last executing test programs: 19.116826464s ago: executing program 2 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x7, 0xf1, "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", 0x8, 0xe2, 0x2, 0xfb, 0x1, 0x1, 0xa, 0x1}, r5}}, 0x120) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(r0, 0x0, 0x40000a4) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, 0x0) connect$pppl2tp(r7, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x37, 0x0, &(0x7f0000000340)="8c0657f71fa5e7a15c00dd0a9a9cd27d18023b7bed1ca53460fd6d557df0e576d57302c520b4b7aa0c5b731fd74572337f5eec475bedaf"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0xffb, 0x5, 0x3, 0xfffffff9, 0x92, 0x7}, &(0x7f0000000200)=0x9c) 13.822548202s ago: executing program 3 (id=434): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, r1, {{0x2, 0x4000000, 0x7fff, 0x9, 0xfffffff2, 0xa, {0x5, 0x3, 0x8, 0x5, 0x5, 0x80, 0x8, 0x1, 0x2, 0x8000, 0x6, 0x0, r2, 0x80, 0x1}}, {0x0, 0x6}}}, 0xa0) (fail_nth: 6) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r3, 0x0, 0x0, 0x1}]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) dup3(r3, r0, 0x0) 12.360464653s ago: executing program 3 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_disconnect(r6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) 11.267505499s ago: executing program 0 (id=442): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x580}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 11.094633008s ago: executing program 1 (id=443): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x7}, {0x1, 0xe}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488b0}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000380)={0x0, 0x7, 0x0, &(0x7f0000000880)=[{}, {}, {0x80000000}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000080)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001280)={0x0, 0x3, 0x0, &(0x7f0000000fc0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000001100)=[{}], 0x1, 0x0, &(0x7f0000000000)=[{0x0, 0x80000000, 0x0, {0x0}}], 0x5, 0x0, &(0x7f0000001180)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001840)={0x0, 0x1, 0x0, &(0x7f0000001300)=[{}], 0x9, 0x0, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000100)=[{}, {0x0, 0x80000000}], 0x4, 0x0, &(0x7f0000001780)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001e00)={0x0, 0x2, 0x0, &(0x7f00000018c0)=[{}, {}], 0x6, 0x0, &(0x7f0000001980)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001c40)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}], 0x7, 0x0, &(0x7f0000001cc0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r7, r8, 0x2, [0x4]}, {r9, r10, 0x2, [0x4, 0x4]}, 0x10000000, [0x2, 0x7ff]}) 10.588942046s ago: executing program 2 (id=444): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$kcm(0x10, 0x2, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 10.164506824s ago: executing program 2 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=ANY=[@ANYBLOB="e01000073c0007010000000000000000017c00000400fc800c00018006000600800a00000b000280"], 0x10e0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 10.144800337s ago: executing program 0 (id=447): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x40, 0xb, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x0, 0x40}}]}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x3f, &(0x7f0000000500)={0x5, 0xf, 0x3f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x40, 0x9, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x4, 0x2, 0x0, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xa, 0xf000, 0x1e4, [0x3f00, 0xc0, 0xc0cf, 0x30, 0x3f0f, 0xc000]}]}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000540)=@access={'system_u:object_r:hald_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xf38}, 0x47) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) socket$kcm(0x2d, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ec) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xf0, 0x6, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0xd, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x9, 0x9, 0x20, 0x1}, 0x29, &(0x7f0000000100)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x9, 0x7, 0x81, [0xff00, 0x3f00, 0x3f0f, 0xc0, 0x0, 0x3f00]}]}, 0x5, [{0x47, &(0x7f0000000200)=@string={0x47, 0x3, "19a060b15d345bdaeb83896f0ba6784c61359dd8eaeb34dcf5d8938e2f41d7ca13b184ecba6cdc99c775f71615365ea7ec2f33660011c024a1e9058c4599df2bfb6d5589b1"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="76037af346dc11ee6d6a79ed18eee7d287682f1ec5fa4a359a839bb1456db88214132c66ad67921577c14d85e02f27cc007e34ac634102b74ce0d4e3f84408d580af104093c22d8a219f9c8269e6687f1bacfa71b15b5f47dff7db5730dcb03e93e0b80e58325de6c8e0d7a78d6d57375e461f7e5076d50a1dc41bc3a5b7eda1c7b72653011505b6c90c3bd2f74941853c37c9df63e2d19aace2aed37671d04cf85e8699ea3fa2eca3b671a4d06bd3d4b3d0e0c7c36833da9018288ae0ddcfec9f5ed7c02dda3e7056b0815bd85dde55abf96fe0"]}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)={0x40, 0x6, 0x11, {0x11, 0xf, "00030000007a5da01de3bf38b57a31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.932500602s ago: executing program 1 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "a272413959ea2532", "ff65e1f0626eeaef426973dd551a603d", "964e9cef", "8b84f1176989490f"}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000046c0)=""/4090, 0xffa}], 0x40}, 0xfffffffc}, {{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/255}, {&(0x7f0000000140)=""/126}], 0x0, &(0x7f0000000540)=""/187}, 0xf37c}], 0x1, 0x120, 0x0) 9.931654114s ago: executing program 2 (id=449): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0xc, "ce2781a9dfe9bc8597d9"}]}}}}}}}}, 0x0) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) 9.807597842s ago: executing program 1 (id=450): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xa1, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x5, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8138785c873c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfc1f, 0x400, 0xb5}, {0x6, 0x24, 0x1a, 0xe98b, 0x12}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x3, 0x4, 0x58, 0xeb, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x4, 0xdbc, [0x1000, 0x4, 0x4, 0x4, 0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xdc}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x7f, 0x9, 0x8f, 0x4, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x4f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe, 0x3, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x8, 0x10}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x2, 0x9, 0x0, 0x20, 0xff}, 0x4a, &(0x7f0000000340)={0x5, 0xf, 0x4a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0xb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6fbd7b77f0af3ffe7dc2bc483a0d5220"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x37bd, 0xf000, 0x8, [0xf, 0xc0, 0x30, 0x3f00, 0x0, 0xffc140]}]}, 0x6, [{0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "b60d88cb9495aca62ba74642df25c5c1ac246df648fc652f7f5bf7cb4aef3d9d8fb949cdd43baec0ad4c5bd23593e4d3f31f16bcd9839bbd0018d5f97e0e90a0b97578c68a387cb101ba429c0198b23dbd104ce53dfb71a6012505fce67d359a0acd0f2dbf27e316a19f9929e38160ae8bfbebde3eeb39b684d2e4481c6b8f4a73a518080e29c23ece2c86480f23ff70d4e7bf659be3ebb74e89b49bdf5459ad6799a429c2e468f03b63ef58f64ac9319a4cbb4adab83f3f5dd0dd26e8b2b9749cc1c0870e236f7a787514d29880e4a5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x407}}, {0xf7, &(0x7f0000000540)=@string={0xf7, 0x3, "aeed0543c47e435f238ab7b4e2705fb21ac7d8936731b2f740618e1f95fe6181102f566efb1950748cd17706e8c4f540412c5ee04ef509ef90142eb8a7f64f18cc280bdf6b342326b5c20d520a6a015379ab145e13c2187c3039c0160690aa1d8143c2bfc6de19ebd4657f475344203766011d982ffdda13c19d99c608245eaca62d2fa404e74225b541bda231602cb3457c4a8f5cd64182eb3e8a8efb178cddf93723d8fd5ecb9039122d5eb3330d89f8308d29075c410434f84bc6a1c346ea1ecbcf4bd05b7d16f641af575d12a0a7b9b671e4d53b8b6973efd35775dd94d74dafc2f5b686595c7efb30e29b2fed8ad1b3e57b52"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40b}}, {0x11, &(0x7f00000006c0)=@string={0x11, 0x3, "bf75a01d894cc21f73539e5fad38d6"}}, {0x88, &(0x7f0000000700)=@string={0x88, 0x3, "424141ffa85d9809d55a461d8587703643231dc35039f0717ce7f9b7a5f415e6d03fd4a5ec0291081b4f6a369fca8ea2d753c729f961cabf88bbe8c56be9c27030b4956e71cf66f00d5cc86fc31f7abdc7eb684732efd8b1d6e647474e40f7227773d4a2d0024d15beb6891fc598dd344f3d86a6a856493ff2b06aa08bccf2f1502855396db2"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae7add3, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xfff9, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xa1, 0x10, 0x0, 0x1e}, 0x2d) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x401, 0xb, 0x0, 0x5, 0x1, 0x6, 0x8}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sched_setattr(r1, &(0x7f0000000900)={0x38, 0x0, 0x28, 0xa, 0x7, 0x0, 0x3, 0x8, 0x8, 0xffffffff}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000008c0)={0x87e, 0x7, 0x6, 0x3}, 0x10) 9.780153071s ago: executing program 2 (id=451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000040)}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/89, 0x59}], 0x4, &(0x7f0000001380)=""/2, 0x2}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000400), 0x2000011a) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 9.438751839s ago: executing program 4 (id=452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 9.292382751s ago: executing program 4 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000004c0)={0xfffffffd, 0x80000002, 0x1, 'queue1\x00', 0x133}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000001000)="17000000040001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8", 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) r3 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x100, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f000000ae00)={0x1, 0x40, 0x49bd, 0x0, 0xc78f}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) fanotify_mark(0xffffffffffffffff, 0x39, 0x1a, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f0000000480)={0x18}, 0x18) io_setup(0x1fe, &(0x7f0000000200)) 9.105888417s ago: executing program 4 (id=454): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044051}, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 8.065627653s ago: executing program 0 (id=455): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x50) listen(r5, 0x0) writev(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.776443558s ago: executing program 1 (id=456): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000d04df7ddfb339cdaba70006800010000000000fdffffff0200", @ANYRES32=r3, @ANYBLOB="080001000000000004000400"], 0x2c}}, 0x20000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x44) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@metacopy_on}]}) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf25021800000df63af60000000208000100ac141400"], 0x24}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r6, &(0x7f0000000180)={{0x10b, 0x7, 0xd, 0xdc, 0xf3, 0x844c, 0x6c, 0x6}, "4a77e63a99821f8496812356c21a0e416aa330f7234c"}, 0x36) ioctl$TCSETS(r4, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={{0xc2005efde8ad3dce, 0x0, 0x80, {0x80a0000, 0xeeee8000, 0x2}}, "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", "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"}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) epoll_create1(0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xfffffffffffffef8, &(0x7f0000000300)=ANY=[]) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040), 0x4) 5.729900909s ago: executing program 0 (id=457): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$kcm(0x10, 0x2, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 5.520978224s ago: executing program 0 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='sys_exit\x00', r3, 0x0, 0x5}, 0x18) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200880, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000672000/0x2000)=nil, 0x2000, 0x3000002, 0x5d031, r4, 0x0) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r8, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0xab) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffa1}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.394488916s ago: executing program 4 (id=459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) (fail_nth: 4) 4.256498119s ago: executing program 4 (id=460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0xdddd1000, 0x30000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) (async) chdir(&(0x7f0000000140)='./file0/file0\x00') (async) setpgid(r2, r2) setpgid(0x0, r2) (async) r3 = socket(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4, 0x101001) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 3.924495659s ago: executing program 3 (id=461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "a272413959ea2532", "ff65e1f0626eeaef426973dd551a603d", "964e9cef", "8b84f1176989490f"}, 0x50) 3.879978189s ago: executing program 4 (id=462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10000, 0x8, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) syz_clone3(&(0x7f0000000400)={0x204201000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), {0x24}, &(0x7f0000000180)=""/35, 0x23, &(0x7f0000000300)=""/237, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, r4, {0x9, 0xc5, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, r5, r6, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xb6d6, 0x2, 0x10000000}}}, 0x130) getsockname$packet(r2, &(0x7f0000002080), &(0x7f00000020c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) io_destroy(0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r8, 0x0, 0x0, 0x9200000000000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 3.748604166s ago: executing program 3 (id=463): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, &(0x7f00000001c0)) 3.679806774s ago: executing program 3 (id=464): ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xcb6, 0x400, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.86108789s ago: executing program 3 (id=465): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000203000000472af65c227a4ecff4da829e1ad184f5aad48bc9cfa53be571963a15a4d87295f7b5826d2d39380ac8b3aa97565c3653ccbee3c2109a12869498d6d67b50962d8cf427"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffffb, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000550000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000005"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06fec09441d071f66da42a5977e9c38eb95176ab72f42766cde9404f31ecace3366d178c4149a2bb62de1859dfbcd54776fb5f4cf15bd66ea573e763ff9d7bb093adf446a924eb34b6153f08c98e536be48639769253d960357c6f2f887b67958071c2a57812e08a395ca135413b190b98993a3187aba40a725b04561e71922ce142f3f76634b520f4647aed6d3864c6803550e4058500"/166], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r4, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="06", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}, 0x80000}], 0x1, 0x10122, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b61c0cda30fd5027fffffd00000a00c003", @ANYRES32=0x0, @ANYBLOB="80ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xa, 0x3, 0x4, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x700, 0x1000}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xc3000, 0x40, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x5, 0x0, 0x0, r8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) 931.805061ms ago: executing program 2 (id=466): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xa1, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x5, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8138785c873c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xfc1f, 0x400, 0xb5}, {0x6, 0x24, 0x1a, 0xe98b, 0x12}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x3, 0x4, 0x58, 0xeb, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x4, 0xdbc, [0x1000, 0x4, 0x4, 0x4, 0x6]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xdc}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x7f, 0x9, 0x8f, 0x4, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x4f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe, 0x3, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x8, 0x10}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x2, 0x9, 0x0, 0x20, 0xff}, 0x4a, &(0x7f0000000340)={0x5, 0xf, 0x4a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0xb, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6fbd7b77f0af3ffe7dc2bc483a0d5220"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x37bd, 0xf000, 0x8, [0xf, 0xc0, 0x30, 0x3f00, 0x0, 0xffc140]}]}, 0x6, [{0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "b60d88cb9495aca62ba74642df25c5c1ac246df648fc652f7f5bf7cb4aef3d9d8fb949cdd43baec0ad4c5bd23593e4d3f31f16bcd9839bbd0018d5f97e0e90a0b97578c68a387cb101ba429c0198b23dbd104ce53dfb71a6012505fce67d359a0acd0f2dbf27e316a19f9929e38160ae8bfbebde3eeb39b684d2e4481c6b8f4a73a518080e29c23ece2c86480f23ff70d4e7bf659be3ebb74e89b49bdf5459ad6799a429c2e468f03b63ef58f64ac9319a4cbb4adab83f3f5dd0dd26e8b2b9749cc1c0870e236f7a787514d29880e4a5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x407}}, {0xf7, &(0x7f0000000540)=@string={0xf7, 0x3, "aeed0543c47e435f238ab7b4e2705fb21ac7d8936731b2f740618e1f95fe6181102f566efb1950748cd17706e8c4f540412c5ee04ef509ef90142eb8a7f64f18cc280bdf6b342326b5c20d520a6a015379ab145e13c2187c3039c0160690aa1d8143c2bfc6de19ebd4657f475344203766011d982ffdda13c19d99c608245eaca62d2fa404e74225b541bda231602cb3457c4a8f5cd64182eb3e8a8efb178cddf93723d8fd5ecb9039122d5eb3330d89f8308d29075c410434f84bc6a1c346ea1ecbcf4bd05b7d16f641af575d12a0a7b9b671e4d53b8b6973efd35775dd94d74dafc2f5b686595c7efb30e29b2fed8ad1b3e57b52"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40b}}, {0x11, &(0x7f00000006c0)=@string={0x11, 