last executing test programs: 45.481217164s ago: executing program 4 (id=2821): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000003000000e27f00000100000012000000ea8eeea4fc95d2f901003f561e26ee471d87183ebf097eacc578f2437e95ac0db2582676d81e6a4b3afffeb5d63dbbf2c8ce87ad0dacde66e635d2988e727f49236fa5f1619a277048cbbf1b0ece6990679de50c2852e826f660f876a15671a088ce539c27f6c07e91e5bcb420e00e5756b87bbcea79572605287fb41475d6b9cbb7eae5d916fef55ec8abbedc175e06c4dd36c15bee07e14cbafd63ab21a3e9b5d7472ff46ccc74a0dd1acc2ec22299b9a735e3b13364e0d6657172f2f170136310af545229a3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.932678322s ago: executing program 4 (id=2834): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in6=@initdev}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) socket$alg(0x26, 0x5, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) unshare(0x28040680) timerfd_create(0x0, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) r6 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r6, 0x0, 0x0) 10.895332235s ago: executing program 1 (id=2891): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xfff6) 10.716279975s ago: executing program 1 (id=2895): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000021, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0xd4, 0x100) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x40000000) 9.812827618s ago: executing program 2 (id=2897): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x3d, 0xff, 0xf}, 0x2c) (async) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r3) (async, rerun: 64) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (async) close(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 9.693060094s ago: executing program 2 (id=2898): syz_usb_connect(0x2, 0x24, &(0x7f00000010c0)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x32, &(0x7f0000001100)=@string={0x32, 0x3, "e5e9f6c576833302e87923a78c771ae0ad10efcdd73b212c46e724d42e6c1da3a68280b4018000003ac508a895eeb9e2"}}, {0x40, &(0x7f0000001140)=@string={0x40, 0x3, "791f3f5e507f5c312008e2c778e9f84c9044c23196950cc87d50133d24b9efd073eac0529fd9a7cb5f5bf45d429677d9615dc340af162d983b1a181c158c"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x57, &(0x7f00000011c0)=@string={0x57, 0x3, "8c119559e9c0e714ef61db46b34790de8ec86d02dc675dd5e45cb22cddede78cdd9f7c1b1cf94d52ec1df0b679793c32b8d5a9f3213f0cc83adab31c9342a785e0ade45a15661fa1d04ee7ee26ed7d1e58aa66b8db"}}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001400)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r4, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000001300)='./file0\x00', &(0x7f0000001340), &(0x7f0000001380)=[0x3, 0x2, 0x3, 0x3, 0x80000000003, 0x1001, 0x4, 0x2000004, 0x4], 0xff80000000000000, 0x0, 0x0, r5}}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) r6 = dup(r1) writev(r0, &(0x7f0000001640)=[{&(0x7f0000001180)="ea1cda51d5b055b313f563436c14db98e07c", 0x12}, {&(0x7f0000001480)="b21e1947b73d8e1daf365e3b4f20f47b02ee3a2c75c9dce7e94aee169e65fdeda0abd8baa2e0357ae857681661acfe26a9cc284fb2d3c7e19efd5e8fc4bb9368ef636ac5ab4eaff1b3570b5b449c05d287ba5f2254ce292d51223f83fb095bdc3040af1c330cd60249d8387d288a1923077197c1667631996489838a1397c7a9f616db80b55fd4f44625318bb1c887ccaa2dd56403d5aa1a9e5a0f2d119458a9826d0f02aee9371646661b767bf40a13670f88e6b2348155897837d0cf9c43f38f571b472c035ea5e57984cd5021185420ea8448a288dac5467446aa9e53518e8ac5420774582b8d386448ea618c19100749ecc5", 0xf4}, {&(0x7f0000001340)="9e85234f1acce4523bcdfde6f8d526fad878dd59e8f4ba4204e4829204070add68", 0x21}, {&(0x7f0000001580)="b930ac638af3dc5098f0b679f3148285092fbb7a8ab33da44f0cb91fdf48376df528f606e7e690e118b08e197b292fdced5831be70d04c384e225d7b8dde9ae3e9fbc1b721cbd50c4c3f4484a3a78d55f859a5fc7c1c3c09eaf7e6296944f15e182b0ce52e8a261268104d655886e1a7dc357a50a368822aa2f6bd450f607e2b9852ba1c3e476ca91882121f1abd9242ecb0a4b15fff", 0x96}], 0x4) write$UHID_INPUT(r6, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r7, 0x0, 0x20, &(0x7f0000000080)="170000000200010000ce2803", 0xc) write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2) write$sysctl(r0, &(0x7f0000001080)='4\x00', 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x20040040) 9.653866694s ago: executing program 4 (id=2839): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f1f20753e1e33cd61000000050302030300"/28], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x71, 0x2, 0x8, "cf9b2114", "048859f6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x5, 0x8, 0x7, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x0, 0x14}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d121"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_setup(0x7, &(0x7f0000004200)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000688a82fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb6", 0x79b}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000000000000002000000850000009d0000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) 9.441736761s ago: executing program 1 (id=2900): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00224e0000004e0ca76a0c68af0f8d34fd4b0e88c614453f1a2dd34822d6b2ceffe21c53f5e74a061eed0a887f00030e1494d31b596becfe6e3cb7d953e8f07c8176ffb9f24ab94f08ffdb15d588"], &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f1f20753e1e33cd61000000050302030300"/28], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x71, 0x2, 0x8, "cf9b2114", "048859f6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x5, 0x8, 0x7, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x0, 0x14}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "411f"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d121"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_setup(0x7, &(0x7f0000004200)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000688a82fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0x79b}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) 7.827634341s ago: executing program 0 (id=2902): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000004000000040400000200000000000000d08569961278082745d2accaa427d0dd255aab1c2e658fd9b183cc4aeddbf9f1061c00e981c3ffb7c28d7fa938d8f644fe06f3bb3da734354a24cb0de4d2d846fbf3eb07abaae2016fac1cd21e814ed33410b44f096bac0e8d991912b9b1d75d1ec81849dadcc364887b44ccb4d2d08585da2d4c737a00c94c5e2971ad196bfc7d436af11180982252b3c138f12f734d2f", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x1000000004, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x3, 0x6, 0x40, 0x10000, 'syz1\x00', 0x4000041}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './cgroup\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r3, &(0x7f00000006c0)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) sendto$phonet(r4, &(0x7f0000000280)="6dab30f8964c2346524c16a4ebf3991150dc2cf8e355007ac27494fc9e05bbc57c2c4aaedd5f7a7146db61346f1753ac026a6b00ab3d835abdb775e150631d8b22429c0776487c8231966e1ee1e5dd2b70840000000000000000000000a4760b6df434d9f5a0961a8dba9e7479ac6b90458397be50", 0x75, 0x40010, &(0x7f0000000680)={0x23, 0x7, 0xff, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="020028bd7000fbdbdf2505000000080003000000000034000680060001000200000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="060005004e600000080003000000000008000400040000800800020006000000"], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x1) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x28940, 0x0) readv(r8, &(0x7f00000000c0)=[{0x0, 0xfffffd6c}, {&(0x7f0000000340)=""/226, 0xe2}], 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0xf, 0x45a680) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'adl_pci9118\x00', [0x23, 0x3, 0x2, 0x10, 0x4, 0xcc7, 0xc9, 0x5c952399, 0x3, 0x3ff, 0x802, 0x40, 0x1, 0x2, 0x9, 0x0, 0x1, 0x200000, 0xfffffff4, 0x2, 0x0, 0x80000000, 0xffffffff, 0x0, 0xffffeadb, 0x3, 0x7ff, 0xf, 0x2, 0x8000000, 0x4]}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000300)=@nullb, 0x0, &(0x7f00000004c0)='./cgroup\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$COMEDI_SUBDINFO(0xffffffffffffffff, 0x80486402, &(0x7f0000000200)) 7.816763651s ago: executing program 3 (id=2903): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=r1], 0x7c}}, 0x100400c1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0x170}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x41, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r6}, 0x38) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x1d, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1, @ANYRESOCT=r3, @ANYRES64=r4], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff7fc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 6.792138937s ago: executing program 3 (id=2904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = socket$inet(0x2, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010104}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="1400000036000701452d7c614da2f8cb0238765c"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r3, &(0x7f0000000c40), 0x0, 0xc0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r8, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/43) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) 6.688490582s ago: executing program 2 (id=2905): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x30) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x1400200bcf) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000002240)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read(r7, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.559416542s ago: executing program 4 (id=2906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xb10, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xaf4, 0x8, 0x0, 0x1, [{0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xe776, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3332}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "840269afa1368b1160851d7ea7864dce2f840f095f9a53dfbadad33c924896f9"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4a1032c6531e77c3499c67b85a2a011bf9dce368a2e02850d46649907d22552f"}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x294, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @empty}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x3e0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @mcast2, 0x1ff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x97, @remote, 0x8}}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xb10}}, 0x40000) 6.505219544s ago: executing program 1 (id=2907): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = syz_io_uring_setup(0x113b, &(0x7f0000000640)={0x0, 0x10b7, 0x0, 0x2, 0x186}, &(0x7f00000006c0), &(0x7f0000000840)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/83, 0x53}], &(0x7f0000000940)=[0x2, 0x1f, 0x80, 0x7, 0x0, 0x800]}, 0x20) 6.239961585s ago: executing program 2 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES8=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='children\x00') r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)}) io_uring_enter(r6, 0x47b6, 0x800000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=ANY=[@ANYBLOB="94030000000405002bbd7000fddbdf250700000a4701a98008002a00", @ANYRES32, @ANYBLOB="85005880040089800500f7000000000008003e000002000004005980caf28bced66558e330692dfea12c407e273382f111816ced8e885f54374d6430df2efb1e01aa85df816898c183b20bb3ce31a4927ff0db8c78402f5629d3af2ca889a37252586ef33765bbaa04782e96530c006900950a0000000000000c00040007000000000000000000000800d300", @ANYRES32=r0, @ANYBLOB="6a0f6f402952efeb42c1bd31a7c0cc63a65037c7c0c0ccd8db224fbee0afea1b7ec515742e299641003b800500f4000000000004007b800400878056d0d7e9624ae5ac4883ac3751b0a1fc9fb332b38e858bac937cbb3d230a0000000000000000000000000000000000000c005c00000000000000000008009100", @ANYRES32=r2, @ANYBLOB="2c00a18008001300", @ANYRES32=r9, @ANYBLOB="0c001400000700000000000008002a004e00000008001b00", @ANYRES32=r10, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x5}, 0x20040804) 5.576842257s ago: executing program 2 (id=2909): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) syz_usb_connect(0x3, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc0102030109022d00010b06800809045f40030a00004009050d02000202040c0905080c400001c60d090582"], 0x0) 4.860855853s ago: executing program 4 (id=2910): open(0x0, 0x14927e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) r4 = fcntl$getown(r2, 0x9) sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x6) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x48, 0x8000, 0x0, 0x9, 0x2, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000080)=""/34, 0x22, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0xffff, 0x1, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/handlers\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 4.692202318s ago: executing program 0 (id=2911): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) r4 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x20000004, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) fdatasync(r3) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xffffff74, 0x0, 0x1}) 4.109316631s ago: executing program 3 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x1, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_emit_ethernet(0x57, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x21, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getxattr(0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r7, 0x24, 0x0, 0xda, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x13c42) 4.059425891s ago: executing program 3 (id=2913): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80000, 