last executing test programs: 15.198636408s ago: executing program 0 (id=1420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_getres(0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) bind$phonet(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r4) 14.598186661s ago: executing program 0 (id=1423): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00092f27bd70000000000006"], 0x1c}}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) r6 = gettid() setrlimit(0xc, &(0x7f0000000040)={0xbcf}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "dc00", "acc1e9f9399482e5f29e9c10ca86c172", "84902b01", "1109361dd889ced6"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f0000000240)=0x4, 0x4) sched_rr_get_interval(r6, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202", @ANYRES16], 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.501968934s ago: executing program 0 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0x1000) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x400, 0xa2) fcntl$setown(r6, 0x8, 0x0) 10.237469373s ago: executing program 0 (id=1442): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c00000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40fffffffc140000001100010000000000000000000100000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4000) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4007f7ff0000152200f47f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0) r6 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x108) timer_create(0x0, 0x0, &(0x7f00000004c0)=0x0) timer_getoverrun(r7) dup3(r6, r3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000104410400"/20], 0x14}}, 0x4000) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000001040101000000e90c00040000000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x4002012, r6, 0xde376000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000001c0)=ANY=[], 0x110) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4000000000006, 0x7fff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2}) socket(0xa, 0x1, 0x84) syz_usb_connect$cdc_ecm(0x4, 0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="12010003020000402505a1a440025868e5c050000101056007090400060302937996276f2759d332f00600900624060000b605240003000d240f018b030000fbffca65090905820208000d04956e857e"], &(0x7f0000000500)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x7, 0x9, 0x8, 0xf7, 0x9}, 0xdf, &(0x7f0000000840)=ANY=[@ANYBLOB="050f81fe050d100128500426a59ea3ddf1040010021628040018100a0303010000000005000000000030bf010000c0000003100ba8100900846c990371b30b8232b8efb8752fad629a3edb21238aada53832448fbdf71b14d380f9778fd2c91edbc7437f2454149e55429389c5999e45af6f29bc553ebdcab726764e4642ce0c3b8122a9f2d7273df3d9cbeee0a094ca0678ac5565143f4583e573ad8235dc3b52fa5990f3d8bcb368d443b9af4a30ef2b761d24cdfca678c2fb5d144d80c49cd16ae9d30438724a00ac0337c66bcf23f44251b60cf816648a572f21"], 0x5d}) syz_usb_connect(0x1, 0x787, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0xee, 0x98, 0x98, 0xff, 0x10c4, 0xf003, 0xa8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x775, 0x4, 0x1, 0x65, 0x80, 0x17, [{{0x9, 0x4, 0x92, 0x5, 0x3, 0xf2, 0x73, 0x83, 0x1, [@generic={0x3f, 0x2, "22018a2b728753aefa38473a25cdd6cff6e655477d2bf93f3f6576ad92aa8aadec5f64d79d8d0d51027c1f8f4cb3e31f378f7ab015741a247ec626b6d1"}], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0xddcaa2c1356930e9, 0xff, 0x0, 0x7}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x10, 0x7, 0x88}}]}}, {{0x9, 0x4, 0xf3, 0x40, 0x1, 0xee, 0xa2, 0x34, 0x5, [], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x80, 0xe5, 0x2, [@generic={0x6d, 0x7, "30724090f1dc6924cd2ab689b964ee4531bd80e9a5f8ac04c149aeda5fef917cf0005a821230563d97c030a85360789b196f0876381d567bb58fd3f217a29810c59112f9f104f9b2292428a164e36a870d0acb2386a78e0b9305272312c4d9321ae0d713f57105f5adaba5"}]}}]}}, {{0x9, 0x4, 0x8b, 0xf0, 0xc, 0x12, 0x49, 0xd4, 0xf9, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0xa3, 0x4, "c70d50", ':'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfc, 0x4, 0x1, 0x8, "", "24ae0b"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0xdc}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x1, 0x2, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x10, 0x4, 0x9, 0x2, "a001a1"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x2f, 0xf}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x1, 0x2, [@generic={0x87, 0x8, "9888f7b23332f52c93085eb069fd79b6564ee5489225c549ad09648883f35f855c06bb3e8a2c200711be03620f23b81b95728463d05d87c390650b07ced4cb81bc842277a557e6b229fe6bea4f8cfbe86cb0c6cf38798d30700693ea8df4b38a3fcf42ab0d148fac2353fce654202547b9551cb105ab082f277f8ad77da4cb304b654747b7"}, @generic={0xd8, 0x31, "79c9e215d59e553f86fcfea49eba4882cb14eb4ef42eddc4023cde95fb3c596f8b1b038942f0ee263eb792bc192adea6afcde8feb6d87e0402c00f915b3d7d354d15269dcf0a9da4930a79e3214358f817cc228abe229496185a68c49a88c86471becd0aa20dfb4d300754759c07b6c3bbed76f9b315bc19e51f72e3b21ad40dfa4b559066b2ae3cec96e472c5c5df990ef526ba17979422f11556c69e09bf0a9624b6c2f3c7ece7de8d99a32a2e0bd948410e964b015755e8001fd356f71e01c0d9c434e6a84a19093a513a3609370ed6348af400b6"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x3, 0xe, [@generic={0xf1, 0x4, "e515cf7eac840401ba2f83dc7410b9bd692d3fd5eba349fe5e93843ad045a956aac40cf438c33abc1c448f225c1bdc87c78c8f1e0167dfcdbea8db5e197960abb2e83a673dd9ea7879f7408807429668cd3247cec1480b576373630a1b6f5dc159977fe963f68479b9263a37b744d60ba37a74d7eb45cd3eb8d3bf343136e60fdf8ade99726a7ae37d07c87e8bdd84a24f88c0f64517b2adfced116dead2e0258d9e5d149a99bce2112b076e86d5ec4a36a6f0ccf0fc80c8ff817f55859ecd6c0a1f0051e5c6dfa8effaf5ad575e7da26782c768d2018dec2b724c2b99dc7c0f36cd5a98e67234878c8ad8da484814"}, @generic={0x7f, 0x2, "5e07c1c03b2b05140ab8e122d7b070434edc07b1996ca015ee9c767bdb867a59d08377b3a5541968a06f922cabbf3a2f45e7cb434b0a09be37861bcb9fdfc6b7ee465c13d2cd6a2f6c34ebe08c055687041578fdf7101f2469dada67c43ebb7eb6a9c55c87d0bf6791d5e9c70d64d7c1d439794901605af659c0fd353a"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x66, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x6f}, @generic={0x3b, 0x23, "70bfa06d92b189059cea29031cee47b2fa417894556d3f9609248d50d2ced5c180bb0808a882cd1fe8ae0b6971439d154a35e13ddffbd842bb"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x4, 0x41, 0x6, [@generic={0xda, 0xe, "a45b0c50e389b8855d7252b2f0c288150d70cc72f9883b3294b75d5cef6d22a2f1a9c935e2cd1163cfdbccfa39fc54fc9fe9a5b209dd491da7c6498eb9b61b00d0083941ad9b17fa442981cdaf76f80a7faa59134943bd38e62ca2d098897cd0be14beb2b1add62067beb31a460ab1a11eccf26efd6ca2dedcf42a7884f2030e9f7957771811288f911da02f2984032886dc02e1e26291933f0c04c5e393f8ad77f9afa5457fd2c93b38a4d88b6850bf821e5a2397f20c6aaf3fd4a16dd92891c227d22cbe61932612553e55c337e2ad5f9f192e72828cff"}, @generic={0x3d, 0x9, "26d5417bf9ef8df8c55329c3d2bbfb56b151bc2db933629255b5b629465ab470cfff26797708e60003941f3a26f57fedc2a4adf117c332a87f5320"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x6, 0x7f, 0x40}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0x81, 0x15, [@generic={0xd9, 0x3f, "37f980065ccea0163d088e15b14e4deede02eda1419d60193b599b94d4854a24cd973e07137d07530b428439043282c210bdb8588c09598b7172cba8e91eb4ec12ca38d904878f4ad668270561ae39d5844903a892478ccb597b928864cac932c6740ad2b5f65eb66292826f345238a69ac771f12abf6abc682e3fdeb94634a2676b1178bbcee5477c092721700df5ca416d7dacb59a9a9051912e5e891b540b7b3bceb7157f6f5fb7227de0bdcc017f7100036cb930284204e59019237f7c77c3426f8a38d71ce8501b94f12a877771652fed42c4736a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xd, 0x7, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x6, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x5}, @generic={0x4b, 0x22, "e48bf5d91f0a657f586cf8c376aac023af1834c827f29a375afa9ca3f829b92194891ccbd46ca803e14c936ec6648f3e3d361d620b5ad2487de5a8efa329e187ac1f37279a6539f968"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x14, 0x7}}]}}, {{0x9, 0x4, 0x3c, 0x9, 0x2, 0xff, 0xff, 0xff, 0x4, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ece007dd30"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x1000, 0x1}, {0x6, 0x24, 0x1a, 0xfffe, 0x11}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @obex={0x5, 0x24, 0x15, 0x1}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x70, 0x2, 0x7f, [@generic={0x1e, 0x30, "59bb0c927f7e922ced276a0abaa57dd48f6349038d82ec0e1479a6f9"}]}}, {{0x9, 0x5, 0xb, 0x30, 0x3ff, 0x2, 0x9, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x7, 0x0, 0x66, 0x8, 0x9}, 0x13a, &(0x7f0000001540)={0x5, 0xf, 0x13a, 0x4, [@generic={0x62, 0x10, 0x4, "9f9d2cb09789d452c87cb4ee85a447d48b2abaef998e335ce2c3c1dbbdb8d71b97dd1f65c117e09f1222fb01d03eaa8d55ed07a2e37b5130804d909d0c28bc416cb765df6dbfcd99da5948c51e356a53806292cee701c38ad3be6e7f56a73a"}, @generic={0xc2, 0x10, 0x4, "82a9ee4621dddf76aacc0b176e3a86333c4266be31dbdc5644f8d8ac422696699aeece4577632d8754b1c6cee1edd54118bf4bee12dd850d7c741226b1dfd1ff7464da81f88147439e5f15544b71a03e91650867a7491c10a2e37b7dc822c30a0eb34c5a5974e4432d7cd8078fdd7fd9d63911150fcdcb0de695502e56f78654b780eb3b670836ae0b3202731c36e3491c3f363e04bc6417a3edbae4e86e5a842a9695724219f3e10d6e91ed55cdb01428595dd5c9a18d7e319d8c3f874bf7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x4, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xe2, 0xd, 0x4}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4015}}]}) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000b00)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x108) 9.155714457s ago: executing program 2 (id=1447): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.889874134s ago: executing program 2 (id=1448): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00092f27bd70000000000006"], 0x1c}}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) r6 = gettid() setrlimit(0xc, &(0x7f0000000040)={0xbcf}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "dc00", "acc1e9f9399482e5f29e9c10ca86c172", "84902b01", "1109361dd889ced6"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f0000000240)=0x4, 0x4) sched_rr_get_interval(r6, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202", @ANYRES16], 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.77549452s ago: executing program 3 (id=1453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) clock_getres(0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) getpid() r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) socket$kcm(0x29, 0x5, 0x0) close(r4) 7.668691186s ago: executing program 4 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=""/118, 0x76) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 7.160449957s ago: executing program 0 (id=1457): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x2, 0x7, 0xffffffff}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000180)=""/152) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x5, 0x2000000000f, 0x9, 0x8000000000000005, 0x7e, 0xb, 0x1b, 0x2, 0xb596, 0x101, 0x3, 0x1], 0xeeee0000, 0x209210}) write$nbd(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700000000000000000000003e078b4ea9373c73f5f0d747c3d5b253355dc62ee6de97639a2541327d2576f482f67452af6c45419d074aedf0d2074848a66ba8f197463c"], 0x40) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x150) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$dsp(0xffffffffffffffff, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af26, &(0x7f0000000680)) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x4, 0x0) 7.128067616s ago: executing program 3 (id=1458): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) (async) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x6, 0x5, 0x2, 0x4, 0x1, 0x0, [{0x10, 0x75264262, 0x5, '\x00', 0x102}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x0, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.094910031s ago: executing program 1 (id=1459): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010040000f304"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6.13903534s ago: executing program 0 (id=1460): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, 0x0, r9) write$UHID_INPUT(r8, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) 6.112378141s ago: executing program 2 (id=1461): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) close(r2) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 5.467538135s ago: executing program 1 (id=1462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x6, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000300)) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000002000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r8]) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) 4.67262311s ago: executing program 2 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) open(&(0x7f00009e1000)='./file0\x00', 0x400, 0xa2) 4.670493775s ago: executing program 4 (id=1464): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$dsp(r0, &(0x7f0000000100)="97", 0x1) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.483607559s ago: executing program 4 (id=1465): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f00000001c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000003400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, 0xffffffffffffffff, 0x26}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 3.176720673s ago: executing program 1 (id=1466): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x374b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='fscache_resize\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYRESOCT=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x8, 0x5, 0x0) clock_adjtime(0x7, &(0x7f0000000840)={0x1, 0xfffffffffffffff3, 0x8, 0x4, 0x8dc, 0x8000000000000000, 0x2, 0x1, 0x8, 0x4, 0x2, 0x1, 0xffffffff, 0x1a9, 0x5, 0x100000001, 0x0, 0x4, 0xfffffffffffffff7, 0x101, 0x8, 0x100000001, 0x80000001, 0x0, 0x7, 0x4}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x5, 0x20000000, 0x10004) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) remap_file_pages(&(0x7f0000378000/0x2000)=nil, 0x2000, 0x100000a, 0x1, 0x100000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x0, 0x43, 0x0, 0x1, 0x4}, 0x28) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 2.980790295s ago: executing program 3 (id=1467): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c822"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000600)='./file0\x00', 0xc9028ba210c11f09) 2.630639522s ago: executing program 3 (id=1468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000003540)={[0x7fffffff]}, 0x8) fchown(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f00000001c0)={0xa, 0x2, 0x1b6, @private2={0xfc, 0x2, '\x00', 0x5}}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2.601631653s ago: executing program 4 (id=1469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c00"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e28, 0x0, @mcast2, 0x6}, 0x1c) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x60000000}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0x8864}, @val={0x1, 0x80, 0xc, 0x200, 0x8, 0x401}, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x3, 0x3a, 0x75, 0x68, 0x0, 0x2, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc5}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @noop, @timestamp={0x44, 0x24, 0xeb, 0x0, 0x5, [0x8000, 0x5, 0x7, 0x101, 0x8, 0x26, 0x800, 0x2]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xf}, {@multicast1, 0xb60c}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x7b, 0x0, 0x1, 0x8, 0x5, 0x0, 0x8, 0x4f1, 0x4, 0x4e21, 0x4e20}}, [0x0]}}}}}}, 0x91) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002dbd7000fbdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4800) r6 = io_uring_setup(0x7f30, &(0x7f0000000000)={0x0, 0x400067c1, 0x4, 0x2, 0x20c}) close_range(r6, 0xffffffffffffffff, 0x0) 1.899857615s ago: executing program 2 (id=1470): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000"/37], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) io_uring_setup(0x5ef9, 0x0) socket$inet6(0x10, 0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x20000000000001, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000007000000000a00000a300000ce27d27f8bc06519463aff00060a0b04000000000000000002000000040004800900010073797a30000000000900020073797a3200000019140000001100010000000000000000000000000a"], 0x58}}, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x46, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 1.659507618s ago: executing program 1 (id=1471): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002180)=""/235, 0xeb}, {&(0x7f0000004dc0)=""/4083, 0xff3}, {&(0x7f0000000c80)=""/165, 0xa5}], 0x3, 0x0, 0xffa6}}], 0x1, 0x62, 0x0) 1.657821615s ago: executing program 3 (id=1472): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010040000f304"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.576624743s ago: executing program 3 (id=1473): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffe, 0x80}, 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x10140, 0x47) preadv(r4, &(0x7f0000001b00), 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0xff08, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r3], 0x1c}}, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYRESOCT=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.488813141s ago: executing program 4 (id=1474): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000003c0)=""/189) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000100)={0x30, r3, 0x1, 0x0, 0xfffffffffffffe01, 0x0, 0x2, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0x4, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) r7 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) wait4(r7, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x3, @thr={&(0x7f0000000180)="4c4491cec6a840c28b4d1ed89dc4354e52e0ffc5bbc8ae644d3ad8fcdd153155bf6e74583b4d291edb3704a958d92481281840", 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) 1.423730882s ago: executing program 1 (id=1475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @flat=@weak_binder={0x77622a85, 0x1, 0x2000000001}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/76, 0x4c, 0x0, 0x29}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 440.718713ms ago: executing program 1 (id=1476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="08001efbb07d58", 0x7}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0x8864}, @val={0x1, 0x80, 0xc, 0x200, 0x8, 0x401}, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x3a, 0x79, 0x68, 0x0, 0x2, 0x6, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xc5, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}]}, @noop, @timestamp={0x44, 0x24, 0xeb, 0x0, 0x5, [0x8000, 0x5, 0x7, 0x101, 0x8, 0x26, 0x800, 0x2]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xf}, {@multicast1, 0xb60c}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x2, 0x2, 0x7b, 0x0, 0x1, 0x8, 0x5, 0x0, 0x8, 0x4f1, 0x4, 0x4e21, 0x4e20}}, [0x0]}}}}}}, 0x95) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002dbd7000fbdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4800) r5 = io_uring_setup(0x7f30, &(0x7f0000000000)={0x0, 0x400067c1, 0x4, 0x2, 0x20c}) close_range(r5, 0xffffffffffffffff, 0x0) 108.18472ms ago: executing program 2 (id=1477): socket$inet_mptcp(0x2, 0x1, 0x106) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000b80), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x26da8e97, 0xc0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) 0s ago: executing program 4 (id=1478): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) kernel console output (not intermixed with test programs): 319.677916][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.866283][ T5925] usb 4-1: config 0 descriptor?? [ 319.872153][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 320.241679][ T30] audit: type=1400 audit(1756643230.655:652): avc: denied { ioctl } for pid=9237 comm="syz.2.792" path="socket:[22281]" dev="sockfs" ino=22281 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.329201][ T9260] tipc: Enabled bearer , priority 0 [ 321.359751][ T9260] syzkaller0: entered promiscuous mode [ 321.367962][ T9260] syzkaller0: entered allmulticast mode [ 321.923680][ T30] audit: type=1400 audit(1756643232.385:653): avc: denied { write } for pid=9266 comm="syz.1.801" path="socket:[23478]" dev="sockfs" ino=23478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.015743][ T9259] tipc: Resetting bearer [ 322.069310][ T9259] tipc: Disabling bearer [ 322.784170][ T5925] usb 4-1: string descriptor 0 read error: -71 [ 322.807767][ T5925] usb 4-1: USB disconnect, device number 15 [ 322.828393][ T9223] delete_channel: no stack [ 322.906949][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 322.934881][ T9279] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 322.944969][ T9279] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 323.270121][ T5932] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 323.277761][ T5911] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 324.309988][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 324.317011][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.328523][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.329585][ T5911] usb 2-1: not running at top speed; connect to a high speed hub [ 324.351702][ T5932] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.361808][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 324.368457][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.376683][ T5932] usb 1-1: Product: syz [ 324.383753][ T5911] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40 [ 324.396886][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.407743][ T5932] usb 1-1: Manufacturer: syz [ 324.414554][ T5932] usb 1-1: SerialNumber: syz [ 324.419347][ T5911] usb 2-1: Product: syz [ 324.440513][ T5911] usb 2-1: Manufacturer: syz [ 324.459321][ T5911] usb 2-1: SerialNumber: syz [ 324.587889][ T9298] tipc: Enabled bearer , priority 0 [ 324.596388][ T9298] syzkaller0: entered promiscuous mode [ 324.602352][ T9298] syzkaller0: entered allmulticast mode [ 324.707916][ T9300] atomic_op ffff88807c936198 conn xmit_atomic 0000000000000000 [ 324.851015][ T5924] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 324.853845][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.926704][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.931603][ T30] audit: type=1400 audit(1756643235.405:654): avc: denied { connect } for pid=9280 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 324.986132][ T5911] usbhid 2-1:1.0: can't add hid device: -71 [ 324.992660][ T5911] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 325.008696][ T5911] usb 2-1: USB disconnect, device number 27 [ 325.019678][ T9297] tipc: Resetting bearer [ 325.047102][ T9297] tipc: Disabling bearer [ 325.063756][ T5924] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 325.074139][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.067395][ T5932] usb 1-1: 0:2 : does not exist [ 326.084415][ T5932] usb 1-1: unit 9 not found! [ 326.108203][ T30] audit: type=1400 audit(1756643236.585:655): avc: denied { mount } for pid=9317 comm="syz.0.816" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 326.148942][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.202541][ T5924] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 326.242847][ T5924] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input13 [ 326.264081][ T30] audit: type=1400 audit(1756643236.585:656): avc: denied { search } for pid=9317 comm="syz.0.816" name="/" dev="configfs" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.286101][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.319569][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.817'. [ 326.376993][ T5932] usb 1-1: USB disconnect, device number 29 [ 326.391784][ T5924] usb 3-1: USB disconnect, device number 26 [ 326.397742][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 326.565178][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.887682][ T9339] tipc: Enabled bearer , priority 0 [ 327.931388][ T9339] syzkaller0: entered promiscuous mode [ 327.940938][ T9339] syzkaller0: entered allmulticast mode [ 328.418961][ T9338] tipc: Resetting bearer [ 328.439034][ T9338] tipc: Disabling bearer [ 329.276823][ T30] audit: type=1400 audit(1756643239.755:657): avc: denied { nlmsg_read } for pid=9354 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.778634][ T9367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9367 comm=syz.3.827 [ 330.558325][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 330.674731][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 330.785112][ T9375] veth0_to_bond: entered allmulticast mode [ 331.050036][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 331.123443][ T9382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9382 comm=syz.0.832 [ 331.499624][ T9384] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 331.530166][ T9384] bond2: entered promiscuous mode [ 331.535594][ T9384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.551470][ T5911] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.586824][ T9384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.594372][ T5911] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 331.611077][ T9384] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 331.619998][ T5911] usb 4-1: config 1 has no interface number 1 [ 331.621822][ T9384] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 331.645458][ T9384] bond2: (slave vcan2): making interface the new active one [ 331.658165][ T9384] vcan2: entered promiscuous mode [ 331.672549][ T9384] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 331.879465][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 331.884486][ T30] audit: type=1400 audit(1756643242.335:658): avc: denied { map } for pid=9386 comm="syz.1.834" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.893896][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 331.931058][ T5904] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 331.940072][ T5911] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 255, changing to 7 [ 331.951230][ T5911] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 59378, setting to 1024 [ 332.043676][ T30] audit: type=1400 audit(1756643242.375:659): avc: denied { ioctl } for pid=9391 comm="syz.0.835" path="socket:[23690]" dev="sockfs" ino=23690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 332.088207][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.101777][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.110334][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 332.115840][ T5911] usb 4-1: Product: syz [ 332.121186][ T5911] usb 4-1: Manufacturer: syz [ 332.127618][ T5911] usb 4-1: SerialNumber: syz [ 332.132457][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.239382][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.809503][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.819253][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 332.831739][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.845735][ T9372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.860412][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 333.028641][ T5904] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 333.048844][ T5904] usb 3-1: Manufacturer: syz [ 333.053797][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 333.073096][ T9372] overlayfs: failed to resolve '/': -2 [ 333.075248][ T5904] usb 3-1: config 0 descriptor?? [ 333.229137][ T5911] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 333.239223][ T5911] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 333.260553][ T9] usb 1-1: device descriptor read/64, error -71 [ 333.346543][ T5911] usb 4-1: USB disconnect, device number 16 [ 333.407749][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.501128][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 333.550213][ T5904] rc_core: IR keymap rc-hauppauge not found [ 333.557224][ T5904] Registered IR keymap rc-empty [ 333.570508][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.602239][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.631636][ T9] usb 1-1: device descriptor read/64, error -71 [ 333.639197][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 333.680349][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 333.692643][ T30] audit: type=1400 audit(1756643244.165:660): avc: denied { setattr } for pid=9412 comm="syz.1.839" name="NETLINK" dev="sockfs" ino=24774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 333.736545][ T30] audit: type=1400 audit(1756643244.165:661): avc: denied { map } for pid=9412 comm="syz.1.839" path="pipe:[24772]" dev="pipefs" ino=24772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 333.760841][ T9] usb usb1-port1: attempt power cycle [ 333.767424][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.812430][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.836670][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.861748][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 333.972359][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.015222][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.051179][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.090033][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.106406][ T5924] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 334.110109][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 334.124439][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.551413][ T5904] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 334.555307][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 334.560986][ T9] usb 1-1: device descriptor read/8, error -71 [ 334.575558][ T5904] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 334.577824][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.585322][ T5904] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.599968][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.616736][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.627227][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.638476][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.910352][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 334.929352][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.940823][ T5924] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.948826][ T5924] usb 4-1: Manufacturer: syz [ 334.970688][ T5924] usb 4-1: config 0 descriptor?? [ 334.995394][ T9] usb 1-1: device descriptor read/8, error -71 [ 335.052201][ T5904] usb 3-1: USB disconnect, device number 27 [ 335.160223][ T9] usb usb1-port1: unable to enumerate USB device [ 335.451797][ T5924] rc_core: IR keymap rc-hauppauge not found [ 335.457882][ T5924] Registered IR keymap rc-empty [ 335.584776][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 335.610177][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.122787][ T5924] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 336.151348][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input15 [ 336.213103][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.261756][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.404644][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.450101][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.459589][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 336.468618][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 336.480227][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.693154][ T9444] bridge0: port 3(vlan2) entered blocking state [ 336.715738][ T9444] bridge0: port 3(vlan2) entered disabled state [ 336.720084][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.732591][ T9444] vlan2: entered allmulticast mode [ 336.737801][ T9444] bridge0: entered allmulticast mode [ 336.746422][ T9444] vlan2: left allmulticast mode [ 336.751824][ T9444] bridge0: left allmulticast mode [ 336.791312][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.830106][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.895525][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.932379][ T5924] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 336.976953][ T5924] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.990649][ T5924] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 337.237627][ T5924] usb 4-1: USB disconnect, device number 17 [ 339.413518][ T9479] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 339.753748][ T9489] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 339.787305][ T9482] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.856'. [ 340.284554][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9501 comm=syz.0.863 [ 340.762866][ T9504] random: crng reseeded on system resumption [ 341.129143][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 341.614316][ T9517] netlink: 'syz.0.867': attribute type 10 has an invalid length. [ 341.690435][ T30] audit: type=1400 audit(1756643252.165:662): avc: denied { mount } for pid=9516 comm="syz.1.869" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 342.042375][ T9528] tipc: Started in network mode [ 342.118458][ T9528] tipc: Node identity 9e54fd9a54e, cluster identity 4711 [ 342.129203][ T9528] tipc: Enabled bearer , priority 0 [ 342.144575][ T9529] syzkaller0: entered promiscuous mode [ 342.171241][ T9529] syzkaller0: entered allmulticast mode [ 342.628670][ T30] audit: type=1400 audit(1756643253.065:663): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 342.657107][ T9527] tipc: Resetting bearer [ 342.682669][ T9527] tipc: Disabling bearer [ 343.072419][ T9542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9542 comm=syz.2.878 [ 