0x3, "bf75a01d894cc21f73539e5fad38d6"}}, {0x88, &(0x7f0000000700)=@string={0x88, 0x3, "424141ffa85d9809d55a461d8587703643231dc35039f0717ce7f9b7a5f415e6d03fd4a5ec0291081b4f6a369fca8ea2d753c729f961cabf88bbe8c56be9c27030b4956e71cf66f00d5cc86fc31f7abdc7eb684732efd8b1d6e647474e40f7227773d4a2d0024d15beb6891fc598dd344f3d86a6a856493ff2b06aa08bccf2f1502855396db2"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000500)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae7add3, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xfff9, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xa1, 0x10, 0x0, 0x1e}, 0x2d) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x401, 0xb, 0x0, 0x5, 0x1, 0x6, 0x8}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) sched_setattr(r1, &(0x7f0000000900)={0x38, 0x0, 0x28, 0xa, 0x7, 0x0, 0x3, 0x8, 0x8, 0xffffffff}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000008c0)={0x87e, 0x7, 0x6, 0x3}, 0x10) 472.196794ms ago: executing program 0 (id=467): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) write$sndseq(r1, &(0x7f0000000500)=[{0x41, 0x0, 0x55, 0xfd, @time={0xdcce, 0xff}, {0x46, 0x2}, {0xf}, @note={0xe, 0x0, 0x0, 0x10, 0x98c5}}], 0x1c) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1075830, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES8=r1, @ANYBLOB=',cache=loose,loose,nodevmap,cache=mmap,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c1262a36361e41af306284720c71464821a3f4e1f549f275cddb203cac6e1088fe25d53f602eee7350bc84a14fc5a913b612bcd4ef03a4dc31333"]) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffe61, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003b667585ddd6d1002a12318f37d17565e17360b18bd6f5ba8f2149610300f0528ae09124efbf8916079540310e298bede075cac4efa327e06be9b636212897"], 0x20}}, 0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', {}, 0x800}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x14, 0x2, 0x4) inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 205.355633ms ago: executing program 1 (id=468): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$kcm(0x10, 0x2, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) 0s ago: executing program 1 (id=469): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): ontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.869555][ T30] audit: type=1400 audit(1758583832.022:302): avc: denied { ioctl } for pid=6333 comm="syz.3.79" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9678 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.006320][ T30] audit: type=1400 audit(1758583832.072:303): avc: denied { create } for pid=6333 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.041986][ T30] audit: type=1400 audit(1758583832.072:304): avc: denied { bind } for pid=6333 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.064602][ T30] audit: type=1400 audit(1758583832.082:305): avc: denied { setopt } for pid=6333 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.085972][ T30] audit: type=1400 audit(1758583832.122:306): avc: denied { accept } for pid=6333 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.130945][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.292148][ T5967] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.502891][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 108.525073][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.535188][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 108.555514][ T9] usb 1-1: string descriptor 0 read error: -22 [ 108.574010][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 108.590685][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.610687][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 108.623698][ T5967] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 108.639306][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 108.659774][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.689992][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.713576][ T5967] usb 5-1: config 0 descriptor?? [ 108.720135][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 108.732106][ T9] usb 1-1: media controller created [ 108.758860][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.767880][ T5961] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.920955][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 108.927690][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.950770][ T5967] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 108.977418][ T5961] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.996088][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.006697][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.033653][ T5961] usb 3-1: Product: syz [ 109.042214][ T5967] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 109.059578][ T5961] usb 3-1: Manufacturer: syz [ 109.090251][ T5961] usb 3-1: SerialNumber: syz [ 109.095085][ T5967] usb 5-1: media controller created [ 109.170233][ T5961] usb 3-1: config 0 descriptor?? [ 109.193850][ T5961] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.214899][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.223770][ T5961] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 109.319640][ T5967] DVB: Unable to find symbol dib7000p_attach() [ 109.341299][ T5967] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 109.396526][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.423617][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.876659][ T6354] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 109.882991][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 109.892524][ T5967] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.898566][ T5967] Registered IR keymap rc-empty [ 109.907532][ T5967] dvb-usb: could not initialize remote control. [ 109.931987][ T5967] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 109.940145][ T5961] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 109.981540][ T5967] usb 5-1: USB disconnect, device number 5 [ 110.046244][ T5967] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 111.794328][ T6382] sctp: failed to load transform for md5: -2 [ 112.974674][ T5961] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.233029][ T5961] em28xx 3-1:0.0: board has no eeprom [ 113.271547][ T9] usb 1-1: USB disconnect, device number 4 [ 113.400586][ T5961] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.431803][ T5961] em28xx 3-1:0.0: dvb set to bulk mode. [ 113.457427][ T976] em28xx 3-1:0.0: Binding DVB extension [ 113.637452][ T43] usb 3-1: USB disconnect, device number 4 [ 113.931644][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 113.933451][ T976] em28xx 3-1:0.0: Registering input extension [ 114.024037][ T43] em28xx 3-1:0.0: Closing input extension [ 114.056025][ T30] audit: type=1326 audit(1758583838.212:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.91" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984538eec9 code=0x0 [ 114.117409][ T43] em28xx 3-1:0.0: Freeing device [ 114.461211][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 114.730604][ T976] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 114.952567][ T976] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.974300][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 114.996931][ T30] audit: type=1400 audit(1758583839.142:308): avc: denied { read } for pid=6440 comm="syz.3.94" path="socket:[10799]" dev="sockfs" ino=10799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.028435][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.069693][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.110231][ T30] audit: type=1400 audit(1758583839.222:309): avc: denied { read } for pid=6438 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.112408][ T976] usb 5-1: config 0 descriptor?? [ 115.231792][ T6433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.259183][ T976] hub 5-1:0.0: USB hub found [ 115.294334][ T30] audit: type=1400 audit(1758583839.432:310): avc: denied { mounton } for pid=6443 comm="syz.3.95" path="/21/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.457751][ T976] hub 5-1:0.0: 2 ports detected [ 116.026798][ T976] hub 5-1:0.0: set hub depth failed [ 116.175103][ T5961] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 116.182464][ T976] usb 5-1: USB disconnect, device number 6 [ 117.070939][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.270707][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 117.405785][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 117.415509][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.426404][ T9] usb 1-1: config 0 descriptor?? [ 117.824495][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 117.835237][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 117.847126][ T9] dib0700: firmware download failed at 7 with -22 [ 117.861461][ T5961] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.862683][ T6467] block nbd2: Send control failed (result -22) [ 117.875306][ T6467] block nbd2: Request send failed, requeueing [ 117.882161][ T55] block nbd2: Dead connection, failed to find a fallback [ 117.889276][ T55] block nbd2: shutting down sockets [ 117.894690][ T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 117.904672][ T6467] EXT4-fs (nbd2): unable to read superblock [ 117.912013][ T30] audit: type=1400 audit(1758583842.022:311): avc: denied { write } for pid=6466 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.210825][ T5961] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 118.241272][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.257188][ T5961] usb 5-1: Product: syz [ 118.286952][ T5961] usb 5-1: Manufacturer: syz [ 118.305148][ T5961] usb 5-1: SerialNumber: syz [ 118.455894][ T9] usb 1-1: USB disconnect, device number 5 [ 118.842098][ T30] audit: type=1400 audit(1758583842.712:312): avc: denied { shutdown } for pid=6469 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.863081][ T30] audit: type=1400 audit(1758583842.712:313): avc: denied { getopt } for pid=6469 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.910995][ T30] audit: type=1400 audit(1758583842.722:314): avc: denied { name_connect } for pid=6469 comm="syz.1.103" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 118.965198][ T30] audit: type=1400 audit(1758583843.122:315): avc: denied { create } for pid=6463 comm="syz.4.101" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.997772][ T5961] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 119.001446][ T30] audit: type=1400 audit(1758583843.122:316): avc: denied { link } for pid=6463 comm="syz.4.101" name="#7" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.038285][ T5961] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 119.049352][ T5961] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 119.064096][ T5961] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 119.082206][ T5961] usb 5-1: USB disconnect, device number 7 [ 119.550771][ T5961] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.970235][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 119.970263][ T30] audit: type=1326 audit(1758583844.122:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 120.507199][ T30] audit: type=1326 audit(1758583844.162:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 120.533681][ T30] audit: type=1326 audit(1758583844.162:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.203999][ T30] audit: type=1326 audit(1758583844.162:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.379033][ T30] audit: type=1326 audit(1758583844.162:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.415234][ T30] audit: type=1326 audit(1758583844.162:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.438698][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 121.447211][ T30] audit: type=1326 audit(1758583844.172:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.477435][ T5961] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 121.490745][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.502490][ T5961] usb 2-1: config 0 descriptor?? [ 121.507619][ T30] audit: type=1326 audit(1758583844.172:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.527258][ T6490] overlay: Unknown parameter 'obj_role' [ 121.533696][ T30] audit: type=1326 audit(1758583844.192:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 121.564742][ T30] audit: type=1326 audit(1758583844.202:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6475 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x7fc00000 [ 122.237440][ T5961] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 122.261342][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.288276][ T5961] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 122.460636][ T5961] usb 2-1: media controller created [ 122.485130][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.596623][ T6509] netlink: 9 bytes leftover after parsing attributes in process `syz.4.112'. [ 122.614052][ T6509] gretap0: entered promiscuous mode [ 122.753615][ T5961] DVB: Unable to find symbol dib7000p_attach() [ 122.775398][ T5961] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 122.829701][ T6482] dib0700: tx buffer length is larger than 4. Not supported. [ 123.109778][ T6506] netlink: 5 bytes leftover after parsing attributes in process `syz.4.112'. [ 123.111151][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 123.132934][ T6506] 0ªî{X¹¦: renamed from gretap0 [ 123.155983][ T6506] 0ªî{X¹¦: left promiscuous mode [ 123.162402][ T6506] 0ªî{X¹¦: entered allmulticast mode [ 123.180852][ T5961] rc_core: IR keymap rc-dib0700-rc5 not found [ 123.190605][ T5961] Registered IR keymap rc-empty [ 123.213814][ T5961] dvb-usb: could not initialize remote control. [ 123.240463][ T5961] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 123.276387][ T5961] usb 2-1: USB disconnect, device number 4 [ 123.285263][ T6506] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 123.385841][ T5961] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 123.506655][ T6519] syz.0.115 uses obsolete (PF_INET,SOCK_PACKET) [ 123.728018][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 124.075433][ T6524] Failed to get privilege flags for destination (handle=0x2:0x0) [ 124.740607][ T5961] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 124.904831][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 124.914475][ T5961] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 124.923868][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 124.941826][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.961442][ T5961] usb 2-1: config 0 descriptor?? [ 125.041763][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 125.041777][ T30] audit: type=1400 audit(1758583849.202:346): avc: denied { append } for pid=6536 comm="syz.0.122" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.194402][ T5961] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 125.204518][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.224817][ T5961] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 125.234808][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 125.247380][ T5961] dib0700: firmware download failed at 7 with -22 [ 125.254051][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.269103][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.301288][ T976] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.333426][ T9] usb 3-1: config 0 descriptor?? [ 125.354781][ T6531] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.402012][ T9] hub 3-1:0.0: USB hub found [ 125.504888][ T6546] warning: `syz.4.124' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.790832][ T9] hub 3-1:0.0: 2 ports detected [ 125.800968][ T976] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 125.810591][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.818617][ T976] usb 4-1: Product: syz [ 125.824001][ T976] usb 4-1: Manufacturer: syz [ 125.831505][ T976] usb 4-1: SerialNumber: syz [ 125.866081][ T976] usb 4-1: config 0 descriptor?? [ 125.875639][ T5961] usb 2-1: USB disconnect, device number 5 [ 126.142590][ T6552] netlink: 'syz.0.126': attribute type 9 has an invalid length. [ 126.390230][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.402579][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.410447][ T9] hub 3-1:0.0: set hub depth failed [ 126.528811][ T9] usb 3-1: USB disconnect, device number 5 [ 126.545405][ T976] usb 4-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 126.563555][ T976] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 126.615440][ T976] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 126.660201][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 126.750814][ T976] usb 4-1: USB disconnect, device number 3 [ 126.885552][ T6566] overlayfs: failed to resolve './file1': -2 [ 127.365581][ T30] audit: type=1400 audit(1758583851.132:347): avc: denied { read write } for pid=6563 comm="syz.4.129" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.390160][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.415347][ T30] audit: type=1400 audit(1758583851.132:348): avc: denied { open } for pid=6563 comm="syz.4.129" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.439881][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.461188][ T30] audit: type=1400 audit(1758583851.142:349): avc: denied { ioctl } for pid=6563 comm="syz.4.129" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.700012][ T30] audit: type=1400 audit(1758583851.842:350): avc: denied { create } for pid=6568 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.440751][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.640678][ T976] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 128.864713][ T976] usb 4-1: config 0 has no interface number 0 [ 128.904528][ T976] usb 4-1: New USB device found, idVendor=469a, idProduct=d864, bcdDevice=62.40 [ 128.950599][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.988572][ T976] usb 4-1: Product: syz [ 129.018498][ T976] usb 4-1: Manufacturer: syz [ 129.032444][ T30] audit: type=1400 audit(1758583853.182:351): avc: denied { mounton } for pid=6585 comm="syz.4.135" path="/25/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 129.065756][ T976] usb 4-1: SerialNumber: syz [ 129.069067][ T30] audit: type=1400 audit(1758583853.222:352): avc: denied { ioctl } for pid=6585 comm="syz.4.135" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 129.077230][ T976] usb 4-1: config 0 descriptor?? [ 129.189008][ T30] audit: type=1400 audit(1758583853.332:353): avc: denied { mounton } for pid=6586 comm="syz.1.136" path="/24/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.215944][ T30] audit: type=1400 audit(1758583853.332:354): avc: denied { write } for pid=6586 comm="syz.1.136" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.236485][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.273133][ T30] audit: type=1400 audit(1758583853.332:355): avc: denied { open } for pid=6586 comm="syz.1.136" path="/24/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.201902][ T6603] FAULT_INJECTION: forcing a failure. [ 130.201902][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.215182][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 130.215204][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.215214][ T6603] Call Trace: [ 130.215220][ T6603] [ 130.215227][ T6603] dump_stack_lvl+0x16c/0x1f0 [ 130.215254][ T6603] should_fail_ex+0x512/0x640 [ 130.215279][ T6603] _copy_to_user+0x32/0xd0 [ 130.215306][ T6603] simple_read_from_buffer+0xcb/0x170 [ 130.215327][ T6603] proc_fail_nth_read+0x197/0x240 [ 130.215348][ T6603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.215370][ T6603] ? rw_verify_area+0xcf/0x6c0 [ 130.215397][ T6603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.215416][ T6603] vfs_read+0x1e1/0xcf0 [ 130.215437][ T6603] ? __pfx___mutex_lock+0x10/0x10 [ 130.215461][ T6603] ? __pfx_vfs_read+0x10/0x10 [ 130.215486][ T6603] ? __fget_files+0x20e/0x3c0 [ 130.215513][ T6603] ksys_read+0x12a/0x250 [ 130.215530][ T6603] ? __pfx_ksys_read+0x10/0x10 [ 130.215548][ T6603] ? fput+0x9b/0xd0 [ 130.215574][ T6603] do_syscall_64+0xcd/0x4e0 [ 130.215598][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.215616][ T6603] RIP: 0033:0x7fe617b8d8dc [ 130.215630][ T6603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 130.215646][ T6603] RSP: 002b:00007fe618a40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.215662][ T6603] RAX: ffffffffffffffda RBX: 00007fe617de6180 RCX: 00007fe617b8d8dc [ 130.215674][ T6603] RDX: 000000000000000f RSI: 00007fe618a400a0 RDI: 0000000000000007 [ 130.215684][ T6603] RBP: 00007fe618a40090 R08: 0000000000000000 R09: 0000000000000000 [ 130.215694][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.215704][ T6603] R13: 00007fe617de6218 R14: 00007fe617de6180 R15: 00007ffd9df63bd8 [ 130.215728][ T6603] [ 130.402140][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.481858][ T976] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 130.567265][ T942] usb 4-1: USB disconnect, device number 4 [ 130.636388][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 130.636420][ T30] audit: type=1400 audit(1758583854.792:359): avc: denied { read } for pid=6605 comm="syz.4.141" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 130.671819][ T30] audit: type=1400 audit(1758583854.822:360): avc: denied { open } for pid=6605 comm="syz.4.141" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 130.790764][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.805718][ T976] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 130.828233][ T976] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 130.867363][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.871307][ T30] audit: type=1400 audit(1758583855.002:361): avc: denied { ioctl } for pid=6605 comm="syz.4.141" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 130.877429][ T976] usb 3-1: config 0 descriptor?? [ 130.903198][ T30] audit: type=1400 audit(1758583855.022:362): avc: denied { mount } for pid=6605 comm="syz.4.141" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.032238][ T6607] tmpfs: Cannot enable quota on remount [ 131.032982][ T30] audit: type=1400 audit(1758583855.192:363): avc: denied { remount } for pid=6605 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.083112][ T30] audit: type=1400 audit(1758583855.192:364): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 131.103744][ T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.110565][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 131.116445][ T30] audit: type=1400 audit(1758583855.192:365): avc: denied { create } for pid=6605 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.138320][ T976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.149596][ T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.157342][ T30] audit: type=1400 audit(1758583855.192:366): avc: denied { connect } for pid=6605 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.200939][ T976] usb 3-1: media controller created [ 131.213064][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.225863][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 131.232611][ T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.243237][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 131.274086][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 131.281991][ T30] audit: type=1400 audit(1758583855.432:367): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.305236][ T6595] dibusb: i2c wr: len=61 is too big! [ 131.305236][ T6595] [ 131.321609][ T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.387343][ T6616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.430851][ T30] audit: type=1400 audit(1758583855.432:368): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2892 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.481576][ T5967] dvb-usb: bulk message failed: -22 (1/0) [ 131.488200][ T976] usb 3-1: USB disconnect, device number 6 [ 131.495264][ T5967] dvb-usb: error while querying for an remote control event. [ 131.519558][ T6612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.629413][ T976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.362161][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.368587][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.407269][ T6612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.802514][ T6630] FAULT_INJECTION: forcing a failure. [ 132.802514][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.820890][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT(full) [ 132.820914][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.820924][ T6630] Call Trace: [ 132.820930][ T6630] [ 132.820937][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 132.820963][ T6630] should_fail_ex+0x512/0x640 [ 132.820988][ T6630] _copy_from_user+0x2e/0xd0 [ 132.821014][ T6630] copy_msghdr_from_user+0x98/0x160 [ 132.821037][ T6630] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 132.821069][ T6630] ___sys_sendmsg+0xfe/0x1d0 [ 132.821091][ T6630] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.821141][ T6630] __sys_sendmsg+0x16d/0x220 [ 132.821163][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.821200][ T6630] do_syscall_64+0xcd/0x4e0 [ 132.821224][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.821242][ T6630] RIP: 0033:0x7f449ff8eec9 [ 132.821256][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.821272][ T6630] RSP: 002b:00007f44a0da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.821294][ T6630] RAX: ffffffffffffffda RBX: 00007f44a01e5fa0 RCX: 00007f449ff8eec9 [ 132.821306][ T6630] RDX: 8aca9f9772f626f6 RSI: 0000200000001540 RDI: 0000000000000003 [ 132.821316][ T6630] RBP: 00007f44a0da2090 R08: 0000000000000000 R09: 0000000000000000 [ 132.821326][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.821336][ T6630] R13: 00007f44a01e6038 R14: 00007f44a01e5fa0 R15: 00007ffd14823e28 [ 132.821358][ T6630] [ 133.048116][ T6612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.124634][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.148911][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.170388][ T6612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.201670][ T6637] netlink: 14 bytes leftover after parsing attributes in process `syz.2.150'. [ 133.283773][ T6413] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.330858][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.347391][ T6413] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.381813][ T5973] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.409967][ T5973] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.492348][ T5902] usb 3-1: device descriptor read/64, error -71 [ 133.551038][ T976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.703000][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 133.851140][ T5902] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.908058][ T6650] Failed to get privilege flags for destination (handle=0x2:0x0) [ 134.070621][ T5902] usb 3-1: device descriptor read/64, error -71 [ 134.100638][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 134.107074][ T976] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 134.116723][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.158419][ T976] usb 2-1: config 0 descriptor?? [ 134.280401][ T5902] usb usb3-port1: attempt power cycle [ 134.854149][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 134.890140][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 134.995724][ T976] dib0700: firmware download failed at 7 with -22 [ 135.020987][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.090602][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 135.099511][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 135.112642][ T5902] usb 3-1: device descriptor read/8, error -71 [ 135.303896][ T5910] usb 2-1: USB disconnect, device number 6 [ 135.360593][ T5902] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 135.393313][ T5902] usb 3-1: device descriptor read/8, error -71 [ 135.532983][ T5902] usb usb3-port1: unable to enumerate USB device [ 135.921211][ T976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.127921][ T6680] vxcan1: entered allmulticast mode [ 136.135205][ T976] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 136.146325][ T976] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 136.158727][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.170313][ T976] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.176826][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.186979][ T976] usb 5-1: config 0 has no interface number 0 [ 136.187019][ T976] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 136.187043][ T976] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.187065][ T976] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.187101][ T976] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 136.187123][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.195758][ T976] usb 5-1: config 0 descriptor?? [ 136.263864][ T976] gspca_main: spca561-2.14.0 probing abcd:cdee [ 136.846291][ T976] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 136.866998][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 136.933989][ T5902] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 136.943139][ T976] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.955254][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.996229][ T976] usb 5-1: MIDIStreaming interface descriptor not found [ 137.058414][ T5902] usb 2-1: config 0 descriptor?? [ 137.276899][ T5902] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 137.396720][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.432624][ T5902] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 138.510614][ T5902] usb 2-1: media controller created [ 138.534371][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.787155][ T5902] DVB: Unable to find symbol dib7000p_attach() [ 138.787728][ T5961] usb 5-1: USB disconnect, device number 8 [ 138.800652][ T5902] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 138.940619][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found [ 138.947753][ T5902] Registered IR keymap rc-empty [ 139.021692][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 139.063620][ T5902] dvb-usb: could not initialize remote control. [ 139.090565][ T5902] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 139.313346][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.327662][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 139.340018][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.902723][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 140.064486][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.152950][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.163698][ T9] usb 4-1: config 0 descriptor?? [ 140.190728][ T6704] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.522298][ T5902] usb 2-1: USB disconnect, device number 7 [ 140.574015][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 140.577499][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 140.577531][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.577552][ T5910] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.577573][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 140.577598][ T5910] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.577630][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 140.577650][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.586751][ T9] hub 4-1:0.0: USB hub found [ 140.593635][ T5910] usb 3-1: config 0 descriptor?? [ 140.743494][ T9] hub 4-1:0.0: 2 ports detected [ 140.804768][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 140.861579][ T5902] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 141.050145][ T6707] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.072183][ T9] hub 4-1:0.0: set hub depth failed [ 142.080988][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 142.081003][ T30] audit: type=1400 audit(1758583866.232:377): avc: denied { create } for pid=6725 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.167186][ T9] usb 4-1: USB disconnect, device number 5 [ 143.316634][ T6707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6707 comm=syz.2.166 [ 143.373867][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.380816][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 143.396243][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.414450][ T5910] usb 3-1: USB disconnect, device number 11 [ 143.850836][ T6756] FAULT_INJECTION: forcing a failure. [ 143.850836][ T6756] name failslab, interval 1, probability 0, space 0, times 1 [ 143.865217][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.3.177 Not tainted syzkaller #0 PREEMPT(full) [ 143.865241][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.865252][ T6756] Call Trace: [ 143.865258][ T6756] [ 143.865264][ T6756] dump_stack_lvl+0x16c/0x1f0 [ 143.865292][ T6756] should_fail_ex+0x512/0x640 [ 143.865314][ T6756] ? __kvmalloc_node_noprof+0x124/0x620 [ 143.865334][ T6756] should_failslab+0xc2/0x120 [ 143.865355][ T6756] __kvmalloc_node_noprof+0x137/0x620 [ 143.865372][ T6756] ? __pfx___mutex_lock+0x10/0x10 [ 143.865395][ T6756] ? traverse.part.0.constprop.0+0x392/0x640 [ 143.865419][ T6756] ? traverse.part.0.constprop.0+0x392/0x640 [ 143.865436][ T6756] traverse.part.0.constprop.0+0x392/0x640 [ 143.865455][ T6756] ? _kstrtoull+0x145/0x200 [ 143.865473][ T6756] ? __pfx__kstrtoull+0x10/0x10 [ 143.865495][ T6756] seq_read_iter+0x932/0x12c0 [ 143.865524][ T6756] seq_read+0x3a3/0x570 [ 143.865541][ T6756] ? __pfx_seq_read+0x10/0x10 [ 143.865564][ T6756] ? get_pid_task+0xfc/0x250 [ 143.865585][ T6756] ? avc_policy_seqno+0x9/0x20 [ 143.865608][ T6756] ? __pfx_seq_read+0x10/0x10 [ 143.865625][ T6756] proc_reg_read+0x23d/0x330 [ 143.865650][ T6756] ? __pfx_proc_reg_read+0x10/0x10 [ 143.865676][ T6756] vfs_read+0x1e1/0xcf0 [ 143.865700][ T6756] ? __pfx_vfs_read+0x10/0x10 [ 143.865715][ T6756] ? find_held_lock+0x2b/0x80 [ 143.865738][ T6756] ? __fget_files+0x204/0x3c0 [ 143.865762][ T6756] ? __fget_files+0x20e/0x3c0 [ 143.865779][ T6756] ? __fget_files+0x190/0x3c0 [ 143.865805][ T6756] __x64_sys_pread64+0x1eb/0x250 [ 143.865825][ T6756] ? __pfx___x64_sys_pread64+0x10/0x10 [ 143.865852][ T6756] do_syscall_64+0xcd/0x4e0 [ 143.865877][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.865895][ T6756] RIP: 0033:0x7faf91d8eec9 [ 143.865915][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.865932][ T6756] RSP: 002b:00007faf92cc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 143.865949][ T6756] RAX: ffffffffffffffda RBX: 00007faf91fe6180 RCX: 00007faf91d8eec9 [ 143.865961][ T6756] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000008 [ 143.865971][ T6756] RBP: 00007faf92cc3090 R08: 0000000000000000 R09: 0000000000000000 [ 143.865981][ T6756] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.865992][ T6756] R13: 00007faf91fe6218 R14: 00007faf91fe6180 R15: 00007fffa24eb9e8 [ 143.866016][ T6756] [ 144.108246][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.343409][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 144.577914][ T30] audit: type=1400 audit(1758583868.712:378): avc: denied { ioctl } for pid=6765 comm="syz.1.182" path="socket:[11730]" dev="sockfs" ino=11730 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.602408][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.350673][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.500666][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 145.507400][ T5930] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 145.528153][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.563354][ T5930] usb 3-1: config 0 descriptor?? [ 145.729056][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 145.738040][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 145.746914][ T6776] netlink: 'syz.4.184': attribute type 19 has an invalid length. [ 145.915626][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 146.208561][ T5930] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 146.303042][ T30] audit: type=1400 audit(1758583870.462:379): avc: denied { create } for pid=6780 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 146.313133][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.617151][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 147.883553][ T30] audit: type=1400 audit(1758583870.632:380): avc: denied { mount } for pid=6780 comm="syz.3.186" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 147.944478][ T5930] usb 3-1: media controller created [ 147.997588][ T30] audit: type=1400 audit(1758583872.152:381): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 148.069319][ T30] audit: type=1326 audit(1758583872.212:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.0.