0x88) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='dirsy\r\x00\x00', &(0x7f00000000c0)='./file0\x00', r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="400f0166bba034bae2e308bffce1b6b7600d760b4e3d2287eabf09bdbef4d2d835aa13c6d799c560452027616bfe334ff82ecde3a59a947d296723da3b6cec456cf0dfc1fff0ff09d00920721cfea770d34f180c28dcbd0d184d0343e4e71276de1ef4e8a4cc169f83daf0f5c20c5c8d346aa6febb9dff23d12d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0xa15b, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) 3.838669003s ago: executing program 0 (id=2914): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010200000000e6fb3d7ea1d9d8644a11cf2858b40000000000000b00000000000000b80443da3a1802ff05000000000065060000008000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f00000005c0)={0x2020}, 0x2020) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) creat(0x0, 0x0) chmod(0x0, 0x50) syz_emit_ethernet(0xfffffffffffffddf, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000000000000000081003b000800401e00000064000005069078ac1414bbac14143f94005577ab379e50cadde6ff3f4d004400c5b17f00000100000002e00000017fffffff4400052000008000000000f100"/101], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582"], 0x0) 2.567831786s ago: executing program 1 (id=2915): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 2.567247934s ago: executing program 2 (id=2916): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f1f20753e1e33cd61000000050302030300"/28], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x71, 0x2, 0x8, "cf9b2114", "048859f6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x5, 0x8, 0x7, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x0, 0x14}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d121"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_setup(0x7, &(0x7f0000004200)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000688a82fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0x79b}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000000000000002000000850000009d0000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) 967.643299ms ago: executing program 3 (id=2917): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x400, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 867.785124ms ago: executing program 0 (id=2918): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001580)={0x0, 0x8, 0x6, "401e18a4986a"}, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000000)) 236.694644ms ago: executing program 0 (id=2919): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) mmap(&(0x7f0000001000/0x8000)=nil, 0x8000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x4000000000000111, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, r3, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) 184.758304ms ago: executing program 1 (id=2920): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a79, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 100.2292ms ago: executing program 4 (id=2921): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc0480, 0x0) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000240)={0x1}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(r0, 0x5452, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000000080301000000000000000000000000090001797a30000000000500030006000000060002408863000004000480dd064780d7ebe2acf7c6eaaf142f4782372532f2b2d25888e76df4364f8dfae46d66e4b902bca899a64976"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x80000000}}, './file0\x00'}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000100)={r10, 0x2, r9, 0x0, 0x80000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 48.018933ms ago: executing program 3 (id=2922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000400), 0xe) listen(r5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) listen(r4, 0x7c000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)='d'}) userfaultfd(0x800) 0s ago: executing program 0 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x25, 0x1, 0x1, 0x25dfdbff, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_emit_ethernet(0x57, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x21, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x1, "122b472e41e24b"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getxattr(0x0, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r7, 0x24, 0x0, 0xda, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r9 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x13c42) kernel console output (not intermixed with test programs): udit: type=1400 audit(1768234870.059:9634): avc: denied { write } for pid=13190 comm="syz.4.2457" name="kcm" dev="proc" ino=4026533157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 471.361455][T13194] syzkaller0: mtu greater than device maximum [ 471.368614][T13193] tipc: Resetting bearer [ 471.374735][ T30] audit: type=1400 audit(1768234870.059:9635): avc: denied { create } for pid=13190 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 471.408032][ T30] audit: type=1400 audit(1768234870.195:9636): avc: denied { write } for pid=13190 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 471.408857][T13193] tipc: Disabling bearer [ 471.460449][T13192] lo speed is unknown, defaulting to 1000 [ 471.478273][T13192] lo speed is unknown, defaulting to 1000 [ 471.620491][ T30] audit: type=1400 audit(1768234870.552:9637): avc: denied { create } for pid=13201 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 471.668736][T13192] infiniband syz0: set down [ 471.673390][T13192] infiniband syz0: added lo [ 471.690450][ T5878] lo speed is unknown, defaulting to 1000 [ 471.705962][T13192] RDS/IB: syz0: added [ 471.710226][T13192] smc: adding ib device syz0 with port count 1 [ 471.719577][T13192] smc: ib device syz0 port 1 has no pnetid [ 471.726849][ T5878] lo speed is unknown, defaulting to 1000 [ 471.740611][T13192] lo speed is unknown, defaulting to 1000 [ 472.019230][T13210] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 472.038737][T13192] lo speed is unknown, defaulting to 1000 [ 472.039620][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 472.289372][T13216] tipc: Enabled bearer , priority 10 [ 472.386968][ T8320] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 472.399995][T13192] lo speed is unknown, defaulting to 1000 [ 472.531405][ T8320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.541783][ T8320] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.548971][ T5878] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 472.568131][ T8320] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 472.577137][ T8320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.591462][T13192] lo speed is unknown, defaulting to 1000 [ 472.599293][ T8320] usb 1-1: config 0 descriptor?? [ 472.702851][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 472.713104][T13192] lo speed is unknown, defaulting to 1000 [ 472.715317][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 472.747203][ T5878] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 472.749323][T13221] input: syz1 as /devices/virtual/input/input14 [ 472.757230][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.914998][ T5878] usb 3-1: Product: syz [ 472.930592][ T5878] usb 3-1: Manufacturer: syz [ 472.954682][ T5878] usb 3-1: SerialNumber: syz [ 473.943238][ T8320] tipc: Node number set to 1402376788 [ 473.948023][ T5878] usb 3-1: config 0 descriptor?? [ 473.954442][T13216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 473.968175][T13216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.189476][T13216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 474.220210][T13216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 475.400817][ T5878] Error reading MAC address [ 475.414642][ T5878] usb 3-1: USB disconnect, device number 50 [ 475.437601][ T5864] usb 1-1: USB disconnect, device number 65 [ 475.758813][T13241] ISOFS: Unable to identify CD-ROM format. [ 476.748304][T13250] FAULT_INJECTION: forcing a failure. [ 476.748304][T13250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.761995][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.2.2475 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.762023][T13250] Tainted: [L]=SOFTLOCKUP [ 476.762030][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.762040][T13250] Call Trace: [ 476.762046][T13250] [ 476.762053][T13250] dump_stack_lvl+0x16c/0x1f0 [ 476.762082][T13250] should_fail_ex+0x512/0x640 [ 476.762114][T13250] _copy_to_user+0x32/0xd0 [ 476.762143][T13250] simple_read_from_buffer+0xcb/0x170 [ 476.762171][T13250] proc_fail_nth_read+0x197/0x240 [ 476.762192][T13250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.762213][T13250] ? rw_verify_area+0xcf/0x6c0 [ 476.762233][T13250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 476.762252][T13250] vfs_read+0x1e4/0xcf0 [ 476.762276][T13250] ? __pfx___mutex_lock+0x10/0x10 [ 476.762304][T13250] ? __pfx_vfs_read+0x10/0x10 [ 476.762334][T13250] ? __fget_files+0x20e/0x3c0 [ 476.762367][T13250] ksys_read+0x12a/0x250 [ 476.762395][T13250] ? __pfx_ksys_read+0x10/0x10 [ 476.762416][T13250] ? v4l2_ioctl+0x1c5/0x250 [ 476.762437][T13250] ? fput+0x70/0xf0 [ 476.762457][T13250] do_syscall_64+0xcd/0xf80 [ 476.762483][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.762502][T13250] RIP: 0033:0x7fe43e98e15c [ 476.762517][T13250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 476.762538][T13250] RSP: 002b:00007fe43f832030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 476.762556][T13250] RAX: ffffffffffffffda RBX: 00007fe43ebe5fa0 RCX: 00007fe43e98e15c [ 476.762567][T13250] RDX: 000000000000000f RSI: 00007fe43f8320a0 RDI: 0000000000000004 [ 476.762578][T13250] RBP: 00007fe43f832090 R08: 0000000000000000 R09: 0000000000000000 [ 476.762588][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.762598][T13250] R13: 00007fe43ebe6038 R14: 00007fe43ebe5fa0 R15: 00007ffd5c3f1868 [ 476.762624][T13250] [ 477.206672][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 477.206687][ T30] audit: type=1400 audit(1768234876.410:9651): avc: denied { append } for pid=13251 comm="syz.2.2477" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 477.264344][ T30] audit: type=1400 audit(1768234876.452:9652): avc: denied { mount } for pid=13251 comm="syz.2.2477" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 477.326912][T13262] xt_CT: No such helper "netbios-ns" [ 477.685901][ T30] audit: type=1400 audit(1768234876.925:9653): avc: denied { create } for pid=13274 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.722556][ T5878] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 477.936300][ T5878] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.128756][ T30] audit: type=1400 audit(1768234877.261:9654): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 478.163156][ T5878] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.193932][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 478.197858][ T30] audit: type=1400 audit(1768234877.428:9655): avc: denied { sqpoll } for pid=13274 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 478.211205][ T5878] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 478.243180][T13275] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 478.285932][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.360313][ T30] audit: type=1400 audit(1768234877.617:9656): avc: denied { connect } for pid=13274 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 478.509673][ T5878] usb 1-1: config 0 descriptor?? [ 479.505141][T13296] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 479.530313][ T30] audit: type=1400 audit(1768234878.856:9657): avc: denied { create } for pid=13295 comm="syz.1.