343.206725][ T9544] fuse: Bad value for 'user_id' [ 343.211721][ T9544] fuse: Bad value for 'user_id' [ 343.270239][ T30] audit: type=1400 audit(1756643253.685:664): avc: denied { mounton } for pid=9538 comm="syz.1.877" path="/175/file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 343.502537][ T9546] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 343.516722][ T9546] team0: Device ipvlan1 failed to register rx_handler [ 343.606508][ T9549] evm: overlay not supported [ 343.837609][ T9552] warning: `syz.2.881' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 344.068295][ T9552] comedi comedi3: pcl818: a I/O base address must be specified [ 344.607245][ T9564] 9pnet_fd: Insufficient options for proto=fd [ 344.717072][ T9566] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 344.984768][ T30] audit: type=1400 audit(1756643255.465:665): avc: denied { getopt } for pid=9565 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 345.013192][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 345.022012][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 345.040572][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 345.049373][ T9566] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 345.181466][ T9575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.702096][ T30] audit: type=1400 audit(1756643256.185:666): avc: denied { read write } for pid=9583 comm="syz.0.892" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 345.804373][ T30] audit: type=1400 audit(1756643256.185:667): avc: denied { open } for pid=9583 comm="syz.0.892" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 345.862102][ T30] audit: type=1400 audit(1756643256.215:668): avc: denied { ioctl } for pid=9583 comm="syz.0.892" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 347.218804][ T9596] pim6reg: entered allmulticast mode [ 347.372047][ T975] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 347.412619][ T9596] XFS (nullb0): Invalid superblock magic number [ 347.695446][ T975] usb 1-1: device descriptor read/64, error -71 [ 347.970218][ T975] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 348.200060][ T975] usb 1-1: device descriptor read/64, error -71 [ 348.330373][ T975] usb usb1-port1: attempt power cycle [ 348.641041][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 348.679965][ T975] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 348.701674][ T975] usb 1-1: device descriptor read/8, error -71 [ 348.870322][ T9] usb 2-1: device descriptor read/64, error -71 [ 348.983900][ T975] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 348.998469][ T30] audit: type=1400 audit(1756643259.475:669): avc: denied { write } for pid=9638 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.108404][ T975] usb 1-1: device descriptor read/8, error -71 [ 349.171361][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 349.220227][ T975] usb usb1-port1: unable to enumerate USB device [ 349.291529][ T30] audit: type=1400 audit(1756643259.765:670): avc: denied { mount } for pid=9645 comm="syz.3.910" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.332653][ T9] usb 2-1: device descriptor read/64, error -71 [ 349.436346][ T30] audit: type=1400 audit(1756643259.915:671): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.472564][ T9] usb usb2-port1: attempt power cycle [ 349.724496][ T9652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9652 comm=syz.3.912 [ 349.880078][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 350.132375][ T9] usb 2-1: device descriptor read/8, error -71 [ 351.073203][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 351.164591][ T9] usb 2-1: device descriptor read/8, error -71 [ 351.210564][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 351.290229][ T9] usb usb2-port1: unable to enumerate USB device [ 351.458102][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'. [ 351.532176][ T9669] fuse: Bad value for 'fd' [ 352.909602][ T9690] tipc: Enabled bearer , priority 0 [ 352.921990][ T30] audit: type=1400 audit(1756643263.405:672): avc: denied { ioctl } for pid=9682 comm="syz.0.922" path="socket:[25443]" dev="sockfs" ino=25443 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.954157][ T9690] syzkaller0: entered promiscuous mode [ 352.993672][ T9690] syzkaller0: entered allmulticast mode [ 353.272126][ T9697] atomic_op ffff888022ff3998 conn xmit_atomic 0000000000000000 [ 353.280498][ T5975] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 353.624552][ T9689] tipc: Resetting bearer [ 353.670224][ T9689] tipc: Disabling bearer [ 353.851319][ T5975] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.864914][ T5975] usb 1-1: config 0 has no interface number 0 [ 353.881309][ T5975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.919039][ T5975] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.931986][ T5975] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 353.941450][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.954735][ T30] audit: type=1326 audit(1756643264.425:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.1.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ed8ebe9 code=0x7fc00000 [ 353.963809][ T5975] usb 1-1: config 0 descriptor?? [ 354.539986][ T5911] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 355.372191][ T5911] usb 2-1: device descriptor read/64, error -71 [ 355.455220][ T5975] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 355.544582][ T5975] hid_prodikeys: hid-prodikeys: failed to find output report [ 355.544582][ T5975] [ 355.628460][ T9720] netlink: 356 bytes leftover after parsing attributes in process `syz.3.931'. [ 355.644971][ T9720] SELinux: failed to load policy [ 355.654534][ T5975] usb 1-1: USB disconnect, device number 38 [ 355.710039][ T5911] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 355.840066][ T5911] usb 2-1: device descriptor read/64, error -71 [ 355.994426][ T5911] usb usb2-port1: attempt power cycle [ 356.294293][ T9734] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 356.323745][ T9736] tipc: Enabled bearer , priority 0 [ 356.351683][ T5911] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 356.361924][ T30] audit: type=1400 audit(1756643266.845:674): avc: denied { getopt } for pid=9733 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 356.404908][ T9734] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 356.453252][ T9741] FAULT_INJECTION: forcing a failure. [ 356.453252][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 356.465984][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(full) [ 356.466009][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.466020][ T9741] Call Trace: [ 356.466027][ T9741] [ 356.466034][ T9741] dump_stack_lvl+0x16c/0x1f0 [ 356.466059][ T9741] should_fail_ex+0x512/0x640 [ 356.466079][ T9741] ? fs_reclaim_acquire+0xae/0x150 [ 356.466105][ T9741] ? tomoyo_encode2+0x100/0x3e0 [ 356.466129][ T9741] should_failslab+0xc2/0x120 [ 356.466149][ T9741] __kmalloc_noprof+0xd2/0x510 [ 356.466167][ T9741] ? d_absolute_path+0x136/0x1a0 [ 356.466197][ T9741] tomoyo_encode2+0x100/0x3e0 [ 356.466226][ T9741] tomoyo_encode+0x29/0x50 [ 356.466249][ T9741] tomoyo_realpath_from_path+0x18f/0x6e0 [ 356.466283][ T9741] tomoyo_path_number_perm+0x245/0x580 [ 356.466303][ T9741] ? tomoyo_path_number_perm+0x237/0x580 [ 356.466328][ T9741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 356.466359][ T9741] ? rcu_is_watching+0x12/0xc0 [ 356.466396][ T9741] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 356.466418][ T9741] ? hook_file_ioctl_common+0x145/0x410 [ 356.466443][ T9741] ? __fget_files+0x20e/0x3c0 [ 356.466467][ T9741] security_file_ioctl+0x9b/0x240 [ 356.466493][ T9741] __x64_sys_ioctl+0xb7/0x210 [ 356.466521][ T9741] do_syscall_64+0xcd/0x4c0 [ 356.466544][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.466562][ T9741] RIP: 0033:0x7f7934f8ebe9 [ 356.466576][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.466593][ T9741] RSP: 002b:00007f7935d3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.466610][ T9741] RAX: ffffffffffffffda RBX: 00007f79351c6180 RCX: 00007f7934f8ebe9 [ 356.466623][ T9741] RDX: 0000000000000000 RSI: 000000008008551c RDI: 0000000000000008 [ 356.466633][ T9741] RBP: 00007f7935d3b090 R08: 0000000000000000 R09: 0000000000000000 [ 356.466643][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.466653][ T9741] R13: 00007f79351c6218 R14: 00007f79351c6180 R15: 00007ffd946c6b78 [ 356.466677][ T9741] [ 356.466800][ T9741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.619413][ T5911] usb 2-1: device descriptor read/8, error -71 [ 356.693338][ T9740] syzkaller0: entered promiscuous mode [ 356.703067][ T30] audit: type=1400 audit(1756643267.145:675): avc: denied { accept } for pid=9733 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 356.723141][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.729607][ T9740] syzkaller0: entered allmulticast mode [ 356.768757][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 356.793925][ T9736] tipc: Resetting bearer [ 356.808151][ T9735] tipc: Resetting bearer [ 357.139435][ T9735] tipc: Disabling bearer [ 357.230153][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 357.284067][ T5911] usb 2-1: device descriptor read/8, error -71 [ 357.943093][ T5911] usb usb2-port1: unable to enumerate USB device [ 358.966905][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'. [ 359.262914][ T9771] syz.1.940 (9771): drop_caches: 2 [ 359.875461][ T30] audit: type=1400 audit(1756643270.355:676): avc: denied { setopt } for pid=9794 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.004887][ T9796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.947'. [ 360.390052][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 360.703102][ T30] audit: type=1400 audit(1756643271.185:677): avc: denied { remount } for pid=9794 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.950011][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 361.042154][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.053160][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.529157][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.538783][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.547739][ T9] usb 4-1: Product: syz [ 361.553220][ T9] usb 4-1: Manufacturer: syz [ 361.557871][ T9] usb 4-1: SerialNumber: syz [ 361.784152][ T9] usb 4-1: 0:2 : does not exist [ 361.789104][ T9] usb 4-1: unit 9 not found! [ 361.883026][ T30] audit: type=1400 audit(1756643272.365:678): avc: denied { name_bind } for pid=9809 comm="syz.0.953" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 361.934496][ T9] usb 4-1: USB disconnect, device number 18 [ 361.948366][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.706601][ T9824] tipc: Enabled bearer , priority 0 [ 362.764487][ T9824] syzkaller0: entered promiscuous mode [ 362.847636][ T9824] syzkaller0: entered allmulticast mode [ 362.893818][ T9823] tipc: Resetting bearer [ 362.941108][ T9823] tipc: Disabling bearer [ 363.078740][ T9836] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.958'. [ 363.854152][ T9834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.863246][ T9834] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.921668][ T9834] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.927962][ T9834] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.978509][ T9834] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.304807][ T30] audit: type=1400 audit(1756643274.785:679): avc: denied { setopt } for pid=9846 comm="syz.3.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.335641][ T9852] netlink: 92 bytes leftover after parsing attributes in process `syz.3.962'. [ 364.442770][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 364.470214][ T30] audit: type=1400 audit(1756643274.885:680): avc: denied { execute } for pid=9850 comm="syz.1.963" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 364.685373][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 364.705469][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.745451][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.771930][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.794833][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.813660][ T9] usb 3-1: Product: syz [ 364.827887][ T9] usb 3-1: Manufacturer: syz [ 364.832911][ T9] usb 3-1: SerialNumber: syz [ 364.961153][ T9863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=246 sclass=netlink_route_socket pid=9863 comm=syz.0.966 [ 365.078049][ T9] usb 3-1: 0:2 : does not exist [ 365.085478][ T9] usb 3-1: unit 9 not found! [ 365.132652][ T9] usb 3-1: USB disconnect, device number 28 [ 365.161083][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.190079][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 365.523529][ T30] audit: type=1400 audit(1756643275.995:681): avc: denied { mount } for pid=9871 comm="syz.3.970" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 365.884853][ T30] audit: type=1400 audit(1756643276.365:682): avc: denied { create } for pid=9879 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 365.910077][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 366.000156][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 366.006301][ T5172] Bluetooth: hci3: command 0x0406 tx timeout [ 366.012300][ T5172] Bluetooth: hci4: command 0x0406 tx timeout [ 366.216282][ T30] audit: type=1400 audit(1756643276.695:683): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 366.235928][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.444618][ T9890] block device autoloading is deprecated and will be removed. [ 366.473537][ T9892] 9pnet_fd: Insufficient options for proto=fd [ 366.480970][ T9892] block nbd3: shutting down sockets [ 366.549666][ T9896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.701311][ T5925] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 366.840051][ T5925] usb 1-1: device descriptor read/64, error -71 [ 367.430107][ T5925] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 367.569980][ T5925] usb 1-1: device descriptor read/64, error -71 [ 367.770372][ T5925] usb usb1-port1: attempt power cycle [ 367.900067][ T5975] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 368.090058][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 368.096441][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.107396][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.117224][ T5975] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 368.120063][ T5925] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 368.126539][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.143236][ T5975] usb 4-1: config 0 descriptor?? [ 368.151816][ T5925] usb 1-1: device descriptor read/8, error -71 [ 368.319292][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 368.329231][ T9918] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 368.338922][ T9918] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 368.400023][ T5925] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 368.421644][ T5925] usb 1-1: device descriptor read/8, error -71 [ 368.532441][ T5925] usb usb1-port1: unable to enumerate USB device [ 368.555264][ T5975] hid_parser_main: 68 callbacks suppressed [ 368.555277][ T5975] ft260 0003:0403:6030.000A: unknown main item tag 0x7 [ 368.590110][ T5911] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 368.763424][ T5911] usb 2-1: not running at top speed; connect to a high speed hub [ 368.770565][ T5975] ft260 0003:0403:6030.000A: chip code: 6424 8183 [ 368.772499][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0 [ 368.779160][ T5975] ft260 0003:0403:6030.000A: failed to retrieve system status [ 368.794433][ T5975] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 368.796338][ T5911] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40 [ 368.823526][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.833876][ T5911] usb 2-1: Product: syz [ 368.838047][ T5911] usb 2-1: Manufacturer: syz [ 368.845106][ T5911] usb 2-1: SerialNumber: syz [ 369.064174][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.073103][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.094518][ T5911] usbhid 2-1:1.0: can't add hid device: -71 [ 369.110129][ T5911] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 369.127540][ T5911] usb 2-1: USB disconnect, device number 36 [ 369.570947][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 369.580694][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 370.267038][ T5924] usb 4-1: USB disconnect, device number 19 [ 370.514937][ T9944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=9944 comm=syz.3.989 [ 371.293818][ T9951] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 371.305728][ T9951] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 371.380051][ T9951] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 371.401639][ T9951] nbd: error processing sock list [ 371.453118][ T9951] block nbd0: shutting down sockets [ 371.670142][ T5924] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 372.111966][ T5924] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 372.131129][ T5924] usb 4-1: config 0 has no interface number 0 [ 372.156719][ T5924] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 372.168084][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.274660][ T5924] usb 4-1: Product: syz [ 372.290510][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 372.368601][ T5924] usb 4-1: Manufacturer: syz [ 372.379987][ T5924] usb 4-1: SerialNumber: syz [ 372.441015][ T5924] usb 4-1: config 0 descriptor?? [ 372.716528][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 372.727601][ T9969] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 372.737104][ T9969] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 372.824265][ T9972] netlink: 'syz.1.999': attribute type 8 has an invalid length. [ 373.145214][ T9977] block nbd1: Attempted send on invalid socket [ 373.151616][ T9977] blk_print_req_error: 11 callbacks suppressed [ 373.151648][ T9977] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 373.168758][ T9977] EXT4-fs (nbd1): unable to read superblock [ 373.565885][ T9966] delete_channel: no stack [ 373.877732][ T30] audit: type=1400 audit(1756643284.355:684): avc: denied { append } for pid=9980 comm="syz.0.1001" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 374.103877][ T5924] usb 4-1: Firmware version (0.0) predates our first public release. [ 374.250783][ T5924] usb 4-1: Please update to version 0.2 or newer [ 374.354454][ T30] audit: type=1400 audit(1756643284.385:685): avc: denied { ioctl } for pid=9980 comm="syz.0.1001" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 374.424792][ T5924] usb 4-1: USB disconnect, device number 20 [ 374.529701][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 374.608334][ T9991] bridge2: port 1(veth3) entered blocking state [ 374.620461][ T9991] bridge2: port 1(veth3) entered disabled state [ 374.626897][ T9991] veth3: entered allmulticast mode [ 374.661525][ T9991] veth3: entered promiscuous mode [ 374.760076][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 374.767797][ T9992] vlan2: entered allmulticast mode [ 374.901357][ T9998] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.949694][ T9992] veth0_to_hsr: entered allmulticast mode [ 375.008783][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 375.018148][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1005'. [ 375.037268][ T9992] bridge2: port 2(vlan2) entered blocking state [ 375.038991][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 375.045490][ T9992] bridge2: port 2(vlan2) entered disabled state [ 375.063807][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.063832][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.071604][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.071633][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.071651][ T9] usb 1-1: Product: syz [ 375.071666][ T9] usb 1-1: Manufacturer: syz [ 375.071680][ T9] usb 1-1: SerialNumber: syz [ 375.109800][ T9992] vlan2: entered promiscuous mode [ 375.153070][ T9992] veth0_to_hsr: entered promiscuous mode [ 375.171101][ T9995] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 375.194951][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 375.313820][ T9] usb 1-1: 0:2 : does not exist [ 375.318735][ T9] usb 1-1: unit 9 not found! [ 375.388461][ T9] usb 1-1: USB disconnect, device number 43 [ 375.390764][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.184625][ T30] audit: type=1400 audit(1756643286.635:686): avc: denied { read } for pid=10010 comm="syz.2.1008" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.408371][T10022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1013'. [ 376.694169][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 377.145526][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 377.159565][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 377.281932][T10028] ceph: No mds server is up or the cluster is laggy [ 377.481750][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 377.706767][T10046] tipc: Enabled bearer , priority 0 [ 377.741591][T10046] syzkaller0: entered promiscuous mode [ 377.747061][T10046] syzkaller0: entered allmulticast mode [ 377.809974][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 377.907439][T10047] atomic_op ffff8880298f1998 conn xmit_atomic 0000000000000000 [ 378.152224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.158566][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.187359][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=80.99 [ 378.249150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.261339][T10045] tipc: Resetting bearer [ 378.267162][ T9] usb 1-1: Product: syz [ 378.273826][ T9] usb 1-1: Manufacturer: syz [ 378.278413][ T9] usb 1-1: SerialNumber: syz [ 378.312456][T10045] tipc: Disabling bearer [ 378.323160][ T9] usb 1-1: config 0 descriptor?? [ 378.364816][ T9] usb 1-1: MBOX3: Invalid descriptor size=18. [ 378.583541][ T9] usb 1-1: USB disconnect, device number 44 [ 380.376639][ T30] audit: type=1400 audit(1756643290.815:687): avc: denied { set_context_mgr } for pid=10074 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 380.415554][T10079] binder: 10074:10079 ioctl c0306201 2000000002c0 returned -14 [ 380.521859][ T30] audit: type=1400 audit(1756643290.895:688): avc: denied { call } for pid=10074 comm="syz.4.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 381.414558][T10082] delete_channel: no stack [ 383.530110][ T975] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 383.802397][ T975] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 383.834932][ T975] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 383.961506][ T975] usb 2-1: Product: syz [ 384.341931][ T975] usb 2-1: Manufacturer: syz [ 384.375110][ T975] usb 2-1: SerialNumber: syz [ 384.407297][ T975] usb 2-1: config 0 descriptor?? [ 384.439254][ T975] ch341 2-1:0.0: ch341-uart converter detected [ 384.737605][ T975] usb 2-1: failed to receive control message: -71 [ 384.887225][ T975] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 384.901194][T10114] block nbd2: Attempted send on invalid socket [ 384.907616][T10114] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 384.917104][T10114] block nbd2: Attempted send on invalid socket [ 384.923286][T10114] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 384.932859][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 384.942630][T10114] block nbd2: Attempted send on invalid socket [ 384.948906][T10114] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 384.958175][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 384.968041][T10114] block nbd2: Attempted send on invalid socket [ 384.974203][T10114] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 384.983726][T10114] block nbd2: Attempted send on invalid socket [ 384.989869][T10114] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 384.999156][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 385.008850][T10114] block nbd2: Attempted send on invalid socket [ 385.015072][T10114] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.024447][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 385.034309][T10114] block nbd2: Attempted send on invalid socket [ 385.040484][T10114] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.049844][T10114] block nbd2: Attempted send on invalid socket [ 385.056027][T10114] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.065373][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 385.074947][T10114] block nbd2: Attempted send on invalid socket [ 385.081098][T10114] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.090448][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 385.100219][T10114] block nbd2: Attempted send on invalid socket [ 385.106352][T10114] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 385.115641][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 385.125215][T10114] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 385.134678][T10114] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 385.153206][ T975] usb 2-1: USB disconnect, device number 37 [ 385.162584][ T975] ch341 2-1:0.0: device disconnected [ 386.814629][T10151] fuse: Bad value for 'group_id' [ 386.819610][T10151] fuse: Bad value for 'group_id' [ 388.423112][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 388.589377][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 389.231682][T10178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=10178 comm=syz.2.1055 [ 389.774188][T10162] syz.0.1049 (10162): drop_caches: 2 [ 390.382972][T10192] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 390.414803][T10192] netlink: 2868 bytes leftover after parsing attributes in process `syz.3.1061'. [ 390.434691][T10192] netlink: 2868 bytes leftover after parsing attributes in process `syz.3.1061'. [ 390.502339][T10194] tipc: Enabled bearer , priority 0 [ 390.520430][T10194] syzkaller0: entered promiscuous mode [ 390.536040][T10194] syzkaller0: entered allmulticast mode [ 390.625413][T10200] atomic_op ffff88807e3c9998 conn xmit_atomic 0000000000000000 [ 391.165921][T10193] tipc: Resetting bearer [ 391.195896][T10193] tipc: Disabling bearer [ 391.915990][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 392.651480][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 393.250458][ T5925] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 393.265848][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.297008][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.329669][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.360919][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.378117][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.399997][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.420992][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.430136][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.469080][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.487194][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.517863][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.529241][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.539418][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.549146][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.562634][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.571181][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.588987][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.615707][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.631559][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.650035][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.697175][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 393.717701][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.737957][ T5925] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.205559][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 394.214562][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 394.227134][ T5925] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.238427][ T5925] usb 4-1: Product: syz [ 394.247084][ T5925] usb 4-1: Manufacturer: syz [ 394.253274][ T5925] usb 4-1: SerialNumber: syz [ 394.268374][ T5925] usb 4-1: config 0 descriptor?? [ 394.287396][ T5925] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 394.552375][T10241] tipc: Enabled bearer , priority 0 [ 394.562731][T10241] syzkaller0: entered promiscuous mode [ 394.568216][T10241] syzkaller0: entered allmulticast mode [ 394.674915][T10245] atomic_op ffff88807ca95998 conn xmit_atomic 0000000000000000 [ 394.911144][T10240] tipc: Resetting bearer [ 394.965480][T10240] tipc: Disabling bearer [ 395.206391][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 395.293579][ T30] audit: type=1400 audit(1756643305.625:689): avc: denied { mount } for pid=10248 comm="syz.0.1078" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 395.432017][ T30] audit: type=1400 audit(1756643305.655:690): avc: denied { accept } for pid=10248 comm="syz.0.1078" laddr=::ffff:172.20.20.10 lport=49988 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.495563][ T30] audit: type=1400 audit(1756643305.665:691): avc: denied { write } for pid=10248 comm="syz.0.1078" laddr=::ffff:172.20.20.10 lport=49988 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 395.590775][ T30] audit: type=1400 audit(1756643305.665:692): avc: denied { setopt } for pid=10248 comm="syz.0.1078" laddr=::ffff:172.20.20.10 lport=49988 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 395.617672][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.632556][ T5925] usb 4-1: USB disconnect, device number 21 [ 395.650938][ T5925] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 395.776604][ T30] audit: type=1400 audit(1756643306.255:693): avc: denied { mounton } for pid=10265 comm="syz.1.1081" path="/proc/796/task" dev="proc" ino=28922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 395.799234][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.065850][T10274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1082'. [ 396.159508][T10276] overlayfs: missing 'lowerdir' [ 396.286077][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 396.380150][T10269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10269 comm=syz.4.1082 [ 396.780173][ T30] audit: type=1400 audit(1756643307.255:694): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 396.832338][T10287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.203978][ T30] audit: type=1400 audit(1756643309.675:695): avc: denied { ioctl } for pid=10316 comm="syz.2.1093" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 401.698297][T10351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.816513][T10348] block nbd1: shutting down sockets [ 401.816662][T10357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1105'. [ 401.822101][ T30] audit: type=1400 audit(1756643312.295:696): avc: denied { create } for pid=10354 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 401.852368][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.906208][T10374] fuse: Bad value for 'group_id' [ 403.918281][T10374] fuse: Bad value for 'group_id' [ 404.384440][ T5925] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 404.570709][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 404.607662][ T30] audit: type=1400 audit(1756643315.075:697): avc: denied { mount } for pid=10376 comm="syz.1.1111" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 404.806016][ T30] audit: type=1400 audit(1756643315.085:698): avc: denied { mounton } for pid=10376 comm="syz.1.1111" path="/224/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 404.806136][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.051146][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.069121][ T5925] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.078476][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.122851][ T5925] usb 1-1: Product: syz [ 405.131874][ T5925] usb 1-1: Manufacturer: syz [ 405.486673][ T5925] usb 1-1: SerialNumber: syz [ 405.980960][ T30] audit: type=1400 audit(1756643316.445:699): avc: denied { getopt } for pid=10395 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 405.981114][ T5925] usb 1-1: 0:2 : does not exist [ 406.040270][ T5925] usb 1-1: unit 9 not found! [ 406.168456][ T5925] usb 1-1: USB disconnect, device number 45 [ 406.202494][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.265547][ T30] audit: type=1400 audit(1756643316.745:700): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 406.484910][ T30] audit: type=1400 audit(1756643316.965:701): avc: denied { read write } for pid=10406 comm="syz.0.1119" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 406.581422][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 406.590716][T10415] netlink: 'syz.0.1119': attribute type 5 has an invalid length. [ 406.607439][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1119'. [ 406.876121][ T30] audit: type=1400 audit(1756643316.965:702): avc: denied { open } for pid=10406 comm="syz.0.1119" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 406.912678][ T30] audit: type=1400 audit(1756643317.055:703): avc: denied { ioctl } for pid=10406 comm="syz.0.1119" path="/dev/input/mouse0" dev="devtmpfs" ino=987 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 407.405014][T10415] geneve2: entered promiscuous mode [ 407.415873][T10415] geneve2: entered allmulticast mode [ 407.426139][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 407.451689][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 407.502754][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 