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984538eec9 code=0x0 [ 148.075554][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.457814][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 148.457987][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 148.798867][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 148.821010][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 148.827509][ T5930] Registered IR keymap rc-empty [ 148.834996][ T5930] dvb-usb: could not initialize remote control. [ 148.853646][ T5930] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 148.990044][ T5930] usb 3-1: USB disconnect, device number 12 [ 149.006815][ T30] audit: type=1400 audit(1758583873.162:383): avc: denied { ioctl } for pid=6803 comm="syz.1.191" path="socket:[12729]" dev="sockfs" ino=12729 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.175959][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 149.657457][ T5961] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.712609][ T5930] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 149.761179][ T6807] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62649 sclass=netlink_xfrm_socket pid=6807 comm=syz.0.193 [ 149.854821][ T5961] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 149.865027][ T5961] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.879441][ T5961] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.973909][ T5961] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.983176][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.996386][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.017745][ T5961] usb 2-1: invalid MIDI out EP 0 [ 150.128631][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 150.784808][ T5961] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 150.831099][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.854563][ T5961] usb 2-1: USB disconnect, device number 8 [ 151.133516][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 151.186050][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 151.227720][ T6834] netlink: 'syz.4.200': attribute type 19 has an invalid length. [ 151.255690][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 152.008283][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 152.222127][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.241273][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 152.252966][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.262118][ T5961] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.270817][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.290715][ T10] usb 1-1: config 0 descriptor?? [ 152.299730][ T6840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.311783][ T10] hub 1-1:0.0: USB hub found [ 152.340802][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 152.348286][ T976] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.423838][ T5961] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 152.433253][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.445434][ T5961] usb 2-1: config 0 descriptor?? [ 152.510600][ T10] hub 1-1:0.0: 2 ports detected [ 152.510730][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 152.529635][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.545822][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 152.557474][ T976] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 152.566591][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.578157][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.610630][ T976] usb 5-1: config 0 descriptor?? [ 152.615781][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.640944][ T9] usb 4-1: config 0 descriptor?? [ 152.651375][ T6850] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 152.686248][ T9] hub 4-1:0.0: USB hub found [ 152.829729][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 152.838280][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.859846][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 152.869181][ T976] usb 5-1: media controller created [ 152.887672][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.898684][ T9] hub 4-1:0.0: 2 ports detected [ 152.959445][ T10] hub 1-1:0.0: set hub depth failed [ 152.964819][ T976] DVB: Unable to find symbol dib7000p_attach() [ 152.976293][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 152.989488][ T10] usb 1-1: USB disconnect, device number 6 [ 153.069719][ T5961] ath6kl: mismatched byte count 0 vs. expected 12 [ 153.088638][ T5961] ath6kl: Failed to init ath6kl core: -22 [ 153.095398][ T5961] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 153.231010][ T976] rc_core: IR keymap rc-dib0700-rc5 not found [ 153.237218][ T976] Registered IR keymap rc-empty [ 153.248654][ T976] dvb-usb: could not initialize remote control. [ 153.258912][ T976] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 153.286516][ T976] usb 5-1: USB disconnect, device number 9 [ 153.301595][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 153.323738][ T6846] netlink: 'syz.1.204': attribute type 5 has an invalid length. [ 153.336049][ T9] hub 4-1:0.0: set hub depth failed [ 153.344701][ T9] usb 4-1: USB disconnect, device number 6 [ 153.382582][ T976] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 153.473065][ T30] audit: type=1400 audit(1758583877.632:384): avc: denied { sys_module } for pid=6844 comm="syz.1.204" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.520008][ T5961] usb 2-1: USB disconnect, device number 9 [ 153.606541][ T30] audit: type=1400 audit(1758583877.762:385): avc: denied { write } for pid=6863 comm="syz.0.208" path="socket:[12019]" dev="sockfs" ino=12019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.958373][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 153.971066][ T30] audit: type=1400 audit(1758583878.112:386): avc: denied { ioctl } for pid=6868 comm="syz.0.209" path="socket:[12025]" dev="sockfs" ino=12025 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.095054][ T30] audit: type=1400 audit(1758583878.112:387): avc: denied { write } for pid=6868 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.220725][ T30] audit: type=1400 audit(1758583878.362:388): avc: denied { mounton } for pid=6868 comm="syz.0.209" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.614953][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 154.624166][ T30] audit: type=1400 audit(1758583878.422:389): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.846829][ T30] audit: type=1400 audit(1758583878.422:390): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.940591][ T30] audit: type=1400 audit(1758583878.422:391): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.084672][ T6884] ubi31: attaching mtd0 [ 155.094182][ T6884] ubi31: scanning is finished [ 155.098886][ T6884] ubi31: empty MTD device detected [ 155.294423][ T30] audit: type=1400 audit(1758583878.422:392): avc: denied { read } for pid=5515 comm="dhcpcd" name="n100" dev="tmpfs" ino=3112 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.326855][ T30] audit: type=1400 audit(1758583878.422:393): avc: denied { open } for pid=5515 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3112 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.980893][ T6895] FAULT_INJECTION: forcing a failure. [ 155.980893][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 155.993661][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.4.215 Not tainted syzkaller #0 PREEMPT(full) [ 155.993683][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.993692][ T6895] Call Trace: [ 155.993697][ T6895] [ 155.993701][ T6895] dump_stack_lvl+0x16c/0x1f0 [ 155.993719][ T6895] should_fail_ex+0x512/0x640 [ 155.993733][ T6895] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 155.993750][ T6895] should_failslab+0xc2/0x120 [ 155.993770][ T6895] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 155.993786][ T6895] ? __d_alloc+0x32/0xae0 [ 155.993801][ T6895] __d_alloc+0x32/0xae0 [ 155.993824][ T6895] d_alloc_pseudo+0x1c/0xc0 [ 155.993841][ T6895] alloc_file_pseudo+0xcf/0x230 [ 155.993858][ T6895] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 155.993877][ T6895] __anon_inode_getfile+0xe8/0x280 [ 155.993891][ T6895] ? kasan_save_track+0x14/0x30 [ 155.993903][ T6895] sync_file_alloc+0x65/0x160 [ 155.993916][ T6895] sync_file_create+0x17/0xf0 [ 155.993928][ T6895] sw_sync_ioctl+0x8a2/0xfd0 [ 155.993944][ T6895] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 155.993961][ T6895] ? selinux_file_ioctl+0x180/0x270 [ 155.993977][ T6895] ? selinux_file_ioctl+0xb4/0x270 [ 155.993993][ T6895] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 155.994007][ T6895] __x64_sys_ioctl+0x18e/0x210 [ 155.994024][ T6895] do_syscall_64+0xcd/0x4e0 [ 155.994040][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.994051][ T6895] RIP: 0033:0x7fe617b8eec9 [ 155.994060][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.994074][ T6895] RSP: 002b:00007fe618a61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.994085][ T6895] RAX: ffffffffffffffda RBX: 00007fe617de6090 RCX: 00007fe617b8eec9 [ 155.994092][ T6895] RDX: 0000200000000100 RSI: 00000000c0285700 RDI: 0000000000000007 [ 155.994098][ T6895] RBP: 00007fe618a61090 R08: 0000000000000000 R09: 0000000000000000 [ 155.994104][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.994110][ T6895] R13: 00007fe617de6128 R14: 00007fe617de6090 R15: 00007ffd9df63bd8 [ 155.994124][ T6895] [ 156.208803][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.542541][ T6884] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 156.621906][ T6884] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 156.690310][ T6903] FAULT_INJECTION: forcing a failure. [ 156.690310][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.720558][ T6884] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 156.735612][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) [ 156.735637][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.735647][ T6903] Call Trace: [ 156.735652][ T6903] [ 156.735659][ T6903] dump_stack_lvl+0x16c/0x1f0 [ 156.735686][ T6903] should_fail_ex+0x512/0x640 [ 156.735712][ T6903] _copy_to_user+0x32/0xd0 [ 156.735739][ T6903] simple_read_from_buffer+0xcb/0x170 [ 156.735760][ T6903] proc_fail_nth_read+0x197/0x240 [ 156.735782][ T6903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.735804][ T6903] ? rw_verify_area+0xcf/0x6c0 [ 156.735829][ T6903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.735849][ T6903] vfs_read+0x1e1/0xcf0 [ 156.735871][ T6903] ? __pfx___mutex_lock+0x10/0x10 [ 156.735895][ T6903] ? __pfx_vfs_read+0x10/0x10 [ 156.735918][ T6903] ? __fget_files+0x20e/0x3c0 [ 156.735945][ T6903] ksys_read+0x12a/0x250 [ 156.735962][ T6903] ? __pfx_ksys_read+0x10/0x10 [ 156.735987][ T6903] do_syscall_64+0xcd/0x4e0 [ 156.736011][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.736029][ T6903] RIP: 0033:0x7faf91d8d8dc [ 156.736044][ T6903] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.736060][ T6903] RSP: 002b:00007faf92d05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.736083][ T6903] RAX: ffffffffffffffda RBX: 00007faf91fe5fa0 RCX: 00007faf91d8d8dc [ 156.736095][ T6903] RDX: 000000000000000f RSI: 00007faf92d050a0 RDI: 0000000000000005 [ 156.736105][ T6903] RBP: 00007faf92d05090 R08: 0000000000000000 R09: 0000000000000000 [ 156.736115][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.736126][ T6903] R13: 00007faf91fe6038 R14: 00007faf91fe5fa0 R15: 00007fffa24eb9e8 [ 156.736149][ T6903] [ 156.935499][ T6884] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 156.966959][ T6884] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 156.973885][ T6884] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.984102][ T6884] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 810514607 [ 157.045698][ T6884] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 157.128472][ T6901] ubi31: background thread "ubi_bgt31d" started, PID 6901 [ 157.434100][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 158.533871][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 158.543564][ T6942] nbd: must specify at least one socket [ 158.891567][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 158.891584][ T30] audit: type=1400 audit(1758583883.032:415): avc: denied { write } for pid=6943 comm="syz.3.224" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.210728][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.258694][ T30] audit: type=1400 audit(1758583883.412:416): avc: denied { remove_name } for pid=6948 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.337733][ T30] audit: type=1400 audit(1758583883.442:417): avc: denied { unlink } for pid=6948 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3154 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.425571][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 159.445481][ T9] usb 4-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 159.454551][ T9] usb 4-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 159.538212][ T9] usb 4-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 159.554406][ T30] audit: type=1400 audit(1758583883.442:418): avc: denied { getopt } for pid=6945 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.718598][ T9] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 159.759587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.888519][ T6962] tmpfs: Unknown parameter 'gˆÀøp¨Q+JÌÜt"rpquota_block_' [ 162.865895][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 163.050805][ T9] usb 4-1: string descriptor 0 read error: -71 [ 163.070059][ T9] uvcvideo 4-1:73.0: probe with driver uvcvideo failed with error -22 [ 163.089809][ T9] usb 4-1: USB disconnect, device number 7 [ 163.500074][ T30] audit: type=1400 audit(1758583887.632:419): avc: denied { ioctl } for pid=7011 comm="syz.2.238" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.529497][ T30] audit: type=1400 audit(1758583887.632:420): avc: denied { read write } for pid=7011 comm="syz.2.238" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.559453][ T30] audit: type=1400 audit(1758583887.632:421): avc: denied { open } for pid=7011 comm="syz.2.238" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 163.562429][ T5930] hid-generic 22BC:0B27:7FFFFFFF.0001: unknown main item tag 0x1 [ 163.582685][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.613602][ T7017] Failed to get privilege flags for destination (handle=0x2:0x0) [ 163.666997][ T5930] hid-generic 22BC:0B27:7FFFFFFF.0001: item fetching failed at offset 3/4 [ 163.715616][ T5930] hid-generic 22BC:0B27:7FFFFFFF.0001: probe with driver hid-generic failed with error -22 [ 163.856939][ T30] audit: type=1326 audit(1758583888.012:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7022 comm="syz.3.