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 479.607019][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 479.625855][ T5878] asus 0003:048D:CE50.000D: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.0-1/input0 [ 479.654939][ T5878] asus 0003:048D:CE50.000D: Asus input not registered [ 479.664132][ T5878] asus 0003:048D:CE50.000D: probe with driver asus failed with error -12 [ 479.837735][T13303] FAULT_INJECTION: forcing a failure. [ 479.837735][T13303] name failslab, interval 1, probability 0, space 0, times 0 [ 479.850631][T13303] CPU: 0 UID: 0 PID: 13303 Comm: syz.1.2488 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.850660][T13303] Tainted: [L]=SOFTLOCKUP [ 479.850666][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.850677][T13303] Call Trace: [ 479.850683][T13303] [ 479.850690][T13303] dump_stack_lvl+0x16c/0x1f0 [ 479.850724][T13303] should_fail_ex+0x512/0x640 [ 479.850756][T13303] should_failslab+0xc2/0x120 [ 479.850781][T13303] kmem_cache_alloc_noprof+0x83/0x770 [ 479.850800][T13303] ? dst_alloc+0x99/0x1a0 [ 479.850822][T13303] ? dst_alloc+0x99/0x1a0 [ 479.850838][T13303] dst_alloc+0x99/0x1a0 [ 479.850857][T13303] rt_dst_alloc+0x35/0x3a0 [ 479.850885][T13303] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 479.850913][T13303] ip_route_output_key_hash+0x10f/0x2b0 [ 479.850933][T13303] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 479.850957][T13303] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 479.850989][T13303] ip_route_output_flow+0x27/0x150 [ 479.851011][T13303] udp_sendmsg+0x1af9/0x2870 [ 479.851040][T13303] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 479.851065][T13303] ? avc_has_perm_noaudit+0x18d/0x3b0 [ 479.851083][T13303] ? __pfx_udp_sendmsg+0x10/0x10 [ 479.851108][T13303] ? avc_has_perm+0x144/0x1f0 [ 479.851130][T13303] ? irqentry_exit+0x1dd/0x8c0 [ 479.851160][T13303] ? sock_has_perm+0x258/0x2f0 [ 479.851180][T13303] ? __pfx_sock_has_perm+0x10/0x10 [ 479.851208][T13303] ? __import_iovec+0x1dd/0x650 [ 479.851238][T13303] ? __pfx_udp_sendmsg+0x10/0x10 [ 479.851265][T13303] inet_sendmsg+0x105/0x140 [ 479.851284][T13303] ____sys_sendmsg+0x973/0xc30 [ 479.851311][T13303] ? copy_msghdr_from_user+0x10a/0x160 [ 479.851332][T13303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.851362][T13303] ? __pfx___schedule+0x10/0x10 [ 479.851389][T13303] ___sys_sendmsg+0x134/0x1d0 [ 479.851406][T13303] ? rcu_is_watching+0x12/0xc0 [ 479.851425][T13303] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.851442][T13303] ? irqentry_exit+0x1dd/0x8c0 [ 479.851490][T13303] ? __pfx___might_resched+0x10/0x10 [ 479.851512][T13303] __sys_sendmmsg+0x200/0x420 [ 479.851535][T13303] ? __pfx___sys_sendmmsg+0x10/0x10 [ 479.851563][T13303] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 479.851608][T13303] __x64_sys_sendmmsg+0x9c/0x100 [ 479.851629][T13303] do_syscall_64+0xcd/0xf80 [ 479.851655][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.851673][T13303] RIP: 0033:0x7f1e64d8f749 [ 479.851688][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.851709][T13303] RSP: 002b:00007f1e65b7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 479.851727][T13303] RAX: ffffffffffffffda RBX: 00007f1e64fe6090 RCX: 00007f1e64d8f749 [ 479.851739][T13303] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004 [ 479.851750][T13303] RBP: 00007f1e65b7a090 R08: 0000000000000000 R09: 0000000000000000 [ 479.851761][T13303] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001 [ 479.851771][T13303] R13: 00007f1e64fe6128 R14: 00007f1e64fe6090 R15: 00007ffc5dda0528 [ 479.851798][T13303] [ 480.361251][ T5799] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 480.519060][ T5878] usb 1-1: USB disconnect, device number 66 [ 480.532940][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.543079][ T5799] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.552016][ T5799] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 480.561206][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.570348][ T5799] usb 3-1: config 0 descriptor?? [ 480.988924][ T5878] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 481.131831][ T5799] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 481.183234][ T5878] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 481.184030][ T30] audit: type=1400 audit(1768234880.599:9658): avc: denied { ioctl } for pid=13311 comm="syz.1.2491" path="socket:[36554]" dev="sockfs" ino=36554 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 481.194158][ T5878] usb 5-1: config 0 has no interface number 0 [ 481.226041][ T5878] usb 5-1: config 0 interface 255 has no altsetting 0 [ 481.232928][ T5878] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.242396][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.252585][ T5878] usb 5-1: config 0 descriptor?? [ 481.260016][ T5878] cp210x 5-1:0.255: cp210x converter detected [ 481.308530][ T5799] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 481.316885][ T5799] usb 4-1: config 0 has no interface number 0 [ 481.325031][ T5799] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 481.334131][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.342219][ T5799] usb 4-1: Product: syz [ 481.346420][ T5799] usb 4-1: Manufacturer: syz [ 481.351010][ T5799] usb 4-1: SerialNumber: syz [ 481.356914][ T5799] usb 4-1: config 0 descriptor?? [ 481.436106][ T5940] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 481.452790][ T30] audit: type=1400 audit(1768234880.872:9659): avc: denied { map } for pid=13306 comm="syz.4.2489" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 481.476956][ T5878] cp210x 5-1:0.255: failed to get vendor val 0x370b size 1: -32 [ 481.484783][ T5878] cp210x 5-1:0.255: querying part number failed [ 481.492776][ T5878] usb 5-1: cp210x converter now attached to ttyUSB0 [ 481.502268][ T5878] usb 5-1: USB disconnect, device number 59 [ 481.510945][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.518908][ T5878] cp210x 5-1:0.255: device disconnected [ 481.560895][ T30] audit: type=1400 audit(1768234880.987:9660): avc: denied { map } for pid=13308 comm="syz.3.2490" path="socket:[36588]" dev="sockfs" ino=36588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 481.593840][ T5799] usb 4-1: USB disconnect, device number 49 [ 481.599841][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 481.606052][ T5940] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 481.614733][ T5940] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 481.624204][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.635161][ T5940] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 481.644107][ T5940] usb 1-1: config 0 has no interface number 0 [ 481.650167][ T5940] usb 1-1: config 0 has no interface number 1 [ 481.659138][ T5940] usb 1-1: config 0 interface 88 has no altsetting 0 [ 481.665925][ T5940] usb 1-1: config 0 interface 250 has no altsetting 0 [ 481.672669][ T5940] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 481.683152][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.692349][ T5940] usb 1-1: config 0 descriptor?? [ 481.892355][ T5940] usb 1-1: string descriptor 0 read error: -71 [ 481.900770][ T5940] usb 1-1: selecting invalid altsetting 0 [ 481.906592][ T5940] usb 1-1: Could not set interface, error -22 [ 481.914599][ T5940] usb 1-1: USB disconnect, device number 67 [ 482.089875][ T30] audit: type=1400 audit(1768234881.544:9661): avc: denied { accept } for pid=13317 comm="syz.4.2494" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 482.407887][ T5940] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 482.560166][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 482.567212][ T5940] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 482.575835][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.608264][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.648559][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 482.660361][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 482.672125][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.687088][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.697785][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.909616][ T5940] usb 4-1: usb_control_msg returned -32 [ 482.916394][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 483.138395][ T5940] usb 3-1: USB disconnect, device number 51 [ 483.417589][T13341] overlayfs: missing 'lowerdir' [ 483.422728][ T30] audit: type=1400 audit(1768234882.929:9662): avc: denied { mounton } for pid=13333 comm="syz.2.2498" path="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 484.065507][ T30] audit: type=1400 audit(1768234883.612:9663): avc: denied { mount } for pid=13337 comm="syz.4.2499" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 484.127859][ T30] audit: type=1400 audit(1768234883.685:9664): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 484.185646][ T30] audit: type=1400 audit(1768234883.706:9665): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 484.227812][ T30] audit: type=1400 audit(1768234883.790:9666): avc: denied { read write } for pid=13353 comm="syz.2.2502" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 484.252647][ T30] audit: type=1400 audit(1768234883.822:9667): avc: denied { open } for pid=13353 comm="syz.2.2502" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 484.291050][T13358] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2504'. [ 484.300203][ T30] audit: type=1400 audit(1768234883.843:9668): avc: denied { write } for pid=13353 comm="syz.2.2502" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 484.345562][ T30] audit: type=1400 audit(1768234883.916:9669): avc: denied { create } for pid=13357 comm="syz.1.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.469098][ T8320] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 484.854643][T13358] netlink: 'syz.1.2504': attribute type 10 has an invalid length. [ 484.862055][ T30] audit: type=1400 audit(1768234883.916:9670): avc: denied { ioctl } for pid=13357 comm="syz.1.2504" path="socket:[36650]" dev="sockfs" ino=36650 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 484.864314][T13358] bond0: (slave wlan1): Opening slave failed [ 484.990558][ T8320] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 484.999239][ T8320] usb 1-1: config 0 has no interface number 0 [ 485.005347][ T8320] usb 1-1: config 0 interface 41 has no altsetting 0 [ 485.092296][ T8320] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 485.131106][ T8320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.139171][ T8320] usb 1-1: Product: syz [ 485.141728][ T5940] usb 4-1: USB disconnect, device number 50 [ 485.161033][ T8320] usb 1-1: Manufacturer: syz [ 485.165877][ T8320] usb 1-1: SerialNumber: syz [ 485.173770][ T8320] usb 1-1: config 0 descriptor?? [ 485.393694][T13370] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2507'. [ 485.408347][T13370] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2507'. [ 486.647089][ T5940] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 486.799050][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 486.805468][ T5940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 487.541468][ T5940] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.552650][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 487.559279][ T5940] usb 4-1: New USB device found, idVendor=056a, idProduct=9bba, bcdDevice= 0.00 [ 487.568360][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.578332][ T5940] usb 4-1: config 0 descriptor?? [ 487.656996][T13379] tmpfs: Bad value for 'mpol' [ 488.022045][ T8320] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 488.026589][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 488.026601][ T30] audit: type=1400 audit(1768234887.769:9677): avc: denied { create } for pid=13366 comm="syz.3.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.104541][ T8320] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 488.145119][ T30] audit: type=1400 audit(1768234887.769:9678): avc: denied { write } for pid=13366 comm="syz.3.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.184141][ T8320] usb 1-1: USB disconnect, device number 68 [ 488.225781][ T5940] wacom 0003:056A:9BBA.000E: item fetching failed at offset 5/7 [ 488.241182][ T5940] wacom 0003:056A:9BBA.000E: parse failed [ 488.250470][ T5940] wacom 0003:056A:9BBA.000E: probe with driver wacom failed with error -22 [ 488.279142][ T30] audit: type=1400 audit(1768234888.042:9679): avc: denied { create } for pid=13383 comm="syz.1.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 488.318504][ T30] audit: type=1400 audit(1768234888.052:9680): avc: denied { ioctl } for pid=13383 comm="syz.1.2512" path="socket:[36696]" dev="sockfs" ino=36696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 488.429714][ T30] audit: type=1400 audit(1768234888.199:9681): avc: denied { unlink } for pid=13385 comm="syz.2.2514" name="#c" dev="tmpfs" ino=2680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 488.482226][ T30] audit: type=1400 audit(1768234888.220:9682): avc: denied { mount } for pid=13385 comm="syz.2.2514" name="/" dev="overlay" ino=2675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 488.517605][ T30] audit: type=1326 audit(1768234888.241:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13392 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64d8f749 code=0x7ffc0000 [ 488.573104][ T30] audit: type=1326 audit(1768234888.241:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13392 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64d8f749 code=0x7ffc0000 [ 488.600505][T13395] input: syz0 as /devices/virtual/input/input15 [ 488.608050][ T30] audit: type=1326 audit(1768234888.241:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13392 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e64d8f749 code=0x7ffc0000 [ 488.639429][ T5169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 489.875063][T13402] orangefs_devreq_open: device cannot be opened in blocking mode [ 490.131825][ T5940] usb 4-1: USB disconnect, device number 51 [ 490.851077][ T8320] IPVS: starting estimator thread 0... [ 490.971512][T13428] IPVS: using max 42 ests per chain, 100800 per kthread [ 491.348404][T13430] ceph: No mds server is up or the cluster is laggy [ 491.355571][ T8320] libceph: connect (1)[c::]:6789 error -101 [ 491.366784][ T8320] libceph: mon0 (1)[c::]:6789 connect error [ 492.431659][T13446] sctp: [Deprecated]: syz.0.2529 (pid 13446) Use of int in max_burst socket option. [ 492.431659][T13446] Use struct sctp_assoc_value instead [ 493.134840][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 493.134851][ T30] audit: type=1400 audit(1768234893.144:9769): avc: denied { create } for pid=13451 comm="syz.4.