407.556624][ T36] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 407.781685][T10426] fuse: Bad value for 'group_id' [ 407.819999][T10426] fuse: Bad value for 'group_id' [ 408.359710][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 408.425950][T10432] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1124'. [ 408.452433][T10432] binder: 10427:10432 ioctl c0306201 200000000080 returned -14 [ 409.975883][ T5975] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 410.180371][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 410.229978][ T5975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.251422][ T5975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.276299][ T5975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.288938][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.445357][ T5975] usb 4-1: Product: syz [ 410.449635][ T5975] usb 4-1: Manufacturer: syz [ 410.454312][ T5975] usb 4-1: SerialNumber: syz [ 412.248336][T10490] tipc: Enabled bearer , priority 0 [ 412.292526][T10492] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 412.299182][T10492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.315258][T10495] syzkaller0: entered promiscuous mode [ 412.324987][T10492] vhci_hcd vhci_hcd.0: Device attached [ 412.337616][T10495] syzkaller0: entered allmulticast mode [ 412.347505][T10496] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 412.354013][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 412.387773][T10496] vhci_hcd vhci_hcd.0: Device attached [ 412.403135][T10492] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 412.409750][T10492] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.431201][T10492] vhci_hcd vhci_hcd.0: Device attached [ 412.442013][ T5975] usb 4-1: 0:2 : does not exist [ 412.452188][ T5975] usb 4-1: unit 9 not found! [ 412.495339][T10496] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.510045][ T1819] vhci_hcd: vhci_device speed not set [ 412.534663][ T5975] usb 4-1: USB disconnect, device number 22 [ 412.543388][T10492] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.571525][ T7603] udevd[7603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.590366][ T1819] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 412.917845][T10492] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(12) [ 412.924476][T10492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 412.987598][T10506] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(20) [ 412.994214][T10506] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 413.033354][T10492] vhci_hcd vhci_hcd.0: Device attached [ 413.058394][T10489] tipc: Resetting bearer [ 413.117672][T10506] vhci_hcd vhci_hcd.0: Device attached [ 413.150259][ T30] audit: type=1400 audit(1756643323.635:704): avc: denied { ioctl } for pid=10510 comm="syz.2.1142" path="socket:[30723]" dev="sockfs" ino=30723 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 413.197622][T10497] vhci_hcd: connection closed [ 413.199111][T10499] vhci_hcd: connection closed [ 413.203915][T10493] vhci_hcd: connection reset by peer [ 413.214020][T10503] vhci_hcd: connection closed [ 413.216160][ T1157] vhci_hcd: stop threads [ 413.231856][T10513] FAULT_INJECTION: forcing a failure. [ 413.231856][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 413.234495][T10507] vhci_hcd: connection closed [ 413.263686][ T1157] vhci_hcd: release socket [ 413.265309][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.3.1143 Not tainted syzkaller #0 PREEMPT(full) [ 413.265329][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.265338][T10513] Call Trace: [ 413.265343][T10513] [ 413.265348][T10513] dump_stack_lvl+0x16c/0x1f0 [ 413.265372][T10513] should_fail_ex+0x512/0x640 [ 413.265395][T10513] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 413.265415][T10513] should_failslab+0xc2/0x120 [ 413.265433][T10513] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 413.265450][T10513] ? __alloc_skb+0x2b2/0x380 [ 413.265470][T10513] __alloc_skb+0x2b2/0x380 [ 413.265485][T10513] ? __pfx___alloc_skb+0x10/0x10 [ 413.265503][T10513] ? find_held_lock+0x2b/0x80 [ 413.265527][T10513] alloc_skb_with_frags+0xe0/0x860 [ 413.265553][T10513] sock_alloc_send_pskb+0x7fb/0x990 [ 413.265570][T10513] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 413.265594][T10513] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 413.265610][T10513] ? find_held_lock+0x2b/0x80 [ 413.265630][T10513] ? dev_get_by_index+0x17c/0x380 [ 413.265653][T10513] packet_sendmsg+0x2054/0x5850 [ 413.265683][T10513] ? sock_has_perm+0x259/0x2f0 [ 413.265702][T10513] ? __pfx_sock_has_perm+0x10/0x10 [ 413.265724][T10513] ? __pfx_packet_sendmsg+0x10/0x10 [ 413.265752][T10513] __sys_sendto+0x4a0/0x520 [ 413.265768][T10513] ? __pfx___sys_sendto+0x10/0x10 [ 413.265802][T10513] ? ksys_write+0x1ac/0x250 [ 413.265819][T10513] ? __pfx_ksys_write+0x10/0x10 [ 413.265838][T10513] __x64_sys_sendto+0xe0/0x1c0 [ 413.265853][T10513] ? do_syscall_64+0x91/0x4c0 [ 413.265870][T10513] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.265887][T10513] do_syscall_64+0xcd/0x4c0 [ 413.265906][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.265922][T10513] RIP: 0033:0x7faa8f58ebe9 [ 413.265935][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.265950][T10513] RSP: 002b:00007faa904f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.265967][T10513] RAX: ffffffffffffffda RBX: 00007faa8f7c5fa0 RCX: 00007faa8f58ebe9 [ 413.265977][T10513] RDX: 000000000000000e RSI: 00002000000000c0 RDI: 0000000000000003 [ 413.265986][T10513] RBP: 00007faa904f3090 R08: 0000200000000140 R09: 0000000000000014 [ 413.265996][T10513] R10: 0000000000048810 R11: 0000000000000246 R12: 0000000000000001 [ 413.266005][T10513] R13: 00007faa8f7c6038 R14: 00007faa8f7c5fa0 R15: 00007ffc2a33c598 [ 413.266028][T10513] [ 413.316048][T10489] tipc: Disabling bearer [ 413.368613][ T1157] vhci_hcd: disconnect device [ 413.382201][ T5911] tipc: Node number set to 1327392255 [ 413.600935][T10520] No buffer was provided with the request [ 413.615816][ T1157] vhci_hcd: stop threads [ 413.620349][ T1157] vhci_hcd: release socket [ 413.624837][ T1157] vhci_hcd: disconnect device [ 413.631099][ T1157] vhci_hcd: stop threads [ 413.635398][ T1157] vhci_hcd: release socket [ 413.641564][ T1157] vhci_hcd: disconnect device [ 413.646442][ T1157] vhci_hcd: stop threads [ 413.650824][ T1157] vhci_hcd: release socket [ 413.655359][ T1157] vhci_hcd: disconnect device [ 413.661869][ T1157] vhci_hcd: stop threads [ 413.668374][ T1157] vhci_hcd: release socket [ 413.673987][ T1157] vhci_hcd: disconnect device [ 413.681190][ T30] audit: type=1400 audit(1756643324.165:705): avc: denied { write } for pid=10521 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.743156][T10519] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 413.750238][T10519] syzkaller1: linktype set to 776 [ 413.763199][ T30] audit: type=1400 audit(1756643324.185:706): avc: denied { ioctl } for pid=10521 comm="syz.3.1145" path="socket:[30050]" dev="sockfs" ino=30050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.829122][ T30] audit: type=1400 audit(1756643324.185:707): avc: denied { bind } for pid=10521 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.926681][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 413.967444][ T1313] Bluetooth: hci5: Frame reassembly failed (-84) [ 413.982320][ T6807] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.100051][ T30] audit: type=1400 audit(1756643324.555:708): avc: denied { write } for pid=10528 comm="syz.4.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 414.487468][ T30] audit: type=1400 audit(1756643324.955:709): avc: denied { execute } for pid=10531 comm="syz.0.1148" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 414.528631][T10540] netlink: 8920 bytes leftover after parsing attributes in process `syz.3.1146'. [ 414.540632][T10541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 414.575955][ T30] audit: type=1400 audit(1756643325.005:710): avc: denied { ioctl } for pid=10529 comm="syz.3.1146" path="socket:[30766]" dev="sockfs" ino=30766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 414.678121][T10546] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1151'. [ 414.741794][ T30] audit: type=1400 audit(1756643325.035:711): avc: denied { read } for pid=10531 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 414.748379][T10547] tipc: Enabled bearer , priority 0 [ 414.813932][T10551] syzkaller0: entered promiscuous mode [ 414.833023][T10551] syzkaller0: entered allmulticast mode [ 415.402146][T10551] atomic_op ffff88804295b198 conn xmit_atomic 0000000000000000 [ 415.759227][T10544] tipc: Resetting bearer [ 415.995920][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.000271][ T5172] Bluetooth: hci5: command 0x1003 tx timeout [ 416.189458][T10544] tipc: Disabling bearer [ 417.451038][T10580] FAULT_INJECTION: forcing a failure. [ 417.451038][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 417.504502][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.1.1160 Not tainted syzkaller #0 PREEMPT(full) [ 417.504527][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.504538][T10580] Call Trace: [ 417.504544][T10580] [ 417.504551][T10580] dump_stack_lvl+0x16c/0x1f0 [ 417.504576][T10580] should_fail_ex+0x512/0x640 [ 417.504596][T10580] ? fs_reclaim_acquire+0xae/0x150 [ 417.504622][T10580] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 417.504647][T10580] should_failslab+0xc2/0x120 [ 417.504668][T10580] __kmalloc_noprof+0xd2/0x510 [ 417.504692][T10580] tomoyo_realpath_from_path+0xc2/0x6e0 [ 417.504720][T10580] ? tomoyo_profile+0x47/0x60 [ 417.504740][T10580] tomoyo_path_number_perm+0x245/0x580 [ 417.504761][T10580] ? tomoyo_path_number_perm+0x237/0x580 [ 417.504785][T10580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 417.504809][T10580] ? find_held_lock+0x2b/0x80 [ 417.504854][T10580] ? find_held_lock+0x2b/0x80 [ 417.504874][T10580] ? hook_file_ioctl_common+0x145/0x410 [ 417.504898][T10580] ? __fget_files+0x20e/0x3c0 [ 417.504922][T10580] security_file_ioctl+0x9b/0x240 [ 417.504949][T10580] __x64_sys_ioctl+0xb7/0x210 [ 417.504979][T10580] do_syscall_64+0xcd/0x4c0 [ 417.505001][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.505019][T10580] RIP: 0033:0x7f535ed8ebe9 [ 417.505034][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.505050][T10580] RSP: 002b:00007f535fcaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.505068][T10580] RAX: ffffffffffffffda RBX: 00007f535efc5fa0 RCX: 00007f535ed8ebe9 [ 417.505080][T10580] RDX: 0000200000000000 RSI: 0000000000003b88 RDI: 0000000000000003 [ 417.505091][T10580] RBP: 00007f535fcaf090 R08: 0000000000000000 R09: 0000000000000000 [ 417.505101][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.505110][T10580] R13: 00007f535efc6038 R14: 00007f535efc5fa0 R15: 00007ffea202ee98 [ 417.505134][T10580] [ 417.505141][T10580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.791996][ T1819] vhci_hcd: vhci_device speed not set [ 418.061617][T10586] misc userio: Invalid payload size [ 420.172198][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.181248][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.190229][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.199160][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.208231][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.217255][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.226247][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.235235][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.244231][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.253179][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 420.773921][ T30] audit: type=1400 audit(1756643331.055:712): avc: denied { map } for pid=10629 comm="syz.2.1175" path="socket:[30971]" dev="sockfs" ino=30971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.967472][ T30] audit: type=1400 audit(1756643331.245:713): avc: denied { read } for pid=10629 comm="syz.2.1175" path="socket:[30971]" dev="sockfs" ino=30971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 421.893059][T10639] tipc: Enabled bearer , priority 0 [ 421.912302][T10639] syzkaller0: entered promiscuous mode [ 421.930328][T10639] syzkaller0: entered allmulticast mode [ 422.134066][T10645] atomic_op ffff88805e90d198 conn xmit_atomic 0000000000000000 [ 423.997892][T10638] tipc: Resetting bearer [ 424.068077][T10638] tipc: Disabling bearer [ 424.578633][T10700] tipc: New replicast peer: 0.0.0.0 [ 424.610265][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 424.613777][T10700] tipc: Enabled bearer , priority 10 [ 424.780108][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 424.801765][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.846535][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.884334][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.911371][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.943103][ T9] usb 3-1: Product: syz [ 424.959947][ T9] usb 3-1: Manufacturer: syz [ 425.080839][ T9] usb 3-1: SerialNumber: syz [ 425.585457][ T9] usb 3-1: 0:2 : does not exist [ 425.590456][ T9] usb 3-1: unit 9 not found! [ 425.691333][ T9] usb 3-1: USB disconnect, device number 29 [ 425.753540][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.113246][ T5852] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 426.680109][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 427.294942][T10736] tipc: Enabled bearer , priority 0 [ 427.381802][T10738] syzkaller0: entered promiscuous mode [ 427.407097][T10738] syzkaller0: entered allmulticast mode [ 427.534974][T10738] atomic_op ffff8880541d6998 conn xmit_atomic 0000000000000000 [ 427.591919][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 427.612377][ T9] usb 3-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 427.651818][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 427.662171][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.702346][ T9] usb 3-1: Product: syz [ 427.727574][ T9] usb 3-1: Manufacturer: syz [ 427.766717][ T9] usb 3-1: SerialNumber: syz [ 427.841501][ T9] usb 3-1: config 0 descriptor?? [ 427.862339][T10735] tipc: Resetting bearer [ 427.873001][ T9] usb 3-1: bad CDC descriptors [ 427.891647][ T9] usb 3-1: unsupported MDLM descriptors [ 428.056414][T10747] random: crng reseeded on system resumption [ 429.038723][ T5911] usb 3-1: USB disconnect, device number 30 [ 429.089564][T10735] tipc: Disabling bearer [ 429.456618][T10752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.526642][T10757] __nla_validate_parse: 34 callbacks suppressed [ 429.526660][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'. [ 430.338555][T10768] fuse: Unknown parameter '' [ 430.600795][ T5925] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 430.801003][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.819914][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.834721][ T5925] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 430.984044][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.475574][ T5925] usb 2-1: config 0 descriptor?? [ 431.560076][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 431.740993][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 432.550222][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.711720][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.266562][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.317307][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 433.364416][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.460457][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.468261][ T9] usb 4-1: Product: syz [ 433.472808][ T9] usb 4-1: Manufacturer: syz [ 433.479636][ T5925] usb 2-1: USB disconnect, device number 38 [ 433.485740][ T9] usb 4-1: SerialNumber: syz [ 433.613417][T10805] input: syz0 as /devices/virtual/input/input16 [ 433.757762][ T9] usb 4-1: 0:2 : does not exist [ 433.763457][ T9] usb 4-1: unit 9 not found! [ 433.812889][ T9] usb 4-1: USB disconnect, device number 23 [ 433.820016][T10814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=10814 comm=syz.4.1212 [ 433.864321][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.311087][T10819] vlan2: entered allmulticast mode [ 434.316347][T10819] veth0_to_bond: entered allmulticast mode [ 434.356407][T10819] veth0_to_bond: entered promiscuous mode [ 434.396313][ T30] audit: type=1400 audit(1756643344.875:714): avc: denied { read } for pid=10818 comm="syz.2.1215" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 434.397100][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1215'. [ 434.442406][T10819] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 434.453008][ T30] audit: type=1400 audit(1756643344.875:715): avc: denied { open } for pid=10818 