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf91d8eec9 code=0x0 [ 163.879716][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.315720][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 164.823024][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 166.765325][ T7063] gretap1: entered promiscuous mode [ 167.076789][ T30] audit: type=1400 audit(1758583891.202:423): avc: denied { read append } for pid=7052 comm="syz.3.248" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.100245][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.198796][ T30] audit: type=1400 audit(1758583891.202:424): avc: denied { open } for pid=7052 comm="syz.3.248" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.528244][ T30] audit: type=1400 audit(1758583891.202:425): avc: denied { ioctl } for pid=7052 comm="syz.3.248" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.563043][ T30] audit: type=1400 audit(1758583891.222:426): avc: denied { write } for pid=7052 comm="syz.3.248" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.585933][ T30] audit: type=1400 audit(1758583891.512:427): avc: denied { ioctl } for pid=7072 comm="syz.1.253" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 167.610921][ T30] audit: type=1400 audit(1758583891.562:428): avc: denied { create } for pid=7072 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.630379][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.636939][ T30] audit: type=1400 audit(1758583891.602:429): avc: denied { connect } for pid=7072 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 167.661740][ T30] audit: type=1400 audit(1758583891.622:430): avc: denied { bind } for pid=7072 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.594525][ T30] audit: type=1400 audit(1758583891.632:431): avc: denied { listen } for pid=7072 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.613997][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.620265][ T30] audit: type=1400 audit(1758583891.642:432): avc: denied { accept } for pid=7072 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.300096][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 169.313013][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 169.358830][ T7084] netlink: 'syz.1.256': attribute type 19 has an invalid length. [ 169.412098][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 169.862573][ T7090] Failed to get privilege flags for destination (handle=0x2:0x0) [ 169.909829][ T7094] ubi: mtd0 is already attached to ubi31 [ 170.152843][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 170.186336][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 170.261245][ T7095] netlink: 'syz.2.257': attribute type 19 has an invalid length. [ 170.270545][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 171.707103][ T7107] sctp: failed to load transform for md5: -2 [ 172.199201][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 172.199215][ T30] audit: type=1400 audit(1758583896.352:437): avc: denied { bind } for pid=7116 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.960268][ T7122] sctp: failed to load transform for md5: -2 [ 174.356071][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 174.389404][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 174.711041][ T976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.730567][ T5960] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.342124][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.361681][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 175.369988][ T976] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 175.383259][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.392015][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.403539][ T5960] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 175.416898][ T976] usb 5-1: config 0 descriptor?? [ 175.432709][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.472710][ T5960] usb 4-1: config 0 descriptor?? [ 175.486314][ T5960] usb 4-1: Found UVC 0.00 device (2833:0201) [ 175.496757][ T5960] usb 4-1: No valid video chain found. [ 175.522689][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 175.749466][ T9] usb 3-1: config 0 has no interfaces? [ 175.763437][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 175.852297][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.881701][ T9] usb 3-1: config 0 descriptor?? [ 175.937444][ T9] usb 4-1: USB disconnect, device number 8 [ 176.108257][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.133703][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.154132][ T976] ath6kl: mismatched byte count 0 vs. expected 12 [ 176.168849][ T976] ath6kl: Failed to init ath6kl core: -22 [ 176.176133][ T976] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 176.210767][ T30] audit: type=1400 audit(1758583900.372:438): avc: denied { write } for pid=7141 comm="syz.2.268" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.332690][ T5910] usb 3-1: USB disconnect, device number 13 [ 176.363543][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 176.481611][ T7138] netlink: 'syz.4.267': attribute type 5 has an invalid length. [ 177.216498][ T7162] sctp: failed to load transform for md5: -2 [ 177.489860][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 177.532760][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 179.006561][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 179.020987][ T5910] usb 5-1: USB disconnect, device number 10 [ 179.080934][ T7179] input: syz1 as /devices/virtual/input/input17 [ 181.022167][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 181.513934][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.282'. [ 181.523046][ T7203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.282'. [ 181.831421][ T7208] process 'syz.1.281' launched './file0' with NULL argv: empty string added [ 181.833624][ T30] audit: type=1400 audit(1758583905.992:439): avc: denied { execute } for pid=7199 comm="syz.1.281" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.004782][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 182.359060][ T30] audit: type=1400 audit(1758583905.992:440): avc: denied { execute_no_trans } for pid=7199 comm="syz.1.281" path="/55/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.432477][ T30] audit: type=1400 audit(1758583906.422:441): avc: denied { open } for pid=7210 comm="syz.2.284" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 182.457489][ T30] audit: type=1400 audit(1758583906.422:442): avc: denied { ioctl } for pid=7210 comm="syz.2.284" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 182.482527][ T30] audit: type=1400 audit(1758583906.462:443): avc: denied { connect } for pid=7210 comm="syz.2.284" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.619306][ T7216] netlink: 88 bytes leftover after parsing attributes in process `syz.2.287'. [ 182.770017][ T30] audit: type=1400 audit(1758583906.922:444): avc: denied { watch_mount } for pid=7221 comm="syz.3.288" path="/56" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.881489][ T30] audit: type=1400 audit(1758583907.032:445): avc: denied { block_suspend } for pid=7215 comm="syz.2.287" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.902678][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.960708][ T5960] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.115832][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 183.130618][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 183.158877][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.181516][ T5960] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.201191][ T5960] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.232876][ T5960] usb 2-1: Manufacturer: syz [ 183.250758][ T5960] usb 2-1: config 0 descriptor?? [ 186.324396][ T9] usb 2-1: USB disconnect, device number 10 [ 186.362798][ T30] audit: type=1400 audit(1758583910.502:446): avc: denied { create } for pid=7247 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.365040][ T7246] ubi: mtd0 is already attached to ubi31 [ 186.413002][ T7251] 9pnet_fd: Insufficient options for proto=fd [ 186.459491][ T30] audit: type=1400 audit(1758583910.552:447): avc: denied { bind } for pid=7247 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.048201][ T30] audit: type=1400 audit(1758583911.202:448): avc: denied { write } for pid=7271 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.067594][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.068718][ T7272] FAULT_INJECTION: forcing a failure. [ 187.068718][ T7272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.091954][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 187.101121][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 187.136552][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.4.305 Not tainted syzkaller #0 PREEMPT(full) [ 187.136576][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.136587][ T7272] Call Trace: [ 187.136593][ T7272] [ 187.136600][ T7272] dump_stack_lvl+0x16c/0x1f0 [ 187.136632][ T7272] should_fail_ex+0x512/0x640 [ 187.136659][ T7272] _copy_to_user+0x32/0xd0 [ 187.136687][ T7272] simple_read_from_buffer+0xcb/0x170 [ 187.136707][ T7272] proc_fail_nth_read+0x197/0x240 [ 187.136729][ T7272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.136751][ T7272] ? rw_verify_area+0xcf/0x6c0 [ 187.136777][ T7272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.136797][ T7272] vfs_read+0x1e1/0xcf0 [ 187.136818][ T7272] ? __pfx___mutex_lock+0x10/0x10 [ 187.136840][ T7272] ? __pfx_vfs_read+0x10/0x10 [ 187.136865][ T7272] ? __fget_files+0x20e/0x3c0 [ 187.136891][ T7272] ksys_read+0x12a/0x250 [ 187.136908][ T7272] ? __pfx_ksys_read+0x10/0x10 [ 187.136933][ T7272] do_syscall_64+0xcd/0x4e0 [ 187.136958][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.136977][ T7272] RIP: 0033:0x7fe617b8d8dc [ 187.136990][ T7272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.137006][ T7272] RSP: 002b:00007fe618a82030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.137023][ T7272] RAX: ffffffffffffffda RBX: 00007fe617de5fa0 RCX: 00007fe617b8d8dc [ 187.137034][ T7272] RDX: 000000000000000f RSI: 00007fe618a820a0 RDI: 0000000000000006 [ 187.137044][ T7272] RBP: 00007fe618a82090 R08: 0000000000000000 R09: 0000000000000000 [ 187.137054][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.137064][ T7272] R13: 00007fe617de6038 R14: 00007fe617de5fa0 R15: 00007ffd9df63bd8 [ 187.137087][ T7272] [ 187.531082][ T7267] netlink: 'syz.1.303': attribute type 19 has an invalid length. [ 188.033878][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 188.055571][ T30] audit: type=1400 audit(1758583911.272:449): avc: denied { write } for pid=7254 comm="syz.3.301" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 188.115009][ T30] audit: type=1400 audit(1758583911.272:450): avc: denied { open } for pid=7254 comm="syz.3.301" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 188.944390][ T976] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.035969][ T7287] FAULT_INJECTION: forcing a failure. [ 189.035969][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.049399][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.1.309 Not tainted syzkaller #0 PREEMPT(full) [ 189.049422][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.049432][ T7287] Call Trace: [ 189.049438][ T7287] [ 189.049446][ T7287] dump_stack_lvl+0x16c/0x1f0 [ 189.049472][ T7287] should_fail_ex+0x512/0x640 [ 189.049499][ T7287] _copy_to_user+0x32/0xd0 [ 189.049525][ T7287] copy_to_sockptr_offset+0x15c/0x1b0 [ 189.049545][ T7287] ? __pfx_copy_to_sockptr_offset+0x10/0x10 [ 189.049565][ T7287] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 189.049591][ T7287] do_ipv6_getsockopt+0x1c65/0x2f50 [ 189.049615][ T7287] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 189.049636][ T7287] ? __pfx___schedule+0x10/0x10 [ 189.049668][ T7287] ? rcu_is_watching+0x12/0xc0 [ 189.049688][ T7287] ? irqentry_exit+0x3b/0x90 [ 189.049709][ T7287] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.049742][ T7287] ? ipv6_getsockopt+0x126/0x280 [ 189.049759][ T7287] ipv6_getsockopt+0x126/0x280 [ 189.049779][ T7287] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 189.049799][ T7287] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 189.049830][ T7287] tcp_getsockopt+0xa1/0x100 [ 189.049855][ T7287] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 189.049880][ T7287] do_sock_getsockopt+0x34a/0x440 [ 189.049907][ T7287] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 189.049931][ T7287] ? __fget_files+0x204/0x3c0 [ 189.049964][ T7287] __sys_getsockopt+0x12f/0x260 [ 189.049990][ T7287] __x64_sys_getsockopt+0xbd/0x160 [ 189.050010][ T7287] ? do_syscall_64+0x91/0x4e0 [ 189.050032][ T7287] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.050053][ T7287] do_syscall_64+0xcd/0x4e0 [ 189.050077][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.050094][ T7287] RIP: 0033:0x7f449ff8eec9 [ 189.050109][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.050126][ T7287] RSP: 002b:00007f44a0d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 189.050143][ T7287] RAX: ffffffffffffffda RBX: 00007f44a01e6090 RCX: 00007f449ff8eec9 [ 189.050154][ T7287] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000004 [ 189.050165][ T7287] RBP: 00007f44a0d81090 R08: 0000200000000240 R09: 0000000000000000 [ 189.050175][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.050185][ T7287] R13: 00007f44a01e6128 R14: 00007f44a01e6090 R15: 00007ffd14823e28 [ 189.050209][ T7287] [ 189.288337][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.411591][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 189.437094][ T976] usb 3-1: config 5 has an invalid interface descriptor of length 6, skipping [ 189.446860][ T976] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 189.498310][ T976] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 2 [ 189.507333][ T976] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.516435][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.500674][ T30] audit: type=1400 audit(1758583916.632:451): avc: denied { write } for pid=7315 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.102991][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 194.519561][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536991][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.810617][ T976] usb 3-1: USB disconnect, device number 14 [ 196.234187][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 196.269775][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 196.472151][ T7344] fuse: Bad value for 'fd' [ 197.834807][ T30] audit: type=1400 audit(1758583921.992:452): avc: denied { create } for pid=7353 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.938357][ T30] audit: type=1400 audit(1758583922.002:453): avc: denied { bind } for pid=7353 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.054121][ T30] audit: type=1400 audit(1758583922.002:454): avc: denied { getopt } for pid=7353 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.436934][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.331'. [ 198.640630][ T976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.514591][ T942] IPVS: starting estimator thread 0... [ 199.520555][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 199.532983][ T976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.543051][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.558841][ T976] usb 5-1: Product: syz [ 199.567438][ T976] usb 5-1: Manufacturer: syz [ 199.588634][ T976] usb 5-1: SerialNumber: syz [ 199.625695][ T976] usb 5-1: config 0 descriptor?? [ 199.670676][ T7378] IPVS: using max 73 ests per chain, 175200 per kthread [ 199.848176][ T976] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.470657][ T5910] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.785580][ T942] kernel write not supported for file /vcs (pid: 942 comm: kworker/1:2) [ 200.852460][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 200.865227][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.883815][ T5910] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.893838][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.921919][ T5910] usb 3-1: config 0 descriptor?? [ 201.051886][ T30] audit: type=1400 audit(1758583925.212:455): avc: denied { setopt } for pid=7402 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.105201][ T30] audit: type=1400 audit(1758583925.262:456): avc: denied { listen } for pid=7402 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.167879][ T5910] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.207156][ T30] audit: type=1400 audit(1758583925.312:457): avc: denied { read } for pid=7402 comm="syz.3.342" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 201.231241][ T30] audit: type=1400 audit(1758583925.322:458): avc: denied { write } for pid=7402 comm="syz.3.342" path="socket:[14002]" dev="sockfs" ino=14002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.348576][ T5910] usb 3-1: USB disconnect, device number 15 [ 201.454127][ T7416] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 201.501293][ T7416] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.346'. [ 202.035630][ T976] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 202.135140][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 202.551781][ T976] usb 5-1: USB disconnect, device number 11 [ 202.669679][ T30] audit: type=1400 audit(1758583926.822:459): avc: denied { map } for pid=7430 comm="syz.2.350" path="socket:[15049]" dev="sockfs" ino=15049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 202.722483][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.732075][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.752292][ T30] audit: type=1400 audit(1758583926.822:460): avc: denied { accept } for pid=7430 comm="syz.2.350" path="socket:[15049]" dev="sockfs" ino=15049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 202.798642][ T7426] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 202.921786][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 202.963485][ T5910] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.976547][ T5910] usb 4-1: config 0 has no interface number 0 [ 203.019534][ T30] audit: type=1400 audit(1758583927.132:461): avc: denied { create } for pid=7432 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 203.087875][ T5910] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.100007][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.220748][ T5910] usb 4-1: Product: syz [ 203.224931][ T5910] usb 4-1: Manufacturer: syz [ 203.230230][ T5910] usb 4-1: SerialNumber: syz [ 203.244970][ T5910] usb 4-1: config 0 descriptor?? [ 203.274743][ T5910] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.766878][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.798400][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 204.083752][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.084753][ T5960] usb 4-1: USB disconnect, device number 9 [ 204.151854][ T5960] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.299428][ T7450] pim6reg: entered allmulticast mode [ 204.352502][ T30] audit: type=1326 audit(1758583928.442:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 204.418459][ T5960] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.440668][ T5960] quatech2 4-1:0.51: device disconnected [ 204.535984][ T30] audit: type=1326 audit(1758583928.442:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 205.051988][ T30] audit: type=1326 audit(1758583928.442:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 205.112184][ T30] audit: type=1326 audit(1758583928.442:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 205.179980][ T30] audit: type=1326 audit(1758583928.442:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 205.299431][ T30] audit: type=1326 audit(1758583928.452:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 205.974792][ T30] audit: type=1326 audit(1758583928.452:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 206.068166][ T30] audit: type=1326 audit(1758583928.452:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 206.197905][ T30] audit: type=1326 audit(1758583928.452:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.4.