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 493.234984][ T30] audit: type=1400 audit(1768234893.186:9770): avc: denied { sys_admin } for pid=13451 comm="syz.4.2532" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 493.291398][ T30] audit: type=1400 audit(1768234893.186:9771): avc: denied { ioctl } for pid=13436 comm="syz.2.2526" path="socket:[36860]" dev="sockfs" ino=36860 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 493.409960][ T30] audit: type=1400 audit(1768234893.196:9772): avc: denied { ioctl } for pid=13436 comm="syz.2.2526" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 493.536876][ T30] audit: type=1400 audit(1768234893.375:9773): avc: denied { write } for pid=13450 comm="syz.0.2531" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 493.653820][ T30] audit: type=1400 audit(1768234893.396:9774): avc: denied { watch } for pid=13468 comm="syz.3.2533" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 493.731490][ T30] audit: type=1400 audit(1768234893.396:9775): avc: denied { ioctl } for pid=13468 comm="syz.3.2533" path="socket:[37908]" dev="sockfs" ino=37908 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 493.781363][ T30] audit: type=1400 audit(1768234893.396:9776): avc: denied { write } for pid=13468 comm="syz.3.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 493.825149][ T30] audit: type=1400 audit(1768234893.742:9777): avc: denied { read write } for pid=13480 comm="syz.3.2537" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 493.853064][ T30] audit: type=1400 audit(1768234893.742:9778): avc: denied { open } for pid=13480 comm="syz.3.2537" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 493.931325][T13490] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 493.946254][T13492] fuse: Unknown parameter 'use00000000000000000000' [ 494.120774][T13504] netlink: 'syz.4.2538': attribute type 10 has an invalid length. [ 494.129124][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2538'. [ 494.130634][T13490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.648889][T13498] bond2: (slave dummy0): making interface the new active one [ 494.689051][T13498] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 494.825139][T13504] dummy0: entered promiscuous mode [ 494.885790][T13504] bond2: (slave dummy0): Releasing active interface [ 496.048494][ T5918] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 496.201077][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 496.207828][ T5918] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.228648][ T5918] usb 1-1: New USB device found, idVendor=10d2, idProduct=cafb, bcdDevice=76.02 [ 496.255376][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 496.263429][ T5918] usb 1-1: Product: syz [ 496.273431][ T5918] usb 1-1: Manufacturer: syz [ 496.283607][ T5918] usb 1-1: SerialNumber: syz [ 496.316537][ T5918] usb 1-1: config 0 descriptor?? [ 496.487181][T13535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2546'. [ 497.070823][T13535] 9p: Could not find request transport: rd]a [ 497.257178][T13542] FAULT_INJECTION: forcing a failure. [ 497.257178][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.270338][T13542] CPU: 1 UID: 0 PID: 13542 Comm: syz.2.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.270365][T13542] Tainted: [L]=SOFTLOCKUP [ 497.270372][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.270382][T13542] Call Trace: [ 497.270388][T13542] [ 497.270395][T13542] dump_stack_lvl+0x16c/0x1f0 [ 497.270424][T13542] should_fail_ex+0x512/0x640 [ 497.270456][T13542] _copy_from_user+0x2e/0xd0 [ 497.270485][T13542] core_sys_select+0x2c8/0xc20 [ 497.270516][T13542] ? __pfx_core_sys_select+0x10/0x10 [ 497.270565][T13542] ? set_user_sigmask+0x21b/0x2b0 [ 497.270597][T13542] ? __pfx_set_user_sigmask+0x10/0x10 [ 497.270627][T13542] do_pselect.constprop.0+0x19f/0x1e0 [ 497.270654][T13542] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 497.270689][T13542] __x64_sys_pselect6+0x182/0x240 [ 497.270715][T13542] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 497.270748][T13542] do_syscall_64+0xcd/0xf80 [ 497.270776][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.270794][T13542] RIP: 0033:0x7fe43e98f749 [ 497.270810][T13542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.270828][T13542] RSP: 002b:00007fe43f811038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 497.270846][T13542] RAX: ffffffffffffffda RBX: 00007fe43ebe6090 RCX: 00007fe43e98f749 [ 497.270857][T13542] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 497.270869][T13542] RBP: 00007fe43f811090 R08: 0000000000000000 R09: 0000000000000000 [ 497.270880][T13542] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 497.270891][T13542] R13: 00007fe43ebe6128 R14: 00007fe43ebe6090 R15: 00007ffd5c3f1868 [ 497.270917][T13542] [ 497.623845][T13544] FAULT_INJECTION: forcing a failure. [ 497.623845][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 497.637756][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.3.2551 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.637784][T13544] Tainted: [L]=SOFTLOCKUP [ 497.637790][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.637802][T13544] Call Trace: [ 497.637807][T13544] [ 497.637815][T13544] dump_stack_lvl+0x16c/0x1f0 [ 497.637844][T13544] should_fail_ex+0x512/0x640 [ 497.637872][T13544] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 497.637895][T13544] should_failslab+0xc2/0x120 [ 497.637920][T13544] kmem_cache_alloc_node_noprof+0x86/0x800 [ 497.637939][T13544] ? __alloc_skb+0x156/0x410 [ 497.637962][T13544] ? __alloc_skb+0x156/0x410 [ 497.637977][T13544] __alloc_skb+0x156/0x410 [ 497.637991][T13544] ? __alloc_skb+0x35d/0x410 [ 497.638007][T13544] ? __pfx___alloc_skb+0x10/0x10 [ 497.638024][T13544] ? netlink_autobind.isra.0+0x158/0x370 [ 497.638055][T13544] netlink_alloc_large_skb+0x69/0x140 [ 497.638080][T13544] netlink_sendmsg+0x698/0xdd0 [ 497.638108][T13544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.638142][T13544] ____sys_sendmsg+0xa5d/0xc30 [ 497.638167][T13544] ? copy_msghdr_from_user+0x10a/0x160 [ 497.638187][T13544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.638234][T13544] ___sys_sendmsg+0x134/0x1d0 [ 497.638255][T13544] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.638286][T13544] ? rcu_is_watching+0x12/0xc0 [ 497.638315][T13544] ? fdget+0x176/0x210 [ 497.638346][T13544] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 497.638371][T13544] __sys_sendmsg+0x16d/0x220 [ 497.638392][T13544] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.638428][T13544] do_syscall_64+0xcd/0xf80 [ 497.638455][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.638473][T13544] RIP: 0033:0x7f035b78f749 [ 497.638488][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.638505][T13544] RSP: 002b:00007f035c5c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.638523][T13544] RAX: ffffffffffffffda RBX: 00007f035b9e5fa0 RCX: 00007f035b78f749 [ 497.638535][T13544] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 497.638546][T13544] RBP: 00007f035c5c1090 R08: 0000000000000000 R09: 0000000000000000 [ 497.638556][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.638567][T13544] R13: 00007f035b9e6038 R14: 00007f035b9e5fa0 R15: 00007fffb7e93c98 [ 497.638591][T13544] [ 498.120540][T13548] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2552'. [ 498.305250][ T5918] usb 1-1: USB disconnect, device number 69 [ 498.400141][T13558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2553'. [ 498.423582][T13560] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 498.430256][T13560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.440546][T13560] vhci_hcd vhci_hcd.0: Device attached [ 498.450047][T13561] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 498.456552][T13561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 498.468917][T13565] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 498.475418][T13565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.485457][T13561] vhci_hcd vhci_hcd.0: Device attached [ 498.501384][T13565] vhci_hcd vhci_hcd.0: Device attached [ 498.556309][T13566] vhci_hcd: connection closed [ 498.558350][T13564] vhci_hcd: connection closed [ 498.566211][T13562] vhci_hcd: connection closed [ 498.572485][ T2925] vhci_hcd vhci_hcd.3: stop threads [ 498.593151][ T2925] vhci_hcd vhci_hcd.3: release socket [ 498.605732][ T2925] vhci_hcd vhci_hcd.3: disconnect device [ 498.616492][ T2925] vhci_hcd vhci_hcd.3: stop threads [ 498.643971][T13576] FAULT_INJECTION: forcing a failure. [ 498.643971][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 498.658557][ T2925] vhci_hcd vhci_hcd.3: release socket [ 498.668366][ T5918] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 498.670692][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.3.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.670717][T13576] Tainted: [L]=SOFTLOCKUP [ 498.670722][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.670731][T13576] Call Trace: [ 498.670736][T13576] [ 498.670742][T13576] dump_stack_lvl+0x16c/0x1f0 [ 498.670767][T13576] should_fail_ex+0x512/0x640 [ 498.670791][T13576] ? kmem_cache_alloc_noprof+0x62/0x770 [ 498.670810][T13576] should_failslab+0xc2/0x120 [ 498.670832][T13576] kmem_cache_alloc_noprof+0x83/0x770 [ 498.670848][T13576] ? alloc_empty_file+0x55/0x1e0 [ 498.670867][T13576] ? alloc_empty_file+0x55/0x1e0 [ 498.670881][T13576] alloc_empty_file+0x55/0x1e0 [ 498.670896][T13576] alloc_file_pseudo+0x13a/0x230 [ 498.670913][T13576] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 498.670929][T13576] ? alloc_fd+0x471/0x7d0 [ 498.670955][T13576] sock_alloc_file+0x50/0x210 [ 498.670975][T13576] __sys_socket+0x1c0/0x260 [ 498.670998][T13576] ? __pfx___sys_socket+0x10/0x10 [ 498.671021][T13576] ? do_user_addr_fault+0x843/0x1370 [ 498.671045][T13576] __x64_sys_socket+0x72/0xb0 [ 498.671066][T13576] ? lockdep_hardirqs_on+0x7c/0x110 [ 498.671087][T13576] do_syscall_64+0xcd/0xf80 [ 498.671110][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.671126][T13576] RIP: 0033:0x7f035b791667 [ 498.671138][T13576] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.671153][T13576] RSP: 002b:00007f035c5bffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 498.671169][T13576] RAX: ffffffffffffffda RBX: 00007f035b9e5fa0 RCX: 00007f035b791667 [ 498.671180][T13576] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 498.671189][T13576] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 498.671198][T13576] R10: 0000200000001600 R11: 0000000000000286 R12: 0000000000000001 [ 498.671208][T13576] R13: 00007f035b9e6038 R14: 00007f035b9e5fa0 R15: 00007fffb7e93c98 [ 498.671230][T13576] [ 498.792223][ T2925] vhci_hcd vhci_hcd.3: disconnect device [ 498.885548][ T2925] vhci_hcd vhci_hcd.3: stop threads [ 498.891027][ T2925] vhci_hcd vhci_hcd.3: release socket [ 498.898810][T13580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 498.924051][ T5918] usb 39-1: enqueue for inactive port 0 [ 498.978481][T13586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 498.993148][ T2925] vhci_hcd vhci_hcd.3: disconnect device [ 499.023560][ T5918] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 499.282973][T13590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.289147][T13590] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 499.394992][T13590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.400901][T13590] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 499.435498][T13590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.441410][T13590] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 499.451776][T13590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.457662][T13590] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 499.466846][T13590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 499.472737][T13590] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 499.674090][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 499.674099][ T30] audit: type=1400 audit(1768234899.999:9793): avc: denied { getopt } for pid=13597 comm="syz.4.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 499.701806][T13596] input: syz0 as /devices/virtual/input/input16 [ 500.123156][T13608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2568'. [ 500.135044][T13608] bond0: entered promiscuous mode [ 500.140158][T13608] bond_slave_0: entered promiscuous mode [ 500.147061][T13608] bond_slave_1: entered promiscuous mode [ 500.153646][T13608] gretap0: entered promiscuous mode [ 500.159426][T13608] debugfs: 'hsr1' already exists in 'hsr' [ 500.165247][T13608] Cannot create hsr debugfs directory [ 500.170597][T13608] hsr1: entered promiscuous mode [ 501.172367][ T30] audit: type=1400 audit(1768234901.574:9794): avc: denied { setopt } for pid=13615 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 501.249699][ T30] audit: type=1400 audit(1768234901.605:9795): avc: denied { write } for pid=13615 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 501.290529][ T30] audit: type=1400 audit(1768234901.605:9796): avc: denied { read } for pid=13615 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 501.450184][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 501.969022][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 502.012342][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.027375][ T30] audit: type=1400 audit(1768234902.466:9797): avc: denied { create } for pid=13639 comm="syz.2.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 503.356821][ T5799] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 505.595083][T13678] FAULT_INJECTION: forcing a failure. [ 505.595083][T13678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.623974][T13678] CPU: 1 UID: 0 PID: 13678 Comm: syz.2.