comm="syz.2.1215" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 434.655546][T10839] ./cgroup: Can't lookup blockdev [ 434.662238][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 434.671293][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 434.684743][T10839] IPv6: sit2: Disabled Multicast RS [ 434.690816][T10839] sit2: entered allmulticast mode [ 434.823431][T10843] tipc: Enabled bearer , priority 0 [ 434.871686][ T5925] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 434.884511][ T1819] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 434.924750][T10842] tipc: Disabling bearer [ 435.030026][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 435.038753][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.069140][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.082117][ T1819] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 435.083342][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.094157][T10851] 9pnet_virtio: no channels available for device qY3aK [ 435.122326][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.126003][ T30] audit: type=1400 audit(1756643345.575:716): avc: denied { mounton } for pid=10850 comm="syz.2.1222" path=2F3234352FE91F7189591E9233614B dev="tmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 435.141929][ T5925] usb 2-1: Product: syz [ 435.161883][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.170436][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.177835][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.190276][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.197820][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.207331][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.214944][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.225403][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.237482][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.248624][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.257928][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.394302][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.407782][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.417455][ T5925] usb 2-1: Manufacturer: syz [ 435.417883][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.432050][ T5925] usb 2-1: SerialNumber: syz [ 435.432881][ T1819] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 435.509341][ T1819] usb 4-1: config 0 has no interface number 0 [ 435.524082][ T1819] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 435.535862][ T1819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=203 [ 435.545534][ T1819] usb 4-1: Product: syz [ 435.555628][ T1819] usb 4-1: Manufacturer: syz [ 435.561384][ T1819] usb 4-1: SerialNumber: syz [ 435.568286][ T1819] usb 4-1: config 0 descriptor?? [ 435.586944][ T1819] usb 4-1: bad CDC descriptors [ 435.667077][ T5925] usb 2-1: 0:2 : does not exist [ 435.677958][ T5925] usb 2-1: unit 9 not found! [ 435.726203][ T5925] usb 2-1: USB disconnect, device number 39 [ 435.921842][ T30] audit: type=1400 audit(1756643346.395:717): avc: denied { ioctl } for pid=10833 comm="syz.3.1218" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 436.220615][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.229114][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.261634][ T30] audit: type=1400 audit(1756643346.695:718): avc: denied { bind } for pid=10858 comm="syz.0.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 436.491165][ T9] usb 4-1: USB disconnect, device number 24 [ 436.509262][ T5852] Bluetooth: hci2: unexpected event for opcode 0x204e [ 436.519088][ T30] audit: type=1400 audit(1756643347.005:719): avc: denied { ioctl } for pid=10869 comm="syz.1.1228" path="socket:[31357]" dev="sockfs" ino=31357 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 437.019154][ T30] audit: type=1400 audit(1756643347.495:720): avc: denied { connect } for pid=10869 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.267694][ T30] audit: type=1400 audit(1756643347.745:721): avc: denied { read } for pid=10869 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 437.369043][ T30] audit: type=1400 audit(1756643347.845:722): avc: denied { setopt } for pid=10869 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.643656][T10886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=10886 comm=syz.0.1231 [ 437.894710][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 438.026644][ T30] audit: type=1400 audit(1756643348.505:723): avc: denied { read } for pid=10889 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 438.317835][ T1819] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 438.481542][ T1819] usb 4-1: config index 0 descriptor too short (expected 8219, got 27) [ 438.490215][ T1819] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 438.508839][ T1819] usb 4-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 438.539918][ T1819] usb 4-1: config 0 has no interface number 0 [ 438.586886][ T1819] usb 4-1: too many endpoints for config 0 interface 48 altsetting 32: 32, using maximum allowed: 30 [ 438.606675][ T1819] usb 4-1: config 0 interface 48 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 438.621399][ T1819] usb 4-1: config 0 interface 48 has no altsetting 0 [ 438.628180][ T1819] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 439.073774][ T1819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.108693][ T1819] usb 4-1: config 0 descriptor?? [ 439.199948][ T5975] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 439.323117][ T1819] usb 4-1: string descriptor 0 read error: -71 [ 439.349995][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 439.371811][ T1819] ttusbir 4-1:0.48: cannot find expected altsetting [ 439.380700][ T5975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.394123][ T5975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.431699][ T1819] usb 4-1: USB disconnect, device number 25 [ 439.520675][ T5975] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.531594][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.550002][ T5975] usb 1-1: Product: syz [ 439.560345][ T5975] usb 1-1: Manufacturer: syz [ 439.570148][ T5975] usb 1-1: SerialNumber: syz [ 439.601801][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.608159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.802267][ T5975] usb 1-1: 0:2 : does not exist [ 439.808498][ T5975] usb 1-1: unit 9 not found! [ 439.848141][ T5975] usb 1-1: USB disconnect, device number 46 [ 439.881011][T10912] veth3: entered promiscuous mode [ 439.886097][T10912] veth3: entered allmulticast mode [ 440.121441][T10917] fuse: Unknown parameter '' [ 440.457460][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.480275][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.701338][ T5975] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 440.719587][T10928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=10928 comm=syz.4.1244 [ 440.888375][T10934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.989965][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 440.996928][ T5975] usb 1-1: config 1 interface 0 altsetting 19 bulk endpoint 0x1 has invalid maxpacket 1023 [ 441.007317][ T5975] usb 1-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.020741][ T5975] usb 1-1: config 1 interface 0 has no altsetting 0 [ 441.040456][ T5975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 441.053613][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.061822][ T5975] usb 1-1: Manufacturer: 폷픃븴ಉ悇鵍봞ケ괬쇆Ⳑⓚᇛᒦ宄⼷얠뗋斐珻ꊓ扱睭㱈゜ᄓꖹ牣鞌⛏ꆹ䋡밆움졆璴齢垽䕭츌᭐궦裯ꈐ斶⁺盕쵘杧츊뫺簹닉烛뫙辺醤朜䬣஀遃큽巔珤恎뿔肫엧 [ 441.086207][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.094635][ T5975] usb 1-1: SerialNumber: ܾ긦齆옿ᑵü풧ꘪ [ 441.104462][T10922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.230221][ T1819] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 441.318338][ T5975] usb 1-1: USB disconnect, device number 47 [ 441.391803][ T1819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.402235][ T1819] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.599550][ T1819] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.610127][ T1819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.627082][ T1819] usb 2-1: config 0 descriptor?? [ 441.722567][ T1819] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.731907][ T1819] dvb-usb: bulk message failed: -22 (3/0) [ 441.741811][ T1819] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.762942][ T1819] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.924628][T10940] netlink: 'syz.1.1249': attribute type 2 has an invalid length. [ 442.161720][ T1819] usb 2-1: media controller created [ 442.169241][ T1819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.187495][ T5852] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 442.187542][ T5852] Bluetooth: hci2: unknown advertising packet type: 0x2f [ 442.195378][ T5852] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 442.204013][ T5852] Bluetooth: hci2: Malformed LE Event: 0x02 [ 442.224168][ T1819] dvb-usb: bulk message failed: -22 (6/0) [ 442.234737][ T1819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 442.251804][T10957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.363614][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 442.387807][ T1819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 442.412166][ T1819] dvb-usb: schedule remote query interval to 150 msecs. [ 442.419578][ T1819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 442.431270][ T1819] usb 2-1: USB disconnect, device number 40 [ 442.440142][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 442.478054][ T1819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 442.592409][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 442.597207][ T30] audit: type=1800 audit(1756643353.075:724): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1255" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 442.609458][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.634170][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.656466][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.666205][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.676930][ T9] usb 3-1: Product: syz [ 442.681480][ T9] usb 3-1: Manufacturer: syz [ 442.686076][ T9] usb 3-1: SerialNumber: syz [ 442.834858][ T5924] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 442.890008][ T5925] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 442.904382][ T9] usb 3-1: 0:2 : does not exist [ 442.911594][ T9] usb 3-1: unit 9 not found! [ 442.937648][ T9] usb 3-1: USB disconnect, device number 31 [ 442.999962][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 443.010237][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 443.027359][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 443.039644][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 443.053083][ T5925] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 443.061733][ T5925] usb 4-1: config 0 has no interface number 1 [ 443.071115][ T5925] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 443.072350][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 443.094066][ T5924] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 443.103867][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.113111][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.151916][ T5924] usb 1-1: Product: syz [ 443.156179][ T5924] usb 1-1: Manufacturer: syz [ 443.162065][ T5924] usb 1-1: SerialNumber: syz [ 443.167692][ T5925] usb 4-1: config 0 descriptor?? [ 443.168851][ T5924] usb 1-1: config 0 descriptor?? [ 443.180295][T10957] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 443.187562][T10957] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 443.197585][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 443.207201][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 443.214829][ T5924] port100 1-1:0.0: NFC: Could not get supported command types [ 443.415611][ T5925] usb 4-1: Could not set interface, error -71 [ 443.494186][ T5925] usb 4-1: USB disconnect, device number 26 [ 443.807344][T10974] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 443.858743][ T30] audit: type=1800 audit(1756643354.335:725): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1259" name="file1" dev="tmpfs" ino=1354 res=0 errno=0 [ 443.910205][ T30] audit: type=1400 audit(1756643354.355:726): avc: denied { listen } for pid=10972 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 443.929840][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.961933][ T1819] usb 1-1: USB disconnect, device number 48 [ 443.975542][ T30] audit: type=1400 audit(1756643354.355:727): avc: denied { accept } for pid=10972 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 444.078207][T10981] fuse: Unknown parameter '' [ 444.839619][T10992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.140438][ T1819] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 447.322309][T11023] overlayfs: failed to resolve './file1': -2 [ 447.450092][ T1819] usb 3-1: Using ep0 maxpacket: 16 [ 447.459343][ T1819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.487898][ T1819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.514596][ T1819] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.533329][ T1819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.543881][ T1819] usb 3-1: Product: syz [ 447.548064][ T1819] usb 3-1: Manufacturer: syz [ 447.554829][ T1819] usb 3-1: SerialNumber: syz [ 448.098262][T11034] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 448.118254][T11034] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.159253][T11034] overlay: filesystem on ./bus not supported as upperdir [ 448.167949][ T1819] usb 3-1: 0:2 : does not exist [ 448.174401][ T1819] usb 3-1: unit 9 not found! [ 448.195611][ T1819] usb 3-1: USB disconnect, device number 32 [ 448.315209][T11041] trusted_key: encrypted_key: insufficient parameters specified [ 448.341864][T11041] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 448.579845][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'. [ 448.744979][T11046] fuse: Unknown parameter '' [ 448.818493][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1279'. [ 448.894092][ T30] audit: type=1400 audit(1756643359.375:728): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 448.947848][T11050] syzkaller0: entered promiscuous mode [ 448.954938][T11050] syzkaller0: entered allmulticast mode [ 448.964639][ T6790] syzkaller0: tun_net_xmit 48 [ 449.010231][ T5904] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 449.182936][ T5904] usb 4-1: device descriptor read/64, error -71 [ 449.290199][T11064] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1283'. [ 449.570451][ T5904] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 449.720025][ T5904] usb 4-1: device descriptor read/64, error -71 [ 449.840024][ T5904] usb usb4-port1: attempt power cycle [ 450.402223][ T5904] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 450.435670][ T5904] usb 4-1: device descriptor read/8, error -71 [ 450.700089][ T5924] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 450.860041][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 450.897103][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.016481][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.035470][ T5924] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 451.045082][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.071704][ T5924] usb 3-1: config 0 descriptor?? [ 452.244815][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 452.490019][ T5904] usb 4-1: device not accepting address 30, error -71 [ 452.502446][ T5904] usb usb4-port1: unable to enumerate USB device [ 452.770435][ T5924] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 453.111204][ T5924] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 453.325160][T11086] loop6: detected capacity change from 0 to 7 [ 453.353267][ T30] audit: type=1400 audit(453.292:729): avc: denied { append } for pid=11085 comm="syz.2.1289" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.604991][T11086] Dev loop6: unable to read RDB block 7 [ 453.611473][T11086] loop6: unable to read partition table [ 453.617277][T11086] loop6: partition table beyond EOD, truncated [ 453.623524][T11086] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 453.702887][ T5924] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 453.977807][ T5924] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 455.335558][ T5925] usb 3-1: USB disconnect, device number 33 [ 455.632954][T11166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.621620][T11177] fuse: Unknown parameter 'group_id00000000000000000000' [ 456.770179][T11182] random: crng reseeded on system resumption [ 456.989952][ T1819] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 457.745192][ T30] audit: type=1400 audit(457.702:730): avc: denied { read } for pid=11184 comm="syz.0.1307" path="socket:[32306]" dev="sockfs" ino=32306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 457.859945][ T1819] usb 3-1: Using ep0 maxpacket: 16 [ 457.868689][ T1819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.917623][ T1819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.938729][ T1819] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.954976][ T1819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.980052][ T1819] usb 3-1: Product: syz [ 457.988597][ T1819] usb 3-1: Manufacturer: syz [ 458.084864][ T1819] usb 3-1: SerialNumber: syz [ 458.942373][ T1819] usb 3-1: 0:2 : does not exist [ 458.975547][ T1819] usb 3-1: unit 9 not found! [ 458.993126][ T1819] usb 3-1: USB disconnect, device number 34 [ 459.041143][ T30] audit: type=1400 audit(458.992:731): avc: denied { getopt } for pid=11198 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.080145][ T30] audit: type=1400 audit(459.012:732): avc: denied { getopt } for pid=11198 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.822582][ T30] audit: type=1400 audit(459.012:733): avc: denied { bind } for pid=11198 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.049976][ T30] audit: type=1400 audit(459.012:734): avc: denied { name_bind } for pid=11198 comm="syz.1.1312" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 460.140987][T11211] fuse: Unknown parameter 'group_id00000000000000000000' [ 460.177930][ T30] audit: type=1400 audit(459.012:735): avc: denied { node_bind } for pid=11198 comm="syz.1.1312" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 460.613833][T11221] No control pipe specified [ 461.498631][T11238] fuse: Unknown parameter 'group_id00000000000000000000' [ 463.445965][T11270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56524 sclass=netlink_route_socket pid=11270 comm=syz.0.1332 [ 465.167865][T11283] random: crng reseeded on system resumption [ 467.036557][T11303] FAULT_INJECTION: forcing a failure. [ 467.036557][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 467.049619][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.3.1340 Not tainted syzkaller #0 PREEMPT(full) [ 467.049646][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.049654][T11303] Call Trace: [ 467.049657][T11303] [ 467.049662][T11303] dump_stack_lvl+0x16c/0x1f0 [ 467.049679][T11303] should_fail_ex+0x512/0x640 [ 467.049691][T11303] ? __kvmalloc_node_noprof+0x124/0x620 [ 467.049705][T11303] should_failslab+0xc2/0x120 [ 467.049718][T11303] __kvmalloc_node_noprof+0x137/0x620 [ 467.049729][T11303] ? seq_read_iter+0x826/0x12c0 [ 467.049743][T11303] ? seq_read_iter+0x826/0x12c0 [ 467.049753][T11303] seq_read_iter+0x826/0x12c0 [ 467.049770][T11303] proc_reg_read_iter+0x11b/0x310 [ 467.049788][T11303] copy_splice_read+0x615/0xc20 [ 467.049801][T11303] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 467.049822][T11303] ? __pfx_copy_splice_read+0x10/0x10 [ 467.049832][T11303] ? rcu_is_watching+0x12/0xc0 [ 467.049856][T11303] ? do_splice_read+0x1d1/0x370 [ 467.049875][T11303] ? __pfx_copy_splice_read+0x10/0x10 [ 467.049892][T11303] do_splice_read+0x285/0x370 [ 467.049912][T11303] splice_direct_to_actor+0x2a1/0xa30 [ 467.049932][T11303] ? __pfx_direct_splice_actor+0x10/0x10 [ 467.049952][T11303] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 467.049969][T11303] do_splice_direct+0x174/0x240 [ 467.049981][T11303] ? __pfx_do_splice_direct+0x10/0x10 [ 467.049993][T11303] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 467.050005][T11303] ? bpf_lsm_file_permission+0x9/0x10 [ 467.050020][T11303] ? security_file_permission+0x71/0x210 [ 467.050038][T11303] ? rw_verify_area+0xcf/0x6c0 [ 467.050057][T11303] do_sendfile+0xb06/0xe50 [ 467.050070][T11303] ? __pfx_do_sendfile+0x10/0x10 [ 467.050082][T11303] ? __pfx___schedule+0x10/0x10 [ 467.050093][T11303] ? rcu_is_watching+0x12/0xc0 [ 467.050108][T11303] __x64_sys_sendfile64+0x1d8/0x220 [ 467.050123][T11303] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 467.050142][T11303] do_syscall_64+0xcd/0x4c0 [ 467.050156][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.050168][T11303] RIP: 0033:0x7faa8f58ebe9 [ 467.050177][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.050188][T11303] RSP: 002b:00007faa904d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 467.050199][T11303] RAX: ffffffffffffffda RBX: 00007faa8f7c6090 RCX: 00007faa8f58ebe9 [ 467.050206][T11303] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 467.050212][T11303] RBP: 00007faa904d2090 R08: 0000000000000000 R09: 0000000000000000 [ 467.050218][T11303] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 467.050225][T11303] R13: 00007faa8f7c6128 R14: 00007faa8f7c6090 R15: 00007ffc2a33c598 [ 467.050239][T11303] [ 467.961385][T11308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=11308 comm=syz.3.1341 [ 472.257280][T11343] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1347'. [ 472.257647][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.257800][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.830009][ T1819] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 472.989931][ T1819] usb 4-1: Using ep0 maxpacket: 16 [ 473.017905][ T1819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.039446][ T1819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.057130][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 473.076596][T11362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.118726][T11361] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 473.136001][ T1819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.145308][T11361] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 473.145402][ T1819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.370206][ T1819] usb 4-1: Product: syz [ 473.375726][ T1819] usb 4-1: Manufacturer: syz [ 473.380520][ T1819] usb 4-1: SerialNumber: syz [ 473.470020][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 473.504305][ T30] audit: type=1400 audit(473.472:736): avc: denied { view } for pid=11366 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 473.631852][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 473.651104][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 473.674849][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40 [ 473.692243][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.712028][ T9] usb 1-1: Product: syz [ 473.717758][ T9] usb 1-1: Manufacturer: syz [ 473.722893][ T9] usb 1-1: SerialNumber: syz [ 473.829960][ T5924] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 473.945083][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.953889][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.980036][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 473.996165][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 474.010989][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 474.034797][ T9] usb 1-1: USB disconnect, device number 49 [ 474.043708][ T5924] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 474.062543][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 474.071291][ T5924] usb 2-1: Product: syz [ 474.075560][ T5924] usb 2-1: Manufacturer: syz [ 474.083135][ T5924] usb 2-1: SerialNumber: syz [ 474.127838][ T5924] usb 2-1: config 0 descriptor?? [ 474.410548][ T9] usb 2-1: USB disconnect, device number 41 [ 475.117910][ T1819] usb 4-1: 0:2 : does not exist [ 475.132410][ T1819] usb 4-1: unit 9 not found! [ 475.206238][ T1819] usb 4-1: USB disconnect, device number 31 [ 476.507532][T11401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1368'. [ 477.313267][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 479.349101][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 479.368192][T11458] netlink: 'syz.0.1376': attribute type 5 has an invalid length. [ 479.449777][T11462] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 479.455089][ T5925] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 479.493372][ T30] audit: type=1400 audit(479.462:737): avc: denied { write } for pid=11451 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 480.184236][T11455] delete_channel: no stack [ 480.512380][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.523463][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 480.614900][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 480.628146][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 480.638774][ T5925] usb 2-1: SerialNumber: syz [ 480.746158][ T5925] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 480.775584][ T5925] usb-storage 2-1:1.0: USB Mass Storage device detected [ 480.859759][ T5925] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 480.881690][ T5925] scsi host1: usb-storage 2-1:1.0 [ 480.961152][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 481.020825][ T5925] usb 2-1: USB disconnect, device number 42 [ 481.132789][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 481.145482][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.163983][ T9] usb 3-1: config 0 has no interface number 0 [ 481.346283][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.416508][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.482380][ T9] usb 3-1: Product: syz [ 481.563060][ T9] usb 3-1: Manufacturer: syz [ 481.644795][ T9] usb 3-1: SerialNumber: syz [ 481.659900][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 481.701008][ T9] usb 3-1: config 0 descriptor?? [ 481.708180][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.945628][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 481.992720][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 482.070351][T11488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1386'. [ 482.315731][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 116 [ 482.564776][T11468] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1380'. [ 482.994767][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.003588][ T9] usb 3-1: USB disconnect, device number 35 [ 483.152912][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.388726][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.426027][T11499] input: syz1 as /devices/virtual/input/input19 [ 483.466287][ T9] quatech2 3-1:0.51: device disconnected [ 483.496883][ T30] audit: type=1326 audit(483.412:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11498 comm="syz.1.1390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f535ed8ebe9 code=0x0 [ 483.662466][T11510] FAULT_INJECTION: forcing a failure. [ 483.662466][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.675802][T11510] CPU: 0 UID: 0 PID: 11510 Comm: syz.0.1391 Not tainted syzkaller #0 PREEMPT(full) [ 483.675826][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.675834][T11510] Call Trace: [ 483.675839][T11510] [ 483.675845][T11510] dump_stack_lvl+0x16c/0x1f0 [ 483.675866][T11510] should_fail_ex+0x512/0x640 [ 483.675885][T11510] _copy_from_user+0x2e/0xd0 [ 483.675905][T11510] copy_msghdr_from_user+0x98/0x160 [ 483.675922][T11510] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 483.675939][T11510] ? __lock_acquire+0xb97/0x1ce0 [ 483.675968][T11510] ___sys_sendmsg+0xfe/0x1d0 [ 483.675984][T11510] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.676024][T11510] __sys_sendmsg+0x16d/0x220 [ 483.676039][T11510] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.676067][T11510] do_syscall_64+0xcd/0x4c0 [ 483.676085][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.676099][T11510] RIP: 0033:0x7f3469f8ebe9 [ 483.676111][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.676124][T11510] RSP: 002b:00007f346ae6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.676138][T11510] RAX: ffffffffffffffda RBX: 00007f346a1c6180 RCX: 00007f3469f8ebe9 [ 483.676148][T11510] RDX: 0000000004000010 RSI: 0000200000000340 RDI: 0000000000000005 [ 483.676156][T11510] RBP: 00007f346ae6f090 R08: 0000000000000000 R09: 0000000000000000 [ 483.676165][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.676173][T11510] R13: 00007f346a1c6218 R14: 00007f346a1c6180 R15: 00007ffcbcb60d58 [ 483.676192][T11510] [ 484.142867][T11518] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1394'. [ 484.737826][T11531] fuse: Bad value for 'fd' [ 486.472135][T11558] random: crng reseeded on system resumption [ 486.502319][T11556] netlink: 'syz.2.1405': attribute type 6 has an invalid length. [ 486.771754][T11565] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1406'. [ 487.729925][ T5911] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 488.419687][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.427647][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.435689][T11582] UHID_CREATE from different security context by process 1007 (syz.2.1411), this is not allowed. [ 488.446666][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.454840][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.462442][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.470022][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.478091][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.485750][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.493373][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.564013][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 488.574170][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.589578][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 488.940779][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.953598][ T5911] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 488.977653][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.484528][ T5911] usb 4-1: config 0 descriptor?? [ 490.143601][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 490.180693][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 490.256241][ T5911] usb 4-1: USB disconnect, device number 32 [ 490.859111][ T30] audit: type=1400 audit(490.822:739): avc: denied { name_connect } for pid=11619 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 490.976062][T11628] tipc: Enabled bearer , priority 0 [ 491.156040][T11621] tipc: Disabling bearer [ 491.162332][ T30] audit: type=1400 audit(491.102:740): avc: denied { read } for pid=11619 comm="syz.4.1419" lport=60246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 491.360717][T11634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.468033][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 492.060110][ T5924] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 492.400385][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 492.417843][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 492.460820][T11646] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 492.470089][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 492.484675][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 492.509305][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 492.553306][T11646] bond1: entered promiscuous mode [ 492.558698][T11646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.807128][ T5924] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 492.816956][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.847922][ T5924] usb 1-1: Product: syz [ 492.861256][ T5924] usb 1-1: Manufacturer: syz [ 492.884931][ T5924] usb 1-1: SerialNumber: syz [ 492.913177][T11655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.923284][T11655] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 492.959884][T11655] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 492.984319][ T5924] usb 1-1: config 0 descriptor?? [ 493.008500][T11634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.015765][T11634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.028579][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 493.034961][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 493.042770][ T5924] port100 1-1:0.0: NFC: Could not get supported command types [ 493.071241][T11655] bond1: (slave vcan1): making interface the new active one [ 493.134181][T11655] vcan1: entered promiscuous mode [ 493.140961][T11655] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 493.548819][ T5904] usb 1-1: USB disconnect, device number 50 [ 493.687948][ T30] audit: type=1326 audit(493.652:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.1.1431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f535ed8ebe9 code=0x0 [ 494.064449][T11680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=11680 comm=syz.2.1436 [ 494.809982][ T5904] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 495.039049][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 495.609180][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.668879][T11694] syzkaller0: entered promiscuous mode [ 495.688783][T11694] syzkaller0: entered allmulticast mode [ 495.701337][ T30] audit: type=1400 audit(495.672:742): avc: denied { map } for pid=11695 comm="syz.0.1442" path="socket:[35125]" dev="sockfs" ino=35125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 495.774028][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.850268][T11698] atomic_op ffff888079c84998 conn xmit_atomic 0000000000000000 [ 495.862940][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.883331][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.900713][ T5904] usb 2-1: Product: syz [ 495.905009][ T5904] usb 2-1: Manufacturer: syz [ 495.913158][ T5904] usb 2-1: SerialNumber: syz [ 496.010523][ T5924] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 496.180160][ T5924] usb 1-1: device descriptor read/64, error -71 [ 496.320873][T11708] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 496.333860][ T5904] usb 2-1: 0:2 : does not exist [ 496.338829][ T5904] usb 2-1: unit 9 not found! [ 496.358295][T11708] bond2: entered promiscuous mode [ 496.374152][T11708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.375605][ T5904] usb 2-1: USB disconnect, device number 43 [ 496.419951][ T5924] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 496.463326][T11708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.483729][T11708] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 496.508135][T11708] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 496.538456][T11708] bond2: (slave vcan2): making interface the new active one [ 496.557854][T11708] vcan2: entered promiscuous mode [ 496.563160][ T5924] usb 1-1: device descriptor read/64, error -71 [ 496.575621][T11708] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 496.681449][ T5924] usb usb1-port1: attempt power cycle [ 496.976780][T11717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.988624][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 497.039981][ T5924] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 497.060323][ T5924] usb 1-1: device descriptor read/8, error -71 [ 497.250136][ T975] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 497.300723][ T5924] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 497.321287][ T5924] usb 1-1: device descriptor read/8, error -71 [ 497.356617][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 497.359221][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 497.399605][ T30] audit: type=1400 audit(497.362:743): avc: denied { setopt } for pid=11726 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 497.410066][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 497.432451][ T5924] usb usb1-port1: unable to enumerate USB device [ 497.438958][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 497.454152][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 497.464327][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 497.477029][ T975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 497.498931][ T975] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 497.508112][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.516337][ T975] usb 3-1: Product: syz [ 497.522414][ T975] usb 3-1: Manufacturer: syz [ 497.527020][ T975] usb 3-1: SerialNumber: syz [ 497.533752][ T975] usb 3-1: config 0 descriptor?? [ 497.539269][T11717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.546533][T11717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.557358][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 497.563757][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 497.573636][ T975] port100 3-1:0.0: NFC: Could not get supported command types [ 498.106213][ T5904] usb 3-1: USB disconnect, device number 36 [ 498.157491][T11735] syzkaller0: entered promiscuous mode [ 498.166724][T11735] syzkaller0: entered allmulticast mode [ 498.274067][T11741] atomic_op ffff888023f7c198 conn xmit_atomic 0000000000000000 [ 499.667164][ T30] audit: type=1400 audit(499.102:744): avc: denied { setopt } for pid=11747 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 500.365486][T11755] input: syz1 as /devices/virtual/input/input20 [ 500.459574][T11761] hpfs: Bad magic ... probably not HPFS [ 501.038554][T11791] netlink: 'syz.0.1460': attribute type 12 has an invalid length. [ 501.072142][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.078466][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.173621][T11792] netlink: 'syz.1.1462': attribute type 1 has an invalid length. [ 501.630238][ T5975] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 502.013093][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 502.242344][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 502.262267][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 502.373423][ T5975] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 502.407980][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.423427][ T5975] usb 1-1: Product: syz [ 502.433718][ T5975] usb 1-1: Manufacturer: syz [ 502.444352][ T5975] usb 1-1: SerialNumber: syz [ 502.453104][ T5975] usb 1-1: config 0 descriptor?? [ 502.765683][ T5975] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 502.890360][T11805] random: crng reseeded on system resumption [ 504.022127][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 504.395645][T11826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.150234][ C1] ------------[ cut here ]------------ [ 506.150279][ C1] ODEBUG: free active (active state 0) object: ffff888053027c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 506.150526][ C1] WARNING: CPU: 1 PID: 11842 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 506.150546][ C1] Modules linked in: [ 506.150581][ C1] CPU: 1 UID: 0 PID: 11842 Comm: syz.2.1477 Not tainted syzkaller #0 PREEMPT(full) [ 506.150595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.150601][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 506.150616][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3a 16 8c 4c 89 e6 48 c7 c7 e0 2e 16 8c e8 8f 6c 8f fc 90 <0f> 0b 90 90 58 83 05 26 bf c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 506.150626][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 506.150635][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 506.150642][ C1] RDX: ffff88807a40c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 506.150648][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 506.150655][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163580 [ 506.150661][ C1] R13: ffffffff8bafed40 R14: ffffffff8a817c30 R15: ffffc90000a08b28 [ 506.150668][ C1] FS: 00007f7935d5c6c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 506.150682][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.150694][ C1] CR2: 000020000001d000 CR3: 0000000085f51000 CR4: 00000000003526f0 [ 506.150706][ C1] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008 [ 506.150717][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 506.150729][ C1] Call Trace: [ 506.150736][ C1] [ 506.150743][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 506.150762][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 506.150775][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 506.150795][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 506.150813][ C1] ? mark_held_locks+0x49/0x80 [ 506.150829][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 506.150840][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.150853][ C1] kfree+0x28f/0x4d0 [ 506.150867][ C1] ? lock_acquire+0x179/0x350 [ 506.150881][ C1] ? rose_timer_expiry+0x53f/0x630 [ 506.150898][ C1] rose_timer_expiry+0x53f/0x630 [ 506.150914][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 506.150928][ C1] call_timer_fn+0x197/0x620 [ 506.150944][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 506.150963][ C1] ? mark_held_locks+0x49/0x80 [ 506.150978][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 506.150993][ C1] __run_timers+0x6ef/0x960 [ 506.151012][ C1] ? __pfx___run_timers+0x10/0x10 [ 506.151035][ C1] run_timer_base+0x114/0x190 [ 506.151050][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 506.151067][ C1] run_timer_softirq+0x1a/0x40 [ 506.151081][ C1] handle_softirqs+0x216/0x8e0 [ 506.151098][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 506.151113][ C1] __irq_exit_rcu+0x109/0x170 [ 506.151125][ C1] irq_exit_rcu+0x9/0x30 [ 506.151142][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 506.151152][ C1] [ 506.151156][ C1] [ 506.151160][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 506.151172][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 506.151183][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 1c 01 f6 48 89 df e8 2e 70 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 6f f1 f5 65 8b 05 0e dc 3f 08 85 c0 74 16 5b [ 506.151193][ C1] RSP: 0018:ffffc9000546f858 EFLAGS: 00000246 [ 506.151201][ C1] RAX: 0000000000000006 RBX: ffff888078d3a900 RCX: 0000000000000006 [ 506.151208][ C1] RDX: 0000000000000000 RSI: ffffffff8de50a38 RDI: ffffffff8c162980 [ 506.151215][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 506.151221][ C1] R10: ffffffff90ab5297 R11: 0000000000000000 R12: ffff888078d3a770 [ 506.151227][ C1] R13: ffff888078d3a940 R14: ffff888078d3a2e8 R15: ffff888078509500 [ 506.151242][ C1] __unix_dgram_recvmsg+0x315/0xc30 [ 506.151259][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 506.151278][ C1] ? iovec_from_user+0xbb/0x140 [ 506.151294][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 506.151307][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 506.151324][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 506.151342][ C1] ? kfree+0x24f/0x4d0 [ 506.151355][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 506.151372][ C1] ___sys_recvmsg+0x114/0x1a0 [ 506.151385][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 506.151405][ C1] ? __pfx___might_resched+0x10/0x10 [ 506.151421][ C1] do_recvmmsg+0x2fe/0x750 [ 506.151434][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 506.151445][ C1] ? lock_acquire+0x179/0x350 [ 506.151462][ C1] ? do_futex+0x122/0x350 [ 506.151483][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 506.151500][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 506.151513][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 506.151528][ C1] do_syscall_64+0xcd/0x4c0 [ 506.151542][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.151552][ C1] RIP: 0033:0x7f7934f8ebe9 [ 506.151561][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.151571][ C1] RSP: 002b:00007f7935d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 506.151581][ C1] RAX: ffffffffffffffda RBX: 00007f79351c6090 RCX: 00007f7934f8ebe9 [ 506.151587][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000009 [ 506.151594][ C1] RBP: 00007f7935011e19 R08: 0000000000000000 R09: 0000000000000000 [ 506.151600][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 506.151606][ C1] R13: 00007f79351c6128 R14: 00007f79351c6090 R15: 00007ffd946c6b78 [ 506.151619][ C1] [ 506.151625][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 506.151632][ C1] CPU: 1 UID: 0 PID: 11842 Comm: syz.2.1477 Not tainted syzkaller #0 PREEMPT(full) [ 506.151644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.151649][ C1] Call Trace: [ 506.151653][ C1] [ 506.151657][ C1] dump_stack_lvl+0x3d/0x1f0 [ 506.151669][ C1] vpanic+0x6e8/0x7a0 [ 506.151684][ C1] ? __pfx_vpanic+0x10/0x10 [ 506.151702][ C1] ? debug_print_object+0x1a2/0x2b0 [ 506.151715][ C1] panic+0xca/0xd0 [ 506.151732][ C1] ? __pfx_panic+0x10/0x10 [ 506.151764][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 506.151783][ C1] check_panic_on_warn+0xab/0xb0 [ 506.151795][ C1] __warn+0xf6/0x3c0 [ 506.151804][ C1] ? debug_print_object+0x1a2/0x2b0 [ 506.151818][ C1] report_bug+0x3c3/0x580 [ 506.151828][ C1] ? debug_print_object+0x1a2/0x2b0 [ 506.151842][ C1] handle_bug+0x184/0x210 [ 506.151854][ C1] exc_invalid_op+0x17/0x50 [ 506.151867][ C1] asm_exc_invalid_op+0x1a/0x20 [ 506.151876][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 506.151889][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 3a 16 8c 4c 89 e6 48 c7 c7 e0 2e 16 8c e8 8f 6c 8f fc 90 <0f> 0b 90 90 58 83 05 26 bf c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 506.151898][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010286 [ 506.151906][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3358 [ 506.151912][ C1] RDX: ffff88807a40c880 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 506.151918][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 506.151924][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163580 [ 506.151930][ C1] R13: ffffffff8bafed40 R14: ffffffff8a817c30 R15: ffffc90000a08b28 [ 506.151937][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 506.151951][ C1] ? __warn_printk+0x198/0x350 [ 506.151965][ C1] ? __warn_printk+0x1a5/0x350 [ 506.151980][ C1] ? debug_print_object+0x1a1/0x2b0 [ 506.151993][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 506.152004][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 506.152016][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 506.152034][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 506.152052][ C1] ? mark_held_locks+0x49/0x80 [ 506.152066][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 506.152075][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.152087][ C1] kfree+0x28f/0x4d0 [ 506.152100][ C1] ? lock_acquire+0x179/0x350 [ 506.152113][ C1] ? rose_timer_expiry+0x53f/0x630 [ 506.152129][ C1] rose_timer_expiry+0x53f/0x630 [ 506.152148][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 506.152162][ C1] call_timer_fn+0x197/0x620 [ 506.152177][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 506.152195][ C1] ? mark_held_locks+0x49/0x80 [ 506.152209][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 506.152224][ C1] __run_timers+0x6ef/0x960 [ 506.152242][ C1] ? __pfx___run_timers+0x10/0x10 [ 506.152265][ C1] run_timer_base+0x114/0x190 [ 506.152280][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 506.152296][ C1] run_timer_softirq+0x1a/0x40 [ 506.152310][ C1] handle_softirqs+0x216/0x8e0 [ 506.152325][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 506.152339][ C1] __irq_exit_rcu+0x109/0x170 [ 506.152351][ C1] irq_exit_rcu+0x9/0x30 [ 506.152362][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 506.152372][ C1] [ 506.152375][ C1] [ 506.152379][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 506.152391][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 506.152402][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 1c 01 f6 48 89 df e8 2e 70 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 6f f1 f5 65 8b 05 0e dc 3f 08 85 c0 74 16 5b [ 506.152410][ C1] RSP: 0018:ffffc9000546f858 EFLAGS: 00000246 [ 506.152418][ C1] RAX: 0000000000000006 RBX: ffff888078d3a900 RCX: 0000000000000006 [ 506.152424][ C1] RDX: 0000000000000000 RSI: ffffffff8de50a38 RDI: ffffffff8c162980 [ 506.152430][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000001 [ 506.152436][ C1] R10: ffffffff90ab5297 R11: 0000000000000000 R12: ffff888078d3a770 [ 506.152442][ C1] R13: ffff888078d3a940 R14: ffff888078d3a2e8 R15: ffff888078509500 [ 506.152456][ C1] __unix_dgram_recvmsg+0x315/0xc30 [ 506.152470][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 506.152489][ C1] ? iovec_from_user+0xbb/0x140 [ 506.152503][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 506.152515][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 506.152531][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 506.152548][ C1] ? kfree+0x24f/0x4d0 [ 506.152561][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 506.152578][ C1] ___sys_recvmsg+0x114/0x1a0 [ 506.152588][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 506.152606][ C1] ? __pfx___might_resched+0x10/0x10 [ 506.152621][ C1] do_recvmmsg+0x2fe/0x750 [ 506.152633][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 506.152644][ C1] ? lock_acquire+0x179/0x350 [ 506.152660][ C1] ? do_futex+0x122/0x350 [ 506.152679][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 506.152695][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 506.152707][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 506.152722][ C1] do_syscall_64+0xcd/0x4c0 [ 506.152734][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.152744][ C1] RIP: 0033:0x7f7934f8ebe9 [ 506.152752][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.152760][ C1] RSP: 002b:00007f7935d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 506.152774][ C1] RAX: ffffffffffffffda RBX: 00007f79351c6090 RCX: 00007f7934f8ebe9 [ 506.152786][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000009 [ 506.152798][ C1] RBP: 00007f7935011e19 R08: 0000000000000000 R09: 0000000000000000 [ 506.152810][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 506.152820][ C1] R13: 00007f79351c6128 R14: 00007f79351c6090 R15: 00007ffd946c6b78 [ 506.152832][ C1] [ 506.153055][ C1] Kernel Offset: disabled