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe617b8eec9 code=0x7ffc0000 [ 206.795320][ T7470] evm: overlay not supported [ 207.450569][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 207.602917][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 207.618405][ T5910] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.633266][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.748715][ T5910] usb 3-1: Product: syz [ 207.765894][ T5910] usb 3-1: Manufacturer: syz [ 207.845731][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 207.965184][ T5910] usb 3-1: SerialNumber: syz [ 207.975862][ T7480] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 208.001554][ T5910] usb 3-1: config 0 descriptor?? [ 208.230153][ T5910] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.317109][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 208.317123][ T30] audit: type=1400 audit(1758583932.472:511): avc: denied { listen } for pid=7487 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.344253][ T7488] openvswitch: netlink: IPv6 tunnel dst address is zero [ 208.364286][ T7488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.394741][ T30] audit: type=1400 audit(1758583932.502:512): avc: denied { bind } for pid=7487 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.442939][ T30] audit: type=1400 audit(1758583932.502:513): avc: denied { write } for pid=7487 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.446465][ T942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.600539][ T5930] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 208.858147][ T942] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 208.873157][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.901129][ T942] usb 1-1: config 0 descriptor?? [ 208.906293][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 208.919917][ T5930] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.943815][ T5930] usb 5-1: config 0 has no interface number 0 [ 208.972348][ T5930] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.021491][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.029537][ T5930] usb 5-1: Product: syz [ 209.055076][ T5930] usb 5-1: Manufacturer: syz [ 209.083886][ T5930] usb 5-1: SerialNumber: syz [ 209.109727][ T5930] usb 5-1: config 0 descriptor?? [ 209.151336][ T5930] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 209.189059][ T7500] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:21 [ 209.217993][ T30] audit: type=1400 audit(1758583933.372:514): avc: denied { connect } for pid=7499 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.360931][ T5930] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.464110][ T5930] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.522461][ T942] ath6kl: mismatched byte count 0 vs. expected 12 [ 209.572345][ T942] ath6kl: Failed to init ath6kl core: -22 [ 209.667647][ T942] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 209.835768][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 209.854219][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.854586][ T976] usb 5-1: USB disconnect, device number 12 [ 209.878959][ T7486] netlink: 'syz.0.365': attribute type 5 has an invalid length. [ 209.954448][ T5910] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 209.960422][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.989589][ T5910] usb 3-1: USB disconnect, device number 16 [ 210.048990][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 210.063688][ T976] quatech2 5-1:0.51: device disconnected [ 210.155384][ T30] audit: type=1400 audit(1758583934.312:515): avc: denied { read } for pid=7499 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.200362][ T9] usb 1-1: USB disconnect, device number 7 [ 211.108593][ T30] audit: type=1326 audit(1758583935.262:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.2.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x0 [ 211.285361][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.307071][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.526661][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 212.940635][ T7524] fido_id[7524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.120633][ T30] audit: type=1326 audit(1758583937.272:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.2.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f212c98eec9 code=0x0 [ 213.143337][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.206440][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'. [ 215.271608][ T942] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.401086][ T976] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.433009][ T942] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.450640][ T942] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 215.461509][ T942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.470457][ T942] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.500590][ T942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 215.531414][ T942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 215.550694][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.564727][ T942] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.581088][ T942] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.590260][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 215.598902][ T976] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 215.608400][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.619403][ T976] usb 4-1: config 0 descriptor?? [ 215.634821][ T942] usb 1-1: Product: syz [ 215.638995][ T942] usb 1-1: Manufacturer: syz [ 215.646416][ T7551] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 215.732668][ T942] cdc_wdm 1-1:1.0: skipping garbage [ 215.738229][ T942] cdc_wdm 1-1:1.0: skipping garbage [ 215.791301][ T30] audit: type=1400 audit(1758583939.942:518): avc: denied { read } for pid=7560 comm="syz.4.385" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 215.803545][ T942] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 215.845898][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 215.869353][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 215.885501][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.898185][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.906550][ T9] usb 3-1: Product: syz [ 215.912851][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 215.923011][ T942] cdc_wdm 1-1:1.0: Unknown control protocol [ 215.941297][ T30] audit: type=1400 audit(1758583939.942:519): avc: denied { open } for pid=7560 comm="syz.4.385" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 215.949337][ T942] usb 1-1: USB disconnect, device number 8 [ 215.970044][ T9] usb 3-1: Manufacturer: syz [ 215.981513][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 216.007746][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 216.018990][ T976] dib0700: firmware download failed at 7 with -22 [ 216.026037][ T9] usb 3-1: SerialNumber: syz [ 216.052167][ T9] usb 3-1: config 0 descriptor?? [ 216.255307][ T976] usb 4-1: USB disconnect, device number 10 [ 216.495233][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.736141][ T942] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.996362][ T30] audit: type=1400 audit(1758583940.852:520): avc: denied { watch watch_reads } for pid=7566 comm="syz.4.386" path="/81/file1" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 217.151886][ T942] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.166756][ T942] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 217.188023][ T942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.207028][ T942] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.230513][ T942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.253413][ T942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.279307][ T942] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.298667][ T942] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.316046][ T942] usb 1-1: Product: syz [ 217.324721][ T942] usb 1-1: Manufacturer: syz [ 217.346448][ T7551] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.369705][ T942] cdc_wdm 1-1:1.0: skipping garbage [ 217.382164][ T942] cdc_wdm 1-1:1.0: skipping garbage [ 217.408204][ T942] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 217.420510][ T942] cdc_wdm 1-1:1.0: Unknown control protocol [ 218.459403][ T7582] tmpfs: Bad value for 'mpol' [ 218.468179][ T7582] netlink: 68 bytes leftover after parsing attributes in process `syz.0.380'. [ 218.508154][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.539601][ T9] usb 3-1: USB disconnect, device number 17 [ 219.557890][ T942] usb 1-1: USB disconnect, device number 9 [ 219.849516][ T7588] ref_ctr increment failed for inode: 0x1d8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802cc3c080 [ 220.264272][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 221.744268][ T30] audit: type=1400 audit(1758583945.902:521): avc: denied { append } for pid=7619 comm="syz.4.398" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.781822][ T7621] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 221.789499][ T7621] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.398'. [ 222.134062][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 222.502237][ T942] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 222.708062][ T942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.779644][ T942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.097190][ T976] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 223.131163][ T942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.143013][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.151417][ T942] usb 2-1: Product: syz [ 223.155736][ T942] usb 2-1: Manufacturer: syz [ 223.180602][ T942] usb 2-1: SerialNumber: syz [ 223.188882][ T976] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.357298][ T942] usb 2-1: 0:2 : does not exist [ 224.383815][ T942] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 224.514732][ T942] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 224.522103][ T7641] fido_id[7641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.549248][ T942] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 225.014747][ T942] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 225.044689][ T942] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 225.058639][ T942] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 225.076879][ T942] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 225.097345][ T942] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 225.300741][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.405'. [ 225.709177][ T942] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 225.743531][ T942] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 225.791452][ T942] usb 2-1: USB disconnect, device number 11 [ 225.966059][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 226.029304][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 226.176450][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.201158][ T30] audit: type=1400 audit(1758583950.352:522): avc: denied { create } for pid=7660 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.567467][ T30] audit: type=1400 audit(1758583950.352:523): avc: denied { setopt } for pid=7660 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.697139][ T7662] dlm: no local IP address has been set [ 226.702914][ T7662] dlm: cannot start dlm midcomms -107 [ 226.735004][ T30] audit: type=1400 audit(1758583950.852:524): avc: denied { bind } for pid=7660 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.173553][ T30] audit: type=1400 audit(1758583951.012:525): avc: denied { map } for pid=7664 comm="syz.3.409" path="socket:[16528]" dev="sockfs" ino=16528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.058436][ T7681] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 228.414377][ T7681] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.411'. [ 228.840235][ T7690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.415'. [ 228.887555][ T30] audit: type=1400 audit(1758583953.032:526): avc: denied { write } for pid=7688 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 229.487234][ T30] audit: type=1400 audit(1758583953.622:527): avc: denied { create } for pid=7697 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.020599][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 230.045508][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 230.056661][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 230.067072][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 230.418677][ T7706] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 230.497181][ T3519] Bluetooth: hci5: Frame reassembly failed (-84) [ 230.509935][ T30] audit: type=1400 audit(1758583954.572:528): avc: denied { create } for pid=7697 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.509965][ T30] audit: type=1400 audit(1758583954.582:529): avc: denied { connect } for pid=7697 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 230.509986][ T30] audit: type=1400 audit(1758583954.582:530): avc: denied { bind } for pid=7697 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.994164][ T30] audit: type=1400 audit(1758583955.092:531): avc: denied { mount } for pid=7708 comm="syz.0.420" name="/" dev="hugetlbfs" ino=16675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 231.016941][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.170550][ T43] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 231.240595][ T5961] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.293399][ T7725] input: syz1 as /devices/virtual/input/input19 [ 231.356084][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.414411][ T5961] usb 2-1: device descriptor read/64, error -71 [ 231.418675][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 231.421742][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 231.464226][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 231.474542][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.477862][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 231.487603][ T43] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 231.506871][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.526445][ T43] usb 1-1: config 0 descriptor?? [ 231.552729][ T43] gspca_main: spca561-2.14.0 probing abcd:cdee [ 231.957539][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.981603][ T5961] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.005976][ T30] audit: type=1400 audit(1758583956.162:532): avc: denied { write } for pid=7734 comm="syz.4.427" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 232.039156][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.071636][ T43] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 232.221087][ T5961] usb 2-1: device descriptor read/64, error -71 [ 232.281600][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.319622][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.329913][ T43] usb 1-1: MIDIStreaming interface descriptor not found [ 232.338045][ T5961] usb usb2-port1: attempt power cycle [ 232.351491][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.500606][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.733125][ T30] audit: type=1400 audit(1758583956.872:533): avc: denied { ioctl } for pid=7708 comm="syz.0.420" path="socket:[16690]" dev="sockfs" ino=16690 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.786708][ T5961] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 234.353657][ T976] usb 1-1: USB disconnect, device number 10 [ 234.460834][ T5961] usb 2-1: device descriptor read/8, error -71 [ 234.590304][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.729711][ T7755] FAULT_INJECTION: forcing a failure. [ 234.729711][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 234.932300][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(full) [ 234.932323][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.932333][ T7755] Call Trace: [ 234.932339][ T7755] [ 234.932346][ T7755] dump_stack_lvl+0x16c/0x1f0 [ 234.932372][ T7755] should_fail_ex+0x512/0x640 [ 234.932393][ T7755] ? __kmalloc_noprof+0xbf/0x510 [ 234.932412][ T7755] ? fuse_direct_io+0x538/0x24f0 [ 234.932432][ T7755] should_failslab+0xc2/0x120 [ 234.932451][ T7755] __kmalloc_noprof+0xd2/0x510 [ 234.932467][ T7755] ? kasan_save_track+0x14/0x30 [ 234.932489][ T7755] fuse_direct_io+0x538/0x24f0 [ 234.932539][ T7755] ? __pfx_fuse_direct_io+0x10/0x10 [ 234.932568][ T7755] ? lockdep_init_map_type+0x5c/0x280 [ 234.932590][ T7755] fuse_direct_IO+0x624/0xf40 [ 234.932623][ T7755] ? __pfx_fuse_direct_IO+0x10/0x10 [ 234.932664][ T7755] generic_file_direct_write+0x19a/0x410 [ 234.932689][ T7755] ? kiocb_modified+0x134/0x2c0 [ 234.932717][ T7755] fuse_file_write_iter+0x793/0x990 [ 234.932745][ T7755] vfs_write+0x7d3/0x11d0 [ 234.932764][ T7755] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 234.932788][ T7755] ? __pfx___mutex_lock+0x10/0x10 [ 234.932811][ T7755] ? __pfx_vfs_write+0x10/0x10 [ 234.932845][ T7755] ksys_write+0x12a/0x250 [ 234.932862][ T7755] ? __pfx_ksys_write+0x10/0x10 [ 234.932887][ T7755] do_syscall_64+0xcd/0x4e0 [ 234.932913][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.932929][ T7755] RIP: 0033:0x7faf91d8eec9 [ 234.932943][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.932960][ T7755] RSP: 002b:00007faf92d05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.932976][ T7755] RAX: ffffffffffffffda RBX: 00007faf91fe5fa0 RCX: 00007faf91d8eec9 [ 234.932986][ T7755] RDX: 00000000000000a0 RSI: 00002000000005c0 RDI: 0000000000000005 [ 234.932995][ T7755] RBP: 00007faf92d05090 R08: 0000000000000000 R09: 0000000000000000 [ 234.933005][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.933014][ T7755] R13: 00007faf91fe6038 R14: 00007faf91fe5fa0 R15: 00007fffa24eb9e8 [ 234.933037][ T7755] [ 235.454589][ T7767] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 235.482489][ T7767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.614250][ T30] audit: type=1400 audit(1758583959.662:534): avc: denied { name_bind } for pid=7765 comm="syz.1.438" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 235.998067][ T30] audit: type=1400 audit(1758583959.692:535): avc: denied { connect } for pid=7765 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.876794][ T7774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.170544][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.675686][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.685678][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.716482][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.779606][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.788801][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.798441][ T43] usb 4-1: Product: syz [ 237.802618][ T43] usb 4-1: Manufacturer: syz [ 237.807482][ T43] usb 4-1: SerialNumber: syz [ 237.829575][ T43] hub 4-1:1.0: bad descriptor, ignoring hub [ 237.837063][ T43] hub 4-1:1.0: probe with driver hub failed with error -5 [ 237.973958][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.445'. [ 238.004444][ T30] audit: type=1400 audit(1758583962.152:536): avc: denied { write } for pid=7780 comm="syz.1.443" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.052920][ T7784] random: crng reseeded on system resumption [ 238.116473][ T30] audit: type=1400 audit(1758583962.152:537): avc: denied { open } for pid=7780 comm="syz.1.443" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.169924][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 238.221577][ T30] audit: type=1400 audit(1758583962.162:538): avc: denied { create } for pid=7783 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 238.325038][ T7794] cgroup: release_agent respecified [ 238.330311][ T30] audit: type=1400 audit(1758583962.482:539): avc: denied { mounton } for pid=7793 comm="syz.2.449" path="/proc/267/task" dev="proc" ino=16793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 238.352716][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.471756][ T942] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.511518][ T43] usb 4-1: USB disconnect, device number 11 [ 238.523653][ T43] usblp0: removed [ 238.601720][ T30] audit: type=1400 audit(1758583962.752:540): avc: denied { connect } for pid=7798 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.763457][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.775048][ T5930] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 238.941689][ T942] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 238.951340][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.975898][ T942] usb 1-1: config 0 descriptor?? [ 238.994169][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.080718][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 239.087503][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 239.100177][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.109917][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.127590][ T5930] usb 2-1: Product: syz [ 239.132084][ T5930] usb 2-1: Manufacturer: syz [ 239.137676][ T5930] usb 2-1: SerialNumber: syz [ 239.148325][ T5930] usb 2-1: config 0 descriptor?? [ 239.164626][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.176036][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.187968][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.217601][ T5930] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.232188][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.247289][ T5930] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 239.258214][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.268129][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.291230][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.294508][ T43] usb 4-1: Product: syz [ 239.462647][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.478173][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.566541][ T43] usb 4-1: Manufacturer: syz [ 239.604091][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.615595][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.670042][ T43] usb 4-1: SerialNumber: syz [ 239.691857][ T942] usbhid 1-1:0.0: can't add hid device: -71 [ 239.703006][ T942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 239.836427][ T942] usb 1-1: USB disconnect, device number 11 [ 239.892377][ T5930] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 240.064158][ T30] audit: type=1400 audit(1758583964.222:541): avc: denied { bind } for pid=7812 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.204116][ T5930] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.220580][ T5930] em28xx 2-1:0.0: board has no eeprom [ 241.294707][ T5930] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 241.313703][ T5930] em28xx 2-1:0.0: dvb set to bulk mode. [ 241.343088][ T5917] em28xx 2-1:0.0: Binding DVB extension [ 242.247728][ T7815] sctp: failed to load transform for md5: -2 [ 242.354842][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 242.363515][ T5961] usb 2-1: USB disconnect, device number 16 [ 242.370981][ T5961] em28xx 2-1:0.0: Disconnecting em28xx [ 242.421803][ T5917] em28xx 2-1:0.0: Registering input extension [ 242.470114][ T5961] em28xx 2-1:0.0: Closing input extension [ 242.575807][ T5961] em28xx 2-1:0.0: Freeing device [ 242.787660][ T30] audit: type=1400 audit(1758583966.942:542): avc: denied { mount } for pid=7826 comm="syz.1.456" name="/" dev="ramfs" ino=16843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.950855][ T7834] FAULT_INJECTION: forcing a failure. [ 242.950855][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.950932][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.4.459 Not tainted syzkaller #0 PREEMPT(full) [ 242.950946][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.950952][ T7834] Call Trace: [ 242.950956][ T7834] [ 242.950960][ T7834] dump_stack_lvl+0x16c/0x1f0 [ 242.950978][ T7834] should_fail_ex+0x512/0x640 [ 242.950994][ T7834] strncpy_from_user+0x3b/0x2e0 [ 242.951009][ T7834] strncpy_from_user_nofault+0x7f/0x180 [ 242.951024][ T7834] bpf_bprintf_prepare+0xe90/0x13f0 [ 242.951048][ T7834] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 242.951067][ T7834] ? __lock_acquire+0x62e/0x1ce0 [ 242.951090][ T7834] ? bpf_trace_run2+0x3e1/0x590 [ 242.951102][ T7834] bpf_trace_printk+0xda/0x190 [ 242.951112][ T7834] ? __pfx_bpf_trace_printk+0x10/0x10 [ 242.951125][ T7834] ? bpf_trace_run2+0x3e1/0x590 [ 242.951142][ T7834] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 242.951151][ T7834] bpf_trace_run2+0x236/0x590 [ 242.951163][ T7834] ? __pfx_bpf_trace_run2+0x10/0x10 [ 242.951176][ T7834] ? __lock_acquire+0xb97/0x1ce0 [ 242.951195][ T7834] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 242.951206][ T7834] __bpf_trace_contention_begin+0xc9/0x110 [ 242.951225][ T7834] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 242.951245][ T7834] ? lock_acquire+0x179/0x350 [ 242.951255][ T7834] ? __pfx___might_resched+0x10/0x10 [ 242.951269][ T7834] ? __x64_sys_io_uring_setup+0xc2/0x170 [ 242.951283][ T7834] trace_contention_begin+0xc1/0x130 [ 242.951294][ T7834] __mutex_lock+0x1a0/0x1060 [ 242.951309][ T7834] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 242.951325][ T7834] ? __pfx___mutex_lock+0x10/0x10 [ 242.951348][ T7834] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 242.951357][ T7834] pcpu_alloc_noprof+0xb4c/0x14c0 [ 242.951371][ T7834] ? __kvmalloc_node_noprof+0x298/0x620 [ 242.951383][ T7834] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 242.951398][ T7834] percpu_ref_init+0x37/0x410 [ 242.951412][ T7834] io_uring_setup+0x478/0x2150 [ 242.951426][ T7834] ? __pfx_io_uring_setup+0x10/0x10 [ 242.951437][ T7834] ? avc_has_perm_noaudit+0x117/0x3b0 [ 242.951451][ T7834] ? avc_has_perm_noaudit+0x149/0x3b0 [ 242.951478][ T7834] __x64_sys_io_uring_setup+0xc2/0x170 [ 242.951491][ T7834] do_syscall_64+0xcd/0x4e0 [ 242.951507][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.951518][ T7834] RIP: 0033:0x7fe617b8eec9 [ 242.951527][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.951538][ T7834] RSP: 002b:00007fe618a81fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 242.951548][ T7834] RAX: ffffffffffffffda RBX: 00007fe617de5fa0 RCX: 00007fe617b8eec9 [ 242.951555][ T7834] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 242.951562][ T7834] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 242.951568][ T7834] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 242.951575][ T7834] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 242.951588][ T7834] [ 242.987923][ T7829] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 244.258074][ T43] usb 4-1: can't set config #1, error -71 [ 244.259802][ T43] usb 4-1: USB disconnect, device number 12 [ 244.263138][ T30] audit: type=1400 audit(1758583968.402:543): avc: denied { mount } for pid=7844 comm="syz.4.460" name="/" dev="autofs" ino=16860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 244.346808][ T30] audit: type=1400 audit(1758583968.502:544): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 244.454439][ T5960] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 244.611597][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 244.613275][ T5960] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 244.613298][ T5960] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 244.613314][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 244.613326][ T5960] usb 2-1: config 1 has no interface number 0 [ 244.613345][ T5960] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.613359][ T5960] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 244.613379][ T5960] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 244.613390][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.860151][ T5960] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 244.944273][ T5960] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 246.248689][ T5960] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 246.680646][ T43] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 246.786761][ T5917] usb 2-1: USB disconnect, device number 17 [ 246.788142][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 246.830701][ T43] usb 4-1: device descriptor read/64, error -71 [ 247.070615][ T43] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 247.200563][ T43] usb 4-1: device descriptor read/64, error -71 [ 247.237330][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.311992][ T43] usb usb4-port1: attempt power cycle [ 247.334644][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.610631][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 247.660622][ T43] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 247.780552][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 247.787494][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 247.811534][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 247.840684][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.850563][ T43] usb 4-1: device descriptor read/8, error -71 [ 247.876827][ T5930] usb 3-1: Product: syz [ 247.898260][ T5930] usb 3-1: Manufacturer: syz [ 247.910491][ T5930] usb 3-1: SerialNumber: syz [ 247.943960][ T30] audit: type=1400 audit(1758583972.102:545): avc: denied { create } for pid=7893 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 247.944515][ T5930] usb 3-1: config 0 descriptor?? [ 248.035785][ T30] audit: type=1400 audit(1758583972.162:546): avc: denied { unmount } for pid=5858 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 248.077341][ T5930] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.130581][ T43] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 248.138215][ T5930] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 248.171146][ T43] usb 4-1: device descriptor read/8, error -71 [ 248.217864][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.256181][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.295397][ T43] usb usb4-port1: unable to enumerate USB device [ 248.491141][ T7905] FAULT_INJECTION: forcing a failure. [ 248.491141][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.492224][ T7905] [ 248.492230][ T7905] ====================================================== [ 248.492237][ T7905] WARNING: possible circular locking dependency detected [ 248.492244][ T7905] syzkaller #0 Not tainted [ 248.492252][ T7905] ------------------------------------------------------ [ 248.492257][ T7905] syz.1.469/7905 is trying to acquire lock: [ 248.492265][ T7905] ffffffff8e4cebc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 248.492310][ T7905] [ 248.492310][ T7905] but task is already holding lock: [ 248.492314][ T7905] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 248.492353][ T7905] [ 248.492353][ T7905] which lock already depends on the new lock. [ 248.492353][ T7905] [ 248.492358][ T7905] [ 248.492358][ T7905] the existing dependency chain (in reverse order) is: [ 248.492363][ T7905] [ 248.492363][ T7905] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 248.492384][ T7905] _raw_spin_lock_nested+0x31/0x40 [ 248.492402][ T7905] raw_spin_rq_lock_nested+0x29/0x130 [ 248.492426][ T7905] task_rq_lock+0xcf/0x490 [ 248.492445][ T7905] cgroup_move_task+0x81/0x2a0 [ 248.492467][ T7905] css_set_move_task+0x288/0x5f0 [ 248.492482][ T7905] cgroup_post_fork+0x201/0x9e0 [ 248.492501][ T7905] copy_process+0x5cfa/0x7690 [ 248.492523][ T7905] kernel_clone+0xfc/0x930 [ 248.492543][ T7905] user_mode_thread+0xc7/0x110 [ 248.492565][ T7905] rest_init+0x23/0x2b0 [ 248.492588][ T7905] start_kernel+0x3ee/0x4d0 [ 248.492606][ T7905] x86_64_start_reservations+0x18/0x30 [ 248.492626][ T7905] x86_64_start_kernel+0x130/0x190 [ 248.492644][ T7905] common_startup_64+0x13e/0x148 [ 248.492662][ T7905] [ 248.492662][ T7905] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 248.492682][ T7905] _raw_spin_lock_irqsave+0x3a/0x60 [ 248.492699][ T7905] try_to_wake_up+0xb7/0x1870 [ 248.492716][ T7905] __wake_up_common+0x135/0x1f0 [ 248.492741][ T7905] __wake_up+0x31/0x60 [ 248.492760][ T7905] tty_port_default_wakeup+0x2a/0x40 [ 248.492782][ T7905] serial8250_tx_chars+0x68e/0x860 [ 248.492804][ T7905] serial8250_handle_irq+0x761/0xcb0 [ 248.492826][ T7905] serial8250_default_handle_irq+0x9a/0x250 [ 248.492850][ T7905] serial8250_interrupt+0xf5/0x1b0 [ 248.492873][ T7905] __handle_irq_event_percpu+0x22c/0x7d0 [ 248.492893][ T7905] handle_irq_event+0xab/0x1e0 [ 248.492911][ T7905] handle_edge_irq+0x3ca/0x9e0 [ 248.492928][ T7905] __common_interrupt+0xcd/0x2f0 [ 248.492950][ T7905] common_interrupt+0xba/0xe0 [ 248.492974][ T7905] asm_common_interrupt+0x26/0x40 [ 248.492990][ T7905] pv_native_safe_halt+0xf/0x20 [ 248.493007][ T7905] default_idle+0x13/0x20 [ 248.493028][ T7905] default_idle_call+0x6d/0xb0 [ 248.493050][ T7905] do_idle+0x391/0x510 [ 248.493069][ T7905] cpu_startup_entry+0x4f/0x60 [ 248.493088][ T7905] start_secondary+0x21d/0x2b0 [ 248.493112][ T7905] common_startup_64+0x13e/0x148 [ 248.493129][ T7905] [ 248.493129][ T7905] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 248.493150][ T7905] _raw_spin_lock_irqsave+0x3a/0x60 [ 248.493181][ T7905] __wake_up+0x1c/0x60 [ 248.493200][ T7905] tty_port_default_wakeup+0x2a/0x40 [ 248.493220][ T7905] serial8250_tx_chars+0x68e/0x860 [ 248.493241][ T7905] serial8250_handle_irq+0x761/0xcb0 [ 248.493263][ T7905] serial8250_default_handle_irq+0x9a/0x250 [ 248.493286][ T7905] serial8250_interrupt+0xf5/0x1b0 [ 248.493309][ T7905] __handle_irq_event_percpu+0x22c/0x7d0 [ 248.493329][ T7905] handle_irq_event+0xab/0x1e0 [ 248.493347][ T7905] handle_edge_irq+0x3ca/0x9e0 [ 248.493364][ T7905] __common_interrupt+0xcd/0x2f0 [ 248.493385][ T7905] common_interrupt+0xba/0xe0 [ 248.493408][ T7905] asm_common_interrupt+0x26/0x40 [ 248.493427][ T7905] pv_native_safe_halt+0xf/0x20 [ 248.493445][ T7905] default_idle+0x13/0x20 [ 248.493466][ T7905] default_idle_call+0x6d/0xb0 [ 248.493489][ T7905] do_idle+0x391/0x510 [ 248.493506][ T7905] cpu_startup_entry+0x4f/0x60 [ 248.493525][ T7905] start_secondary+0x21d/0x2b0 [ 248.493547][ T7905] common_startup_64+0x13e/0x148 [ 248.493564][ T7905] [ 248.493564][ T7905] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 248.493585][ T7905] _raw_spin_lock_irqsave+0x3a/0x60 [ 248.493602][ T7905] serial8250_console_write+0x181/0x1890 [ 248.493626][ T7905] console_flush_all+0x801/0xc60 [ 248.493644][ T7905] console_unlock+0xd8/0x210 [ 248.493661][ T7905] vprintk_emit+0x418/0x6d0 [ 248.493680][ T7905] _printk+0xc7/0x100 [ 248.493692][ T7905] register_console+0xc2d/0x11b0 [ 248.493711][ T7905] univ8250_console_init+0x5f/0x90 [ 248.493732][ T7905] console_init+0x14f/0x680 [ 248.493751][ T7905] start_kernel+0x29f/0x4d0 [ 248.493769][ T7905] x86_64_start_reservations+0x18/0x30 [ 248.493787][ T7905] x86_64_start_kernel+0x130/0x190 [ 248.493806][ T7905] common_startup_64+0x13e/0x148 [ 248.493822][ T7905] [ 248.493822][ T7905] -> #0 (console_owner){-.