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.624002][T13678] Tainted: [L]=SOFTLOCKUP [ 505.624009][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.624019][T13678] Call Trace: [ 505.624025][T13678] [ 505.624032][T13678] dump_stack_lvl+0x16c/0x1f0 [ 505.624061][T13678] should_fail_ex+0x512/0x640 [ 505.624091][T13678] _copy_to_user+0x32/0xd0 [ 505.624123][T13678] put_user_ifreq+0xeb/0x150 [ 505.624148][T13678] sock_do_ioctl+0x230/0x280 [ 505.624172][T13678] ? __pfx_sock_do_ioctl+0x10/0x10 [ 505.624202][T13678] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 505.624225][T13678] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 505.624254][T13678] sock_ioctl+0x227/0x6b0 [ 505.624279][T13678] ? __pfx_sock_ioctl+0x10/0x10 [ 505.624302][T13678] ? hook_file_ioctl_common+0x144/0x410 [ 505.624342][T13678] ? selinux_file_ioctl+0x180/0x270 [ 505.624364][T13678] ? selinux_file_ioctl+0xb4/0x270 [ 505.624388][T13678] ? __pfx_sock_ioctl+0x10/0x10 [ 505.624414][T13678] __x64_sys_ioctl+0x18e/0x210 [ 505.624436][T13678] do_syscall_64+0xcd/0xf80 [ 505.624463][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.624481][T13678] RIP: 0033:0x7fe43e98f749 [ 505.624495][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.624513][T13678] RSP: 002b:00007fe43f832038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.624530][T13678] RAX: ffffffffffffffda RBX: 00007fe43ebe5fa0 RCX: 00007fe43e98f749 [ 505.624541][T13678] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 505.624550][T13678] RBP: 00007fe43f832090 R08: 0000000000000000 R09: 0000000000000000 [ 505.624561][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.624571][T13678] R13: 00007fe43ebe6038 R14: 00007fe43ebe5fa0 R15: 00007ffd5c3f1868 [ 505.624596][T13678] [ 506.309372][ T30] audit: type=1400 audit(1768234906.970:9798): avc: denied { ioctl } for pid=13684 comm="syz.0.2591" path="socket:[38297]" dev="sockfs" ino=38297 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 506.421019][ T30] audit: type=1400 audit(1768234907.001:9799): avc: denied { accept } for pid=13684 comm="syz.0.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 506.459786][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 506.680211][T13703] 9pnet_virtio: no channels available for device syz [ 507.002962][ T8320] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 507.149866][ T8320] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 507.300525][ T8320] usb 4-1: config 0 has no interface number 0 [ 507.306604][ T8320] usb 4-1: config 0 interface 41 has no altsetting 0 [ 507.355222][ T8320] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 507.364449][ T8320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.373484][ T8320] usb 4-1: Product: syz [ 507.377890][ T8320] usb 4-1: Manufacturer: syz [ 507.378151][ T30] audit: type=1400 audit(1768234908.093:9800): avc: denied { read write } for pid=13710 comm="syz.2.2599" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 507.382477][ T8320] usb 4-1: SerialNumber: syz [ 507.415740][ T8320] usb 4-1: config 0 descriptor?? [ 507.421607][T13711] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 507.447866][ T30] audit: type=1400 audit(1768234908.135:9801): avc: denied { open } for pid=13710 comm="syz.2.2599" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 507.473048][ T30] audit: type=1400 audit(1768234908.135:9802): avc: denied { relabelfrom } for pid=13710 comm="syz.2.2599" name="NETLINK" dev="sockfs" ino=37689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.497792][ T30] audit: type=1400 audit(1768234908.167:9803): avc: denied { relabelto } for pid=13710 comm="syz.2.2599" name="NETLINK" dev="sockfs" ino=37689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 508.661254][ T8320] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 508.687165][ T8320] usb 4-1: USB disconnect, device number 52 [ 509.830570][T13736] netlink: 'syz.2.2606': attribute type 11 has an invalid length. [ 509.864008][T13736] netlink: 'syz.2.2606': attribute type 4 has an invalid length. [ 509.889474][T13736] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.2606'. [ 509.972560][T13741] lo speed is unknown, defaulting to 1000 [ 510.249567][ T30] audit: type=1400 audit(1768234917.117:9804): avc: denied { setopt } for pid=13740 comm="syz.4.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 510.269405][ T5931] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 510.298968][ T5878] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 510.441623][ T5878] usb 4-1: device descriptor read/64, error -71 [ 510.448154][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 510.457786][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.478576][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.499716][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 510.513779][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 510.531828][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.586637][ T5931] usb 1-1: config 0 descriptor?? [ 510.602969][ T30] audit: type=1400 audit(1768234917.474:9805): avc: denied { getopt } for pid=13758 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 510.731430][ T5878] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 511.508727][ T5878] usb 4-1: device descriptor read/64, error -71 [ 511.515233][ T5931] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 511.526717][ T5931] microsoft 0003:045E:07DA.000F: no inputs found [ 511.535373][ T5931] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 511.635599][ T5878] usb usb4-port1: attempt power cycle [ 511.763373][ T30] audit: type=1400 audit(1768234918.691:9806): avc: denied { mount } for pid=13767 comm="syz.2.2615" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 511.766300][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 511.806817][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 511.827511][ T30] audit: type=1400 audit(1768234918.691:9807): avc: denied { mounton } for pid=13767 comm="syz.2.2615" path="/529/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 511.850170][ T30] audit: type=1400 audit(1768234918.702:9808): avc: denied { bind } for pid=13767 comm="syz.2.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 511.852648][ T8320] usb 1-1: USB disconnect, device number 71 [ 511.977392][ T30] audit: type=1400 audit(1768234918.922:9809): avc: denied { append } for pid=13771 comm="syz.1.2616" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 512.010906][ T5878] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 512.052153][ T5878] usb 4-1: device descriptor read/8, error -71 [ 512.303393][ T5878] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 512.346728][ T5878] usb 4-1: device descriptor read/8, error -71 [ 512.461300][ T5878] usb usb4-port1: unable to enumerate USB device [ 512.755169][ T30] audit: type=1400 audit(1768234919.731:9810): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 512.838151][ T30] audit: type=1400 audit(1768234919.825:9811): avc: denied { getopt } for pid=13781 comm="syz.0.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.864749][T13796] CUSE: unknown device info "" [ 512.871653][T13796] CUSE: unknown device info "@" [ 512.881840][T13796] CUSE: unknown device info "" [ 512.887399][T13796] CUSE: DEVNAME unspecified [ 512.932048][ T30] audit: type=1326 audit(1768234919.878:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.2.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43e98f749 code=0x7ffc0000 [ 512.961712][T13803] netlink: 'syz.3.2625': attribute type 10 has an invalid length. [ 512.977994][T13803] audit: audit_backlog=65 > audit_backlog_limit=64 [ 512.982335][ T30] audit: type=1326 audit(1768234919.878:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.2.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43e98f749 code=0x7ffc0000 [ 512.994250][T13803] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 513.020064][T13805] FAULT_INJECTION: forcing a failure. [ 513.020064][T13805] name failslab, interval 1, probability 0, space 0, times 0 [ 513.054125][T13805] CPU: 0 UID: 0 PID: 13805 Comm: syz.1.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.054153][T13805] Tainted: [L]=SOFTLOCKUP [ 513.054159][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.054169][T13805] Call Trace: [ 513.054175][T13805] [ 513.054182][T13805] dump_stack_lvl+0x16c/0x1f0 [ 513.054210][T13805] should_fail_ex+0x512/0x640 [ 513.054236][T13805] ? fs_reclaim_acquire+0xae/0x150 [ 513.054264][T13805] should_failslab+0xc2/0x120 [ 513.054288][T13805] kmem_cache_alloc_noprof+0x83/0x770 [ 513.054314][T13805] ? __pfx_map_id_range_down+0x10/0x10 [ 513.054333][T13805] ? security_inode_alloc+0x3b/0x2b0 [ 513.054359][T13805] ? security_inode_alloc+0x3b/0x2b0 [ 513.054379][T13805] security_inode_alloc+0x3b/0x2b0 [ 513.054402][T13805] inode_init_always_gfp+0xced/0x1040 [ 513.054432][T13805] alloc_inode+0x86/0x240 [ 513.054453][T13805] create_pipe_files+0x4c/0x9a0 [ 513.054481][T13805] io_pipe+0xb3/0xab0 [ 513.054506][T13805] ? __pfx_io_pipe+0x10/0x10 [ 513.054531][T13805] ? __io_alloc_req_refill+0x33a/0x5e0 [ 513.054563][T13805] __io_issue_sqe+0xe8/0x7c0 [ 513.054591][T13805] io_issue_sqe+0x85/0x1410 [ 513.054613][T13805] io_submit_sqes+0xb24/0x28e0 [ 513.054647][T13805] __do_sys_io_uring_enter+0xd6b/0x1630 [ 513.054671][T13805] ? __fget_files+0x20e/0x3c0 [ 513.054696][T13805] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 513.054719][T13805] ? fput+0x70/0xf0 [ 513.054735][T13805] ? ksys_write+0x1ac/0x250 [ 513.054756][T13805] ? __pfx_ksys_write+0x10/0x10 [ 513.054787][T13805] do_syscall_64+0xcd/0xf80 [ 513.054812][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.054830][T13805] RIP: 0033:0x7f1e64d8f749 [ 513.054845][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.054862][T13805] RSP: 002b:00007f1e65b9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 513.054878][T13805] RAX: ffffffffffffffda RBX: 00007f1e64fe5fa0 RCX: 00007f1e64d8f749 [ 513.054890][T13805] RDX: 000000000000c2de RSI: 0000000000003516 RDI: 0000000000000004 [ 513.054904][T13805] RBP: 00007f1e65b9b090 R08: 0000000000000000 R09: 0000000000000000 [ 513.054915][T13805] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 513.054924][T13805] R13: 00007f1e64fe6038 R14: 00007f1e64fe5fa0 R15: 00007ffc5dda0528 [ 513.054950][T13805] [ 514.005632][ T5878] kernel write not supported for file /input/event0 (pid: 5878 comm: kworker/0:6) [ 514.430141][T13828] comedi comedi3: Cannot bond this driver to itself! [ 514.952985][T13833] fuse: Unknown parameter '0x0000000000000004' [ 515.271367][T13842] Bluetooth: MGMT ver 1.23 [ 515.512832][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2638'. [ 516.873151][T13901] fuse: Unknown parameter '0xffffffffffffffff' [ 517.584566][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 517.584613][ T30] audit: type=1400 audit(1768234924.802:9891): avc: denied { bind } for pid=13905 comm="syz.1.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.274971][T13922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2652'. [ 518.423663][ T5940] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 518.423687][ T8320] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 518.592377][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 518.593818][ T30] audit: type=1400 audit(1768234925.862:9892): avc: denied { ioctl } for pid=13933 comm="syz.4.2656" path="socket:[39999]" dev="sockfs" ino=39999 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 518.631370][ T5940] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 518.635287][ T8320] usb 3-1: Using ep0 maxpacket: 8 [ 518.671230][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.681168][ T8320] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 518.747950][ T8320] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 518.748425][ T30] audit: type=1400 audit(1768234925.978:9893): avc: denied { listen } for pid=13933 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 518.770268][ T8320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.776941][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 518.898916][ T8320] usb 3-1: Product: syz [ 518.919996][ T8320] usb 3-1: Manufacturer: syz [ 518.921730][ T30] audit: type=1400 audit(1768234926.041:9894): avc: denied { write } for pid=13933 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 518.944280][ T8320] usb 3-1: SerialNumber: syz [ 518.963714][ T8320] usb 3-1: config 0 descriptor?? [ 518.970721][ T8320] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 518.985212][ T8320] usb 3-1: setting power ON [ 518.985374][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.998812][ T8320] dvb-usb: bulk message failed: -22 (2/0) [ 519.004908][ T8320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.005458][ T8320] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 519.042757][ T8320] usb 3-1: media controller created [ 519.063798][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.069729][ T8320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.080512][ T5940] usb 1-1: Product: syz [ 519.092740][ T5940] usb 1-1: Manufacturer: syz [ 519.097336][ T5940] usb 1-1: SerialNumber: syz [ 519.107588][ T8320] usb 3-1: selecting invalid altsetting 6 [ 519.124827][ T8320] usb 3-1: digital interface selection failed (-22) [ 519.134598][ T8320] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 519.155567][ T8320] usb 3-1: setting power OFF [ 519.187892][ T8320] dvb-usb: bulk message failed: -22 (2/0) [ 519.194318][ T8320] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 519.203819][ T8320] (NULL device *): no alternate interface [ 519.225148][ T5931] libceph: connect (1)[c::]:6789 error -22 [ 519.229134][ T8320] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 519.231542][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 