382][ C0] ? read_tsc+0x9/0x20 [ 244.966455][ C0] hrtimer_run_softirq+0x17d/0x350 [ 244.971561][ C0] handle_softirqs+0x216/0x8e0 [ 244.976315][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.981591][ C0] __irq_exit_rcu+0x109/0x170 [ 244.986254][ C0] irq_exit_rcu+0x9/0x30 [ 244.990482][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 244.996195][ C0] [ 244.999203][ C0] [ 245.002128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.008094][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 245.013717][ C0] Code: e7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 245.033325][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 245.039374][ C0] RAX: 00000000010a245b RBX: 0000000000000000 RCX: ffffffff8b6522d9 [ 245.047325][ C0] RDX: 0000000000000000 RSI: ffffffff8db02646 RDI: ffffffff8bf1cfc0 [ 245.055281][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 245.063235][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 245.071194][ C0] R13: ffffffff8e097a00 R14: ffffffff908323d0 R15: 0000000000000000 [ 245.079152][ C0] ? ct_kernel_exit+0x139/0x190 [ 245.084001][ C0] default_idle+0x13/0x20 [ 245.088310][ C0] default_idle_call+0x6c/0xb0 [ 245.093053][ C0] do_idle+0x38d/0x500 [ 245.097111][ C0] ? __pfx_do_idle+0x10/0x10 [ 245.101695][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 245.106886][ C0] cpu_startup_entry+0x4f/0x60 [ 245.111637][ C0] rest_init+0x16b/0x2b0 [ 245.115866][ C0] ? acpi_subsystem_init+0x133/0x180 [ 245.121139][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 245.126673][ C0] start_kernel+0x3f3/0x4e0 [ 245.131172][ C0] x86_64_start_reservations+0x18/0x30 [ 245.136624][ C0] x86_64_start_kernel+0x130/0x190 [ 245.141778][ C0] common_startup_64+0x13e/0x148 [ 245.146713][ C0] [ 245.149951][ C0] Kernel Offset: disabled [ 245.154257][ C0] Rebooting in 86400 seconds..