-.}-{0:0}: [ 248.493842][ T7905] __lock_acquire+0x12a6/0x1ce0 [ 248.493867][ T7905] lock_acquire+0x179/0x350 [ 248.493880][ T7905] console_lock_spinning_enable+0xb0/0xd0 [ 248.493898][ T7905] console_flush_all+0x7aa/0xc60 [ 248.493917][ T7905] console_unlock+0xd8/0x210 [ 248.493935][ T7905] vprintk_emit+0x418/0x6d0 [ 248.493953][ T7905] _printk+0xc7/0x100 [ 248.493966][ T7905] should_fail_ex+0x4e7/0x640 [ 248.493985][ T7905] strncpy_from_user+0x3b/0x2e0 [ 248.494002][ T7905] strncpy_from_user_nofault+0x7f/0x180 [ 248.494021][ T7905] bpf_bprintf_prepare+0xe90/0x13f0 [ 248.494045][ T7905] bpf_trace_printk+0xda/0x190 [ 248.494059][ T7905] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 248.494072][ T7905] bpf_trace_run2+0x236/0x590 [ 248.494087][ T7905] __bpf_trace_contention_begin+0xc9/0x110 [ 248.494113][ T7905] trace_contention_begin.constprop.0+0xde/0x160 [ 248.494130][ T7905] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 248.494151][ T7905] do_raw_spin_lock+0x20e/0x2b0 [ 248.494167][ T7905] raw_spin_rq_lock_nested+0x7e/0x130 [ 248.494186][ T7905] __schedule+0x307/0x5de0 [ 248.494203][ T7905] preempt_schedule_irq+0x51/0x90 [ 248.494221][ T7905] irqentry_exit+0x36/0x90 [ 248.494240][ T7905] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 248.494256][ T7905] __orc_find+0x86/0xf0 [ 248.494272][ T7905] unwind_next_frame+0x2ec/0x20a0 [ 248.494289][ T7905] arch_stack_walk+0x94/0x100 [ 248.494307][ T7905] stack_trace_save+0x8e/0xc0 [ 248.494328][ T7905] kasan_save_stack+0x33/0x60 [ 248.494343][ T7905] kasan_save_track+0x14/0x30 [ 248.494358][ T7905] __kasan_slab_alloc+0x89/0x90 [ 248.494375][ T7905] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 248.494392][ T7905] __alloc_skb+0x2b2/0x380 [ 248.494409][ T7905] netlink_alloc_large_skb+0x69/0x130 [ 248.494436][ T7905] netlink_sendmsg+0x6a1/0xdd0 [ 248.494456][ T7905] ____sys_sendmsg+0xa98/0xc70 [ 248.494479][ T7905] ___sys_sendmsg+0x134/0x1d0 [ 248.494497][ T7905] __sys_sendmsg+0x16d/0x220 [ 248.494515][ T7905] do_syscall_64+0xcd/0x4e0 [ 248.494535][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.494551][ T7905] [ 248.494551][ T7905] other info that might help us debug this: [ 248.494551][ T7905] [ 248.494555][ T7905] Chain exists of: [ 248.494555][ T7905] console_owner --> &p->pi_lock --> &rq->__lock [ 248.494555][ T7905] [ 248.494579][ T7905] Possible unsafe locking scenario: [ 248.494579][ T7905] [ 248.494583][ T7905] CPU0 CPU1 [ 248.494588][ T7905] ---- ---- [ 248.494592][ T7905] lock(&rq->__lock); [ 248.494602][ T7905] lock(&p->pi_lock); [ 248.494612][ T7905] lock(&rq->__lock); [ 248.494623][ T7905] lock(console_owner); [ 248.494633][ T7905] [ 248.494633][ T7905] *** DEADLOCK *** [ 248.494633][ T7905] [ 248.494636][ T7905] 5 locks held by syz.1.469/7905: [ 248.494646][ T7905] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 248.494685][ T7905] #1: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 248.494726][ T7905] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 248.494763][ T7905] #3: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 248.494798][ T7905] #4: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 248.494837][ T7905] [ 248.494837][ T7905] stack backtrace: [ 248.494845][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.1.469 Not tainted syzkaller #0 PREEMPT(full) [ 248.494864][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.494874][ T7905] Call Trace: [ 248.494880][ T7905] [ 248.494886][ T7905] dump_stack_lvl+0x116/0x1f0 [ 248.494908][ T7905] print_circular_bug+0x275/0x350 [ 248.494933][ T7905] check_noncircular+0x14c/0x170 [ 248.494961][ T7905] __lock_acquire+0x12a6/0x1ce0 [ 248.494991][ T7905] lock_acquire+0x179/0x350 [ 248.495005][ T7905] ? console_lock_spinning_enable+0x9f/0xd0 [ 248.495026][ T7905] ? console_lock_spinning_enable+0x88/0xd0 [ 248.495047][ T7905] console_lock_spinning_enable+0xb0/0xd0 [ 248.495067][ T7905] ? console_lock_spinning_enable+0x9f/0xd0 [ 248.495086][ T7905] console_flush_all+0x7aa/0xc60 [ 248.495108][ T7905] ? __pfx_console_flush_all+0x10/0x10 [ 248.495131][ T7905] ? is_printk_cpu_sync_owner+0x32/0x40 [ 248.495155][ T7905] console_unlock+0xd8/0x210 [ 248.495174][ T7905] ? __pfx_console_unlock+0x10/0x10 [ 248.495194][ T7905] ? do_raw_spin_unlock+0xa0/0x230 [ 248.495213][ T7905] ? _printk+0xc7/0x100 [ 248.495227][ T7905] ? __down_trylock_console_sem+0xb0/0x140 [ 248.495246][ T7905] vprintk_emit+0x418/0x6d0 [ 248.495267][ T7905] ? __pfx_vprintk_emit+0x10/0x10 [ 248.495291][ T7905] _printk+0xc7/0x100 [ 248.495305][ T7905] ? __pfx__printk+0x10/0x10 [ 248.495321][ T7905] ? __pfx____ratelimit+0x10/0x10 [ 248.495343][ T7905] should_fail_ex+0x4e7/0x640 [ 248.495365][ T7905] strncpy_from_user+0x3b/0x2e0 [ 248.495384][ T7905] strncpy_from_user_nofault+0x7f/0x180 [ 248.495405][ T7905] bpf_bprintf_prepare+0xe90/0x13f0 [ 248.495437][ T7905] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 248.495462][ T7905] ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260 [ 248.495482][ T7905] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 248.495505][ T7905] ? bpf_trace_run2+0x3e1/0x590 [ 248.495522][ T7905] bpf_trace_printk+0xda/0x190 [ 248.495537][ T7905] ? __pfx_bpf_trace_printk+0x10/0x10 [ 248.495552][ T7905] ? bpf_put_buffers+0x44/0x70 [ 248.495578][ T7905] ? bpf_trace_run2+0x3e1/0x590 [ 248.495597][ T7905] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 248.495611][ T7905] bpf_trace_run2+0x236/0x590 [ 248.495628][ T7905] ? __pfx_bpf_trace_run2+0x10/0x10 [ 248.495646][ T7905] ? bpf_trace_run2+0x2ab/0x590 [ 248.495663][ T7905] ? __pfx_bpf_trace_run2+0x10/0x10 [ 248.495682][ T7905] __bpf_trace_contention_begin+0xc9/0x110 [ 248.495708][ T7905] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 248.495737][ T7905] ? __lock_acquire+0x62e/0x1ce0 [ 248.495763][ T7905] trace_contention_begin.constprop.0+0xde/0x160 [ 248.495782][ T7905] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 248.495806][ T7905] ? __lock_acquire+0xb97/0x1ce0 [ 248.495831][ T7905] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 248.495854][ T7905] ? do_raw_spin_lock+0x12c/0x2b0 [ 248.495874][ T7905] do_raw_spin_lock+0x20e/0x2b0 [ 248.495892][ T7905] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 248.495909][ T7905] ? rcu_qs+0x2b/0xe0 [ 248.495928][ T7905] ? rcu_note_context_switch+0x192/0x1e00 [ 248.495951][ T7905] raw_spin_rq_lock_nested+0x7e/0x130 [ 248.495971][ T7905] ? preempt_schedule_irq+0x51/0x90 [ 248.495990][ T7905] __schedule+0x307/0x5de0 [ 248.496007][ T7905] ? rcu_is_watching+0x12/0xc0 [ 248.496027][ T7905] ? trace_sched_exit_tp+0xd1/0x120 [ 248.496045][ T7905] ? __schedule+0x11a3/0x5de0 [ 248.496067][ T7905] ? __pfx___schedule+0x10/0x10 [ 248.496086][ T7905] ? __pfx___schedule+0x10/0x10 [ 248.496103][ T7905] ? __lock_acquire+0x62e/0x1ce0 [ 248.496131][ T7905] preempt_schedule_irq+0x51/0x90 [ 248.496151][ T7905] irqentry_exit+0x36/0x90 [ 248.496170][ T7905] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 248.496187][ T7905] RIP: 0010:__orc_find+0x86/0xf0 [ 248.496208][ T7905] Code: f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 <48> 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 [ 248.496224][ T7905] RSP: 0018:ffffc90005847478 EFLAGS: 00000246 [ 248.496237][ T7905] RAX: ffffffff91d31bbc RBX: ffffffff911de24c RCX: dffffc0000000000 [ 248.496249][ T7905] RDX: fffffffff845eb42 RSI: 0000000000000000 RDI: ffffffff911de24c [ 248.496260][ T7905] RBP: ffffffff911de24c R08: ffffffff91d31bc2 R09: 0000000000000000 [ 248.496270][ T7905] R10: 0000000000000000 R11: 00000000000863d2 R12: ffffffff911de24c [ 248.496281][ T7905] R13: ffffffff8963d297 R14: ffffffff911de24c R15: ffffffff911de24c [ 248.496293][ T7905] ? ____sys_sendmsg+0xa97/0xc70 [ 248.496323][ T7905] ? ____sys_sendmsg+0xa97/0xc70 [ 248.496346][ T7905] unwind_next_frame+0x2ec/0x20a0 [ 248.496364][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 248.496389][ T7905] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.496413][ T7905] arch_stack_walk+0x94/0x100 [ 248.496437][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 248.496463][ T7905] stack_trace_save+0x8e/0xc0 [ 248.496485][ T7905] ? __pfx_stack_trace_save+0x10/0x10 [ 248.496510][ T7905] kasan_save_stack+0x33/0x60 [ 248.496525][ T7905] ? kasan_save_stack+0x33/0x60 [ 248.496541][ T7905] ? kasan_save_track+0x14/0x30 [ 248.496556][ T7905] ? __kasan_slab_alloc+0x89/0x90 [ 248.496573][ T7905] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 248.496589][ T7905] ? __alloc_skb+0x2b2/0x380 [ 248.496606][ T7905] ? netlink_alloc_large_skb+0x69/0x130 [ 248.496627][ T7905] ? netlink_sendmsg+0x6a1/0xdd0 [ 248.496647][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 248.496685][ T7905] kasan_save_track+0x14/0x30 [ 248.496701][ T7905] __kasan_slab_alloc+0x89/0x90 [ 248.496719][ T7905] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 248.496737][ T7905] ? __alloc_skb+0x2b2/0x380 [ 248.496756][ T7905] __alloc_skb+0x2b2/0x380 [ 248.496774][ T7905] ? __pfx___alloc_skb+0x10/0x10 [ 248.496793][ T7905] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 248.496816][ T7905] netlink_alloc_large_skb+0x69/0x130 [ 248.496839][ T7905] netlink_sendmsg+0x6a1/0xdd0 [ 248.496862][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.496885][ T7905] ? ____sys_sendmsg+0x871/0xc70 [ 248.496910][ T7905] ____sys_sendmsg+0xa98/0xc70 [ 248.496935][ T7905] ? copy_msghdr_from_user+0x10a/0x160 [ 248.496955][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.496984][ T7905] ___sys_sendmsg+0x134/0x1d0 [ 248.497004][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.497036][ T7905] __sys_sendmsg+0x16d/0x220 [ 248.497057][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.497083][ T7905] do_syscall_64+0xcd/0x4e0 [ 248.497105][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.497121][ T7905] RIP: 0033:0x7f449ff8eec9 [ 248.497133][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.497148][ T7905] RSP: 002b:00007f44a0d60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.497163][ T7905] RAX: ffffffffffffffda RBX: 00007f44a01e6180 RCX: 00007f449ff8eec9 [ 248.497173][ T7905] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 248.497183][ T7905] RBP: 00007f44a0d60090 R08: 0000000000000000 R09: 0000000000000000 [ 248.497193][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.497203][ T7905] R13: 00007f44a01e6218 R14: 00007f44a01e6180 R15: 00007ffd14823e28 [ 248.497218][ T7905] [ 250.023554][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.1.469 Not tainted syzkaller #0 PREEMPT(full) [ 250.023575][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.023585][ T7905] Call Trace: [ 250.023590][ T7905] [ 250.023597][ T7905] dump_stack_lvl+0x116/0x1f0 [ 250.023619][ T7905] should_fail_ex+0x512/0x640 [ 250.023639][ T7905] strncpy_from_user+0x3b/0x2e0 [ 250.023655][ T7905] strncpy_from_user_nofault+0x7f/0x180 [ 250.023673][ T7905] bpf_bprintf_prepare+0xe90/0x13f0 [ 250.023697][ T7905] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 250.023718][ T7905] ? trace_event_raw_event_bpf_trace_printk+0x1a2/0x260 [ 250.023734][ T7905] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 250.023752][ T7905] ? bpf_trace_run2+0x3e1/0x590 [ 250.023766][ T7905] bpf_trace_printk+0xda/0x190 [ 250.023778][ T7905] ? __pfx_bpf_trace_printk+0x10/0x10 [ 250.023791][ T7905] ? bpf_put_buffers+0x44/0x70 [ 250.023812][ T7905] ? bpf_trace_run2+0x3e1/0x590 [ 250.023827][ T7905] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 250.023839][ T7905] bpf_trace_run2+0x236/0x590 [ 250.023853][ T7905] ? __pfx_bpf_trace_run2+0x10/0x10 [ 250.023867][ T7905] ? bpf_trace_run2+0x2ab/0x590 [ 250.023881][ T7905] ? __pfx_bpf_trace_run2+0x10/0x10 [ 250.023896][ T7905] __bpf_trace_contention_begin+0xc9/0x110 [ 250.023919][ T7905] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 250.023943][ T7905] ? __lock_acquire+0x62e/0x1ce0 [ 250.023965][ T7905] trace_contention_begin.constprop.0+0xde/0x160 [ 250.023981][ T7905] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 250.024001][ T7905] ? __lock_acquire+0xb97/0x1ce0 [ 250.024022][ T7905] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 250.024041][ T7905] ? do_raw_spin_lock+0x12c/0x2b0 [ 250.024057][ T7905] do_raw_spin_lock+0x20e/0x2b0 [ 250.024072][ T7905] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.024086][ T7905] ? rcu_qs+0x2b/0xe0 [ 250.024101][ T7905] ? rcu_note_context_switch+0x192/0x1e00 [ 250.024120][ T7905] raw_spin_rq_lock_nested+0x7e/0x130 [ 250.024137][ T7905] ? preempt_schedule_irq+0x51/0x90 [ 250.024154][ T7905] __schedule+0x307/0x5de0 [ 250.024168][ T7905] ? rcu_is_watching+0x12/0xc0 [ 250.024185][ T7905] ? trace_sched_exit_tp+0xd1/0x120 [ 250.024200][ T7905] ? __schedule+0x11a3/0x5de0 [ 250.024217][ T7905] ? __pfx___schedule+0x10/0x10 [ 250.024233][ T7905] ? __pfx___schedule+0x10/0x10 [ 250.024247][ T7905] ? __lock_acquire+0x62e/0x1ce0 [ 250.024270][ T7905] preempt_schedule_irq+0x51/0x90 [ 250.024287][ T7905] irqentry_exit+0x36/0x90 [ 250.024303][ T7905] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 250.024318][ T7905] RIP: 0010:__orc_find+0x86/0xf0 [ 250.024334][ T7905] Code: f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 <48> 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 [ 250.024347][ T7905] RSP: 0018:ffffc90005847478 EFLAGS: 00000246 [ 250.024359][ T7905] RAX: ffffffff91d31bbc RBX: ffffffff911de24c RCX: dffffc0000000000 [ 250.024368][ T7905] RDX: fffffffff845eb42 RSI: 0000000000000000 RDI: ffffffff911de24c [ 250.024377][ T7905] RBP: ffffffff911de24c R08: ffffffff91d31bc2 R09: 0000000000000000 [ 250.024386][ T7905] R10: 0000000000000000 R11: 00000000000863d2 R12: ffffffff911de24c [ 250.024394][ T7905] R13: ffffffff8963d297 R14: ffffffff911de24c R15: ffffffff911de24c [ 250.024404][ T7905] ? ____sys_sendmsg+0xa97/0xc70 [ 250.024436][ T7905] ? ____sys_sendmsg+0xa97/0xc70 [ 250.024455][ T7905] unwind_next_frame+0x2ec/0x20a0 [ 250.024470][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 250.024490][ T7905] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.024511][ T7905] arch_stack_walk+0x94/0x100 [ 250.024528][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 250.024549][ T7905] stack_trace_save+0x8e/0xc0 [ 250.024567][ T7905] ? __pfx_stack_trace_save+0x10/0x10 [ 250.024587][ T7905] kasan_save_stack+0x33/0x60 [ 250.024601][ T7905] ? kasan_save_stack+0x33/0x60 [ 250.024613][ T7905] ? kasan_save_track+0x14/0x30 [ 250.024626][ T7905] ? __kasan_slab_alloc+0x89/0x90 [ 250.024640][ T7905] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 250.024654][ T7905] ? __alloc_skb+0x2b2/0x380 [ 250.024669][ T7905] ? netlink_alloc_large_skb+0x69/0x130 [ 250.024687][ T7905] ? netlink_sendmsg+0x6a1/0xdd0 [ 250.024704][ T7905] ? ____sys_sendmsg+0xa98/0xc70 [ 250.024733][ T7905] kasan_save_track+0x14/0x30 [ 250.024746][ T7905] __kasan_slab_alloc+0x89/0x90 [ 250.024761][ T7905] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 250.024775][ T7905] ? __alloc_skb+0x2b2/0x380 [ 250.024790][ T7905] __alloc_skb+0x2b2/0x380 [ 250.024805][ T7905] ? __pfx___alloc_skb+0x10/0x10 [ 250.024820][ T7905] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 250.024840][ T7905] netlink_alloc_large_skb+0x69/0x130 [ 250.024859][ T7905] netlink_sendmsg+0x6a1/0xdd0 [ 250.024877][ T7905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.024896][ T7905] ? ____sys_sendmsg+0x871/0xc70 [ 250.024917][ T7905] ____sys_sendmsg+0xa98/0xc70 [ 250.024937][ T7905] ? copy_msghdr_from_user+0x10a/0x160 [ 250.024953][ T7905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.024978][ T7905] ___sys_sendmsg+0x134/0x1d0 [ 250.024994][ T7905] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.025019][ T7905] __sys_sendmsg+0x16d/0x220 [ 250.025035][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.025057][ T7905] do_syscall_64+0xcd/0x4e0 [ 250.025075][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.025089][ T7905] RIP: 0033:0x7f449ff8eec9 [ 250.025099][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.025112][ T7905] RSP: 002b:00007f44a0d60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.025124][ T7905] RAX: ffffffffffffffda RBX: 00007f44a01e6180 RCX: 00007f449ff8eec9 [ 250.025133][ T7905] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 250.025141][ T7905] RBP: 00007f44a0d60090 R08: 0000000000000000 R09: 0000000000000000 [ 250.025149][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.025157][ T7905] R13: 00007f44a01e6218 R14: 00007f44a01e6180 R15: 00007ffd14823e28 [ 250.025170][ T7905] [ 250.735089][ T5930] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 251.852436][ T5930] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 251.860429][ T5930] em28xx 3-1:0.0: board has no eeprom [ 251.920567][ T5930] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 251.928408][ T5930] em28xx 3-1:0.0: dvb set to bulk mode. [ 251.934022][ T43] em28xx 3-1:0.0: Binding DVB extension [ 251.964981][ T43] em28xx 3-1:0.0: Registering input extension [ 255.221846][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.228132][ T1298] ieee802154 phy1 wpan1: encryption failed: -22