519.239071][ T8320] usb 3-1: USB disconnect, device number 52 [ 519.260620][ T30] audit: type=1400 audit(1768234926.566:9895): avc: denied { append } for pid=13941 comm="syz.1.2659" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 519.311233][T13940] ceph: No mds server is up or the cluster is laggy [ 519.510756][T13949] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 519.569878][ T5940] usb 1-1: 0:2 : does not exist [ 520.624565][ T5940] usb 1-1: USB disconnect, device number 72 [ 521.393118][T13973] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 521.437165][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 521.467227][ T30] audit: type=1400 audit(1768234928.886:9896): avc: denied { write } for pid=13970 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.604771][ T30] audit: type=1400 audit(1768234928.960:9897): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 521.823925][ T5940] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 521.994982][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 522.001614][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.021845][ T5940] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.046757][ T5940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.055999][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.071420][ T5940] usb 4-1: Product: syz [ 522.076866][ T5940] usb 4-1: Manufacturer: syz [ 522.086681][ T5940] usb 4-1: SerialNumber: syz [ 522.102989][ T5940] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 522.119740][ T5940] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 522.220650][T13988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2667'. [ 522.232292][T13988] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 523.313691][T13981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.900744][ T8320] usb 4-1: USB disconnect, device number 57 [ 524.073617][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2677'. [ 524.552742][T14024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.645507][T14024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.709292][T14033] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 525.756548][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 525.845196][T14036] lo speed is unknown, defaulting to 1000 [ 526.567206][ T8320] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 526.739001][ T8320] usb 4-1: Using ep0 maxpacket: 32 [ 526.755500][ T8320] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 526.774533][ T8320] usb 4-1: config 0 has no interface number 0 [ 526.780831][ T8320] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 526.802881][ T8320] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 526.823985][ T8320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.840767][ T8320] usb 4-1: Product: syz [ 526.853283][ T8320] usb 4-1: Manufacturer: syz [ 526.858061][ T8320] usb 4-1: SerialNumber: syz [ 526.873728][ T8320] usb 4-1: config 0 descriptor?? [ 526.889066][T14070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 527.097187][T14070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 527.626665][ T8320] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 527.637677][ T8320] asix 4-1:0.188: probe with driver asix failed with error -71 [ 527.645414][ T30] audit: type=1400 audit(1768234935.364:9898): avc: denied { block_suspend } for pid=14035 comm="syz.1.2685" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 527.680565][ T8320] usb 4-1: USB disconnect, device number 58 [ 527.919279][ T5918] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 528.059713][T14121] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2701'. [ 528.076568][ T5918] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 528.086456][ T5918] usb 1-1: config 0 has no interface number 0 [ 528.106863][ T5918] usb 1-1: config 0 interface 41 has no altsetting 0 [ 528.117981][ T5918] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 528.152826][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.160933][ T5918] usb 1-1: Product: syz [ 528.165088][ T5918] usb 1-1: Manufacturer: syz [ 528.197087][ T5918] usb 1-1: SerialNumber: syz [ 528.215871][ T5918] usb 1-1: config 0 descriptor?? [ 529.445103][ T5918] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 529.479882][ T5918] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 529.509037][ T5918] usb 1-1: USB disconnect, device number 73 [ 529.595068][T14134] lo speed is unknown, defaulting to 1000 [ 530.063601][ T5918] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 530.192966][T14150] overlayfs: failed to resolve './file0': -2 [ 530.233733][ T5918] usb 3-1: device descriptor read/64, error -71 [ 530.467385][T14155] comedi comedi4: bad chanlist[1]=0x3baccaf9 chan=51961 range length=2 [ 530.889917][ T5918] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 531.453318][ T5918] usb 3-1: device descriptor read/64, error -71 [ 531.506623][ T30] audit: type=1400 audit(1768234945.419:9899): avc: denied { write } for pid=14162 comm="syz.3.2712" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 531.584678][ T5918] usb usb3-port1: attempt power cycle [ 531.651707][T14166] lo speed is unknown, defaulting to 1000 [ 531.679086][ T30] audit: type=1400 audit(1768234945.608:9900): avc: denied { getopt } for pid=14164 comm="syz.2.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.802533][ T30] audit: type=1400 audit(1768234945.629:9901): avc: denied { watch } for pid=14164 comm="syz.2.2713" path="/547/file1" dev="autofs" ino=40430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 531.887105][ T30] audit: type=1400 audit(1768234945.629:9902): avc: denied { watch_sb watch_reads } for pid=14164 comm="syz.2.2713" path="/547/file1" dev="autofs" ino=40430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 531.960221][ T30] audit: type=1400 audit(1768234945.629:9903): avc: denied { watch } for pid=14164 comm="syz.2.2713" path="/547/file1" dev="autofs" ino=40430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 532.339391][ T8320] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 532.577454][ T8320] usb 4-1: Using ep0 maxpacket: 8 [ 532.612609][ T8320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.628306][ T8320] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 532.654331][ T8320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.662632][ T8320] usb 4-1: Product: syz [ 532.666804][ T8320] usb 4-1: Manufacturer: syz [ 532.671388][ T8320] usb 4-1: SerialNumber: syz [ 532.700816][ T8320] usb 4-1: config 0 descriptor?? [ 532.714005][ T8320] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 532.726825][ T8320] usb 4-1: selecting invalid altsetting 1 [ 532.931887][ T8320] gspca_stk014: reg_r err -71 [ 532.939478][ T8320] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 532.948603][ T5931] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 532.948747][ T8320] usb 4-1: USB disconnect, device number 59 [ 533.103526][ T5931] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 533.112654][ T5931] usb 3-1: config 1 has no interface number 0 [ 533.118832][ T5931] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 533.132275][ T5931] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 533.142333][ T5931] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.163844][ T5931] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 533.216029][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.415597][ T5931] usb 3-1: Product: syz [ 533.461187][ T5931] usb 3-1: Manufacturer: syz [ 533.471375][ T5931] usb 3-1: SerialNumber: syz [ 533.480660][T14185] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 533.685260][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 534.371481][T14185] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.432961][T14195] lo speed is unknown, defaulting to 1000 [ 534.708526][ T5931] usb 3-1: Incompatible driver and firmware versions [ 534.775223][ T30] audit: type=1400 audit(1768234948.852:9904): avc: denied { read write } for pid=14200 comm="syz.3.2722" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 534.827015][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 534.850011][ T5931] usb 3-1: USB disconnect, device number 56 [ 534.901089][ T30] audit: type=1400 audit(1768234948.852:9905): avc: denied { open } for pid=14200 comm="syz.3.2722" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 536.461620][ T30] audit: type=1400 audit(1768234950.626:9906): avc: denied { ioctl } for pid=14207 comm="syz.1.2724" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 536.465581][T14214] binder: BINDER_SET_CONTEXT_MGR already set [ 536.498240][T14214] binder: 14207:14214 ioctl 4018620d 200000000040 returned -16 [ 536.586925][ T30] audit: type=1400 audit(1768234950.626:9907): avc: denied { set_context_mgr } for pid=14207 comm="syz.1.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 536.932921][ T30] audit: type=1400 audit(1768234951.120:9908): avc: denied { create } for pid=14217 comm="syz.3.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.141025][T14222] loop8: detected capacity change from 0 to 7 [ 537.147713][ T30] audit: type=1400 audit(1768234951.330:9909): avc: denied { write } for pid=14217 comm="syz.3.2727" path="socket:[40978]" dev="sockfs" ino=40978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 537.175842][T14223] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 537.183544][T14223] audit: out of memory in audit_log_start [ 537.331973][T14222] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 537.552560][T14222] loop8: partition table partially beyond EOD, truncated [ 537.596733][T14222] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 537.623424][T14222] loop8: p2 start 956478 is beyond EOD, truncated [ 538.956995][T14236] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 539.084341][T14241] fuse: Unknown parameter 'fd0x0000000000000004' [ 540.015957][ T30] audit: type=1400 audit(1768234960.339:9910): avc: denied { watch } for pid=14249 comm="syz.4.2736" path="/580" dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 541.822939][T14276] syzkaller1: entered promiscuous mode [ 541.859084][T14276] syzkaller1: entered allmulticast mode [ 542.034556][T14291] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 542.230654][T14291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2746'. [ 542.234265][T14293] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 542.252520][T14287] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 542.278839][T14287] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 542.362028][T14295] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 542.653922][ T5918] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 542.721617][ T30] audit: type=1400 audit(1768234963.205:9911): avc: denied { read } for pid=14298 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 542.793032][ T30] audit: type=1400 audit(1768234963.279:9912): avc: denied { bind } for pid=14298 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 542.830073][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 542.843172][ T5918] usb 3-1: config 3 has an invalid interface number: 61 but max is 0 [ 542.851828][ T5918] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 542.862899][ T5918] usb 3-1: config 3 has no interface number 0 [ 542.869391][ T5918] usb 3-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.882622][ T5918] usb 3-1: config 3 interface 61 has no altsetting 0 [ 542.899012][ T5918] usb 3-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 542.908534][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.916597][ T5918] usb 3-1: Product: syz [ 542.985227][ T5918] usb 3-1: Manufacturer: syz [ 542.997120][ T5918] usb 3-1: SerialNumber: syz [ 543.038070][T14306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2753'. [ 543.057944][ T30] audit: type=1400 audit(1768234963.552:9913): avc: denied { ioctl } for pid=14307 comm="syz.1.2752" path="socket:[40666]" dev="sockfs" ino=40666 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.883597][ T30] audit: type=1400 audit(1768234964.224:9914): avc: denied { read } for pid=14312 comm="syz.0.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 543.920658][ T30] audit: type=1400 audit(1768234964.308:9915): avc: denied { connect } for pid=14312 comm="syz.0.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 544.146870][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 544.165710][ T5918] snd-usb-audio 3-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 544.176458][ T5918] usb 3-1: USB disconnect, device number 57 [ 544.504954][T14335] sd 0:0:1:0: device reset [ 545.996649][T14351] lo speed is unknown, defaulting to 1000 [ 547.094387][T14361] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 547.559058][ T30] audit: type=1400 audit(1768234968.287:9916): avc: denied { write } for pid=14372 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.447153][T14385] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 548.746163][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 549.061013][ T7896] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 549.728656][ T7896] usb 4-1: not running at top speed; connect to a high speed hub [ 549.771970][T14396] ALSA: mixer_oss: invalid OSS volume '' [ 549.800027][ T7896] usb 4-1: config 3 has an invalid interface number: 61 but max is 0 [ 549.824430][ T7896] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 549.845146][ T7896] usb 4-1: config 3 has no interface number 0 [ 550.431186][ T30] audit: type=1400 audit(1768234976.923:9917): avc: denied { connect } for pid=14403 comm="syz.0.2776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 550.456651][ T7896] usb 4-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.469989][ T7896] usb 4-1: config 3 interface 61 has no altsetting 0 [ 550.479771][ T7896] usb 4-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 550.489284][ T7896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.497641][ T7896] usb 4-1: Product: syz [ 550.502342][ T7896] usb 4-1: Manufacturer: syz [ 550.509796][ T7896] usb 4-1: SerialNumber: syz [ 550.721883][ T7896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.322038][T14414] 8021q: VLANs not supported on lo [ 551.343440][ T7896] snd-usb-audio 4-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 551.385593][ T7896] usb 4-1: USB disconnect, device number 60 [ 551.585946][T14428] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 552.131351][ T7896] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 552.440919][ T7896] usb 4-1: Using ep0 maxpacket: 32 [ 552.457519][ T7896] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 552.466386][ T7896] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 552.479096][ T7896] usb 4-1: config 2 has no interface number 0 [ 552.489369][ T7896] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 552.498593][ T7896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.508159][ T7896] usb 4-1: Product: syz [ 552.513853][ T7896] usb 4-1: Manufacturer: syz [ 552.518448][ T7896] usb 4-1: SerialNumber: syz [ 552.606860][ T5918] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 552.671484][T14444] input: syz1 as /devices/virtual/input/input18 [ 552.730019][ T30] audit: type=1400 audit(1768234979.705:9918): avc: denied { associate } for pid=14419 comm="syz.3.2781" name="cpu.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 552.755901][ T7896] usb 4-1: USB disconnect, device number 61 [ 552.792055][ T5918] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 552.807800][ T5918] usb 3-1: config 0 has no interface number 0 [ 552.816905][ T5918] usb 3-1: config 0 interface 41 has no altsetting 0 [ 552.837419][ T5918] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 552.850497][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.859041][ T5918] usb 3-1: Product: syz [ 552.864810][ T5918] usb 3-1: Manufacturer: syz [ 552.869403][ T5918] usb 3-1: SerialNumber: syz [ 552.923912][ T5918] usb 3-1: config 0 descriptor?? [ 554.392431][ T30] audit: type=1400 audit(1768234981.458:9919): avc: denied { getopt } for pid=14459 comm="syz.3.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 554.928830][T14464] overlayfs: failed to clone upperpath [ 555.054603][T14467] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 555.783940][ T5918] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 555.850278][ T5918] usb 3-1: USB disconnect, device number 58 [ 556.207487][T14476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2798'. [ 556.708482][T14487] overlayfs: failed to clone lowerpath [ 557.102130][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.138630][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.147842][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.155651][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.163981][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.175890][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.184796][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.193749][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.201436][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.227017][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.262876][ T30] audit: type=1400 audit(1768234984.461:9920): avc: denied { mounton } for pid=14489 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 557.298656][T14489] lo speed is unknown, defaulting to 1000 [ 557.451360][T14498] SELinux: security_context_str_to_sid () failed with errno=-22 [ 557.537063][ T5940] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 557.664972][ T5918] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 557.812260][T14501] lo speed is unknown, defaulting to 1000 [ 557.818180][T14501] lo speed is unknown, defaulting to 1000 [ 557.824410][T14501] lo speed is unknown, defaulting to 1000 [ 557.834532][T14501] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 557.848391][ T5940] usb 4-1: device descriptor read/64, error -71 [ 557.849945][T14501] lo speed is unknown, defaulting to 1000 [ 557.861192][T14501] lo speed is unknown, defaulting to 1000 [ 557.867610][T14501] lo speed is unknown, defaulting to 1000 [ 557.874014][T14501] lo speed is unknown, defaulting to 1000 [ 557.880572][T14501] lo speed is unknown, defaulting to 1000 [ 557.886996][T14501] lo speed is unknown, defaulting to 1000 [ 557.963529][ T5878] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 557.979387][ T5918] usb 1-1: not running at top speed; connect to a high speed hub [ 558.001593][ T5918] usb 1-1: config 3 has an invalid interface number: 61 but max is 0 [ 558.028891][ T5918] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 558.067995][ T5918] usb 1-1: config 3 has no interface number 0 [ 558.109214][ T5918] usb 1-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.134147][ T5878] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 558.148772][ T5878] usb 3-1: config 0 has no interface number 0 [ 558.151364][ T5918] usb 1-1: config 3 interface 61 has no altsetting 0 [ 558.159895][ T5878] usb 3-1: config 0 interface 41 has no altsetting 0 [ 558.180274][ T5878] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 558.197952][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.199937][ T5918] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 558.207083][ T5940] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 558.238614][ T5878] usb 3-1: Product: syz [ 558.248387][ T5878] usb 3-1: Manufacturer: syz [ 558.262991][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.262995][ T5878] usb 3-1: SerialNumber: syz [ 558.263015][ T5918] usb 1-1: Product: syz [ 558.296158][ T5878] usb 3-1: config 0 descriptor?? [ 558.323585][ T5918] usb 1-1: Manufacturer: syz [ 558.328174][ T5918] usb 1-1: SerialNumber: syz [ 558.389178][ T5940] usb 4-1: device descriptor read/64, error -71 [ 558.415018][T14489] chnl_net:caif_netlink_parms(): no params data found [ 558.454485][ T4095] bridge_slave_1: left allmulticast mode [ 558.460375][ T4095] bridge_slave_1: left promiscuous mode [ 558.467471][ T4095] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.476534][ T4095] bridge_slave_0: left promiscuous mode [ 558.483299][ T4095] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.493368][ T5940] usb usb4-port1: attempt power cycle [ 559.619769][ T5826] Bluetooth: hci5: command tx timeout [ 559.758256][ T4095] gretap0 (unregistering): left promiscuous mode [ 559.908947][T14524] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 559.966859][ T4095] bond0 (unregistering): left promiscuous mode [ 559.973230][ T4095] bond_slave_0: left promiscuous mode [ 559.979003][ T4095] bond_slave_1: left promiscuous mode [ 559.991568][ T4095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.002220][ T4095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.012897][ T4095] bond0 (unregistering): Released all slaves [ 560.049762][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.082301][ T5918] snd-usb-audio 1-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 560.118883][ T5918] usb 1-1: USB disconnect, device number 74 [ 560.140066][ T4095] tipc: Disabling bearer [ 560.150643][ T4095] tipc: Left network mode [ 560.261145][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.290619][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.298589][T14489] bridge_slave_0: entered allmulticast mode [ 560.306508][T14489] bridge_slave_0: entered promiscuous mode [ 561.358303][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.369008][ T30] audit: type=1400 audit(1768234988.766:9921): avc: denied { bind } for pid=14539 comm="syz.4.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 561.375734][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2814'. [ 561.398572][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.405802][T14489] bridge_slave_1: entered allmulticast mode [ 561.453610][ T5878] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 561.478192][T14489] bridge_slave_1: entered promiscuous mode [ 561.479094][ T5878] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 561.495236][ T5878] usb 3-1: USB disconnect, device number 59 [ 561.503517][T14541] netlink: 'syz.4.2814': attribute type 10 has an invalid length. [ 561.584673][T14541] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 561.608248][ T5826] Bluetooth: hci5: command tx timeout [ 561.608883][T14541] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 562.392879][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.439462][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.808567][ T4095] hsr_slave_0: left promiscuous mode [ 562.827520][ T4095] hsr_slave_1: left promiscuous mode [ 562.833385][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.856315][ T4095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.227979][ T30] audit: type=1400 audit(1768234990.729:9922): avc: denied { map } for pid=14559 comm="syz.0.2820" path="/proc/1531/pagemap" dev="proc" ino=42404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 563.295875][T14562] xt_bpf: check failed: parse error [ 563.471374][T14567] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 563.517412][T14570] overlayfs: failed to clone lowerpath [ 563.590937][ T5817] Bluetooth: hci5: command tx timeout [ 565.322382][ T5918] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 565.453432][T14489] team0: Port device team_slave_0 added [ 565.464998][T14557] pim6reg: entered allmulticast mode [ 565.473145][T14489] team0: Port device team_slave_1 added [ 565.483047][ T5918] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 565.513109][ T5918] usb 4-1: config 0 has no interface number 0 [ 565.535525][ T5918] usb 4-1: config 0 interface 41 has no altsetting 0 [ 565.570217][ T5826] Bluetooth: hci5: command tx timeout [ 565.572068][ T5918] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 565.592861][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.602997][ T5918] usb 4-1: Product: syz [ 565.607162][ T5918] usb 4-1: Manufacturer: syz [ 565.617600][ T5918] usb 4-1: SerialNumber: syz [ 565.633568][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.664262][ T5918] usb 4-1: config 0 descriptor?? [ 565.672479][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.704963][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.780185][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.788840][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.826933][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.333885][ T5918] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 568.354925][ T5918] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 568.387996][ T4095] IPVS: stop unused estimator thread 0... [ 568.396481][ T5918] usb 4-1: USB disconnect, device number 65 [ 568.436062][T14489] hsr_slave_0: entered promiscuous mode [ 568.463737][T14489] hsr_slave_1: entered promiscuous mode [ 568.484036][T14489] debugfs: 'hsr0' already exists in 'hsr' [ 568.503482][T14489] Cannot create hsr debugfs directory [ 569.086183][T14489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 569.107483][T14489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 569.125898][T14489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 569.145082][T14489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 569.420044][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.275207][ T30] audit: type=1400 audit(1768234997.459:9923): avc: denied { read } for pid=14598 comm="syz.0.2831" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 570.343494][ T30] audit: type=1400 audit(1768234997.459:9924): avc: denied { open } for pid=14598 comm="syz.0.2831" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 570.546416][T14489] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.561096][ T30] audit: type=1400 audit(1768234997.459:9925): avc: denied { ioctl } for pid=14598 comm="syz.0.2831" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 570.610638][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.617790][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.661977][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.669125][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.067507][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.122709][ T5940] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 571.184864][T14489] veth0_vlan: entered promiscuous mode [ 571.230595][T14489] veth1_vlan: entered promiscuous mode [ 571.444859][T14489] veth0_macvtap: entered promiscuous mode [ 571.606152][T14489] veth1_macvtap: entered promiscuous mode [ 571.758791][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.766034][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 571.767423][ T5940] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 571.784323][ T5940] usb 1-1: config 0 has no interface number 0 [ 571.792551][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.793593][ T5940] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 571.807646][ T5984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.829259][ T5940] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 571.830338][ T5984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.843487][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.857203][ T5940] usb 1-1: Product: syz [ 571.861362][ T5940] usb 1-1: Manufacturer: syz [ 571.865974][ T5940] usb 1-1: SerialNumber: syz [ 571.872552][ T5940] usb 1-1: config 0 descriptor?? [ 571.895498][T14618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.940580][ T5984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.950423][ T5984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.990387][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.004448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.032423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.040986][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.756692][ T5878] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 572.764749][T14618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 572.799195][ T30] audit: type=1400 audit(1768235000.777:9926): avc: denied { mounton } for pid=14489 comm="syz-executor" path="/root/syzkaller.RU8gXd/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 572.825295][ T30] audit: type=1400 audit(1768235000.787:9927): avc: denied { mount } for pid=14489 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 572.853488][ T30] audit: type=1400 audit(1768235000.787:9928): avc: denied { mounton } for pid=14489 comm="syz-executor" path="/root/syzkaller.RU8gXd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 572.915330][ T30] audit: type=1400 audit(1768235000.787:9929): avc: denied { mounton } for pid=14489 comm="syz-executor" path="/root/syzkaller.RU8gXd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 572.944942][ T30] audit: type=1400 audit(1768235000.808:9930): avc: denied { mounton } for pid=14489 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 573.058352][T14638] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 573.066730][ T5940] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 573.083085][ T5940] asix 1-1:0.188: probe with driver asix failed with error -71 [ 573.097795][ T5878] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 573.118010][ T5878] usb 3-1: config 0 has no interface number 0 [ 573.123132][ T30] audit: type=1400 audit(1768235000.808:9931): avc: denied { mount } for pid=14489 comm="syz-executor" name="/" dev="gadgetfs" ino=6868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 573.129705][ T5940] usb 1-1: USB disconnect, device number 75 [ 573.179749][ T5878] usb 3-1: config 0 interface 41 has no altsetting 0 [ 573.185036][ T30] audit: type=1400 audit(1768235000.808:9932): avc: denied { mount } for pid=14489 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 573.242349][ T5878] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 573.252939][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.273573][ T5878] usb 3-1: Product: syz [ 573.281706][ T5878] usb 3-1: Manufacturer: syz [ 573.290551][ T5878] usb 3-1: SerialNumber: syz [ 573.303001][ T5878] usb 3-1: config 0 descriptor?? [ 574.551856][T14644] lo speed is unknown, defaulting to 1000 [ 574.974736][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 574.983860][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 574.991683][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.000822][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.009342][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.197800][T14657] FAT-fs (nbd1): unable to read boot sector [ 575.309833][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 575.309847][ T30] audit: type=1400 audit(1768235003.286:9935): avc: denied { mounton } for pid=14651 comm="syz.1.2841" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 575.593668][ T5878] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 575.639260][ T5878] usb 3-1: USB disconnect, device number 60 [ 575.652995][T14644] lo speed is unknown, defaulting to 1000 [ 575.655005][T14653] lo speed is unknown, defaulting to 1000 [ 576.135912][T14653] lo speed is unknown, defaulting to 1000 [ 576.164712][ T5878] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 576.397030][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.416443][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.575020][ T5878] usb 4-1: New USB device found, idVendor=846d, idProduct=c626, bcdDevice= 0.00 [ 577.259958][ T5826] Bluetooth: hci4: command tx timeout [ 577.286412][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.116994][ T5878] usb 4-1: config 0 descriptor?? [ 578.389938][T14686] syzkaller0: entered promiscuous mode [ 578.399695][T14686] syzkaller0: entered allmulticast mode [ 578.515619][T14653] chnl_net:caif_netlink_parms(): no params data found [ 578.602326][ T5878] hid (null): nested delimiters [ 578.622932][ T5878] hid-generic 0003:846D:C626.0010: nested delimiters [ 578.650254][ T5878] hid-generic 0003:846D:C626.0010: item 0 4 2 10 parsing failed [ 578.672752][ T5878] hid-generic 0003:846D:C626.0010: probe with driver hid-generic failed with error -22 [ 579.449550][ T5817] Bluetooth: hci4: command tx timeout [ 579.461612][ T30] audit: type=1400 audit(1768235013.271:9936): avc: denied { bind } for pid=14693 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 579.609720][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.634291][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.721007][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.852915][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.913941][ T5878] usb 4-1: USB disconnect, device number 66 [ 580.001524][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.028487][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.029844][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2847'. [ 580.047636][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.064763][T14653] bridge_slave_0: entered allmulticast mode [ 580.085465][T14653] bridge_slave_0: entered promiscuous mode [ 580.099691][T14709] bond0: entered promiscuous mode [ 580.106833][T14709] gretap0: entered promiscuous mode [ 580.124420][T14709] debugfs: 'hsr0' already exists in 'hsr' [ 580.132904][T14709] Cannot create hsr debugfs directory [ 580.149936][T14709] hsr0: entered promiscuous mode [ 580.155507][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.171387][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.188548][T14653] bridge_slave_1: entered allmulticast mode [ 580.199999][T14653] bridge_slave_1: entered promiscuous mode [ 580.234213][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.472567][T14653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.498543][T14653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.223904][ T30] audit: type=1326 audit(1768235015.613:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.3.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b78f749 code=0x7ffc0000 [ 581.358770][ T30] audit: type=1326 audit(1768235015.613:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.3.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b78f749 code=0x7ffc0000 [ 581.385962][T14653] team0: Port device team_slave_0 added [ 581.401880][ T30] audit: type=1326 audit(1768235015.613:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.3.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f035b78f749 code=0x7ffc0000 [ 581.436175][ T5826] Bluetooth: hci4: command tx timeout [ 581.782207][T14653] team0: Port device team_slave_1 added [ 581.814445][ T30] audit: type=1400 audit(1768235015.676:9940): avc: denied { remount } for pid=14720 comm="syz.3.2851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 581.840344][ T30] audit: type=1400 audit(1768235015.907:9941): avc: denied { create } for pid=14728 comm="syz.0.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 581.861413][ T30] audit: type=1400 audit(1768235015.928:9942): avc: denied { write } for pid=14728 comm="syz.0.2853" path="socket:[41945]" dev="sockfs" ino=41945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 581.940179][ T30] audit: type=1326 audit(1768235016.232:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.3.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b78f749 code=0x7ffc0000 [ 581.963937][ T30] audit: type=1326 audit(1768235016.232:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14720 comm="syz.3.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b78f749 code=0x7ffc0000 [ 582.032522][T14653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.048922][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.076737][T14653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.185143][ T30] audit: type=1400 audit(1768235016.589:9945): avc: denied { connect } for pid=14743 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 582.189030][T14653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.214630][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.311119][T14653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.670303][T14750] netlink: 'syz.0.2857': attribute type 10 has an invalid length. [ 583.063935][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.071475][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.082966][T14750] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.090156][T14750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.098551][T14750] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.105615][T14750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.114914][T14750] bridge0: entered promiscuous mode [ 583.120592][T14750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 583.301841][T14653] hsr_slave_0: entered promiscuous mode [ 583.337615][T14653] hsr_slave_1: entered promiscuous mode [ 583.354882][T14653] debugfs: 'hsr0' already exists in 'hsr' [ 583.363870][T14653] Cannot create hsr debugfs directory [ 583.373131][ T12] bridge_slave_1: left allmulticast mode [ 583.378767][ T12] bridge_slave_1: left promiscuous mode [ 583.385333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.394064][ T12] bridge_slave_0: left promiscuous mode [ 583.400037][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.444687][ T5826] Bluetooth: hci4: command tx timeout [ 583.603367][T14758] fuse: Bad value for 'fd' [ 584.577713][ T30] audit: type=1400 audit(1768235018.101:9946): avc: denied { create } for pid=14754 comm="syz.2.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 586.437157][ T12] gretap0 (unregistering): left promiscuous mode [ 586.762295][ T5920] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 586.906260][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 587.027122][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.048256][ T5920] usb 3-1: config 0 has no interface number 0 [ 587.068417][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 587.537972][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 587.549983][ T5920] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 587.559608][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.581086][ T5920] usb 3-1: config 0 descriptor?? [ 587.587395][T14776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 587.611383][ T5920] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 587.651198][ T12] bond0 (unregistering): left promiscuous mode [ 587.661639][ T12] bond_slave_0: left promiscuous mode [ 587.667940][ T12] bond_slave_1: left promiscuous mode [ 587.675254][ T12] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 587.802261][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.821438][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.839360][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 588.174722][ T12] bond0 (unregistering): Released all slaves [ 588.254718][ T12] bond1 (unregistering): Released all slaves [ 588.563755][ T12] bond2 (unregistering): Released all slaves [ 588.603459][ T5940] usb 3-1: USB disconnect, device number 61 [ 589.600626][ T5940] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 590.557529][ T5940] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 590.575710][ T5940] usb 1-1: config 0 has no interface number 0 [ 590.582127][T14806] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=14806 comm=syz.1.2872 [ 590.594782][ T5940] usb 1-1: config 0 interface 41 has no altsetting 0 [ 590.600080][ T5940] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 590.625546][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 590.625559][ T30] audit: type=1400 audit(1768235025.493:9948): avc: denied { ioctl } for pid=14805 comm="syz.1.2872" path="socket:[43572]" dev="sockfs" ino=43572 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 590.629250][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.665021][ T5940] usb 1-1: Product: syz [ 590.669190][ T5940] usb 1-1: Manufacturer: syz [ 590.674530][ T30] audit: type=1400 audit(1768235025.545:9949): avc: denied { write } for pid=14805 comm="syz.1.2872" lport=34983 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 590.676679][ T5940] usb 1-1: SerialNumber: syz [ 590.704768][ T5940] usb 1-1: config 0 descriptor?? [ 592.522271][ T30] audit: type=1400 audit(1768235027.487:9950): avc: denied { listen } for pid=14813 comm="syz.3.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 593.102867][T14828] netlink: 'syz.2.2874': attribute type 10 has an invalid length. [ 593.201092][ T5940] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 593.222027][ T5940] usb 1-1: USB disconnect, device number 76 [ 593.831032][ T4147] smc: removing ib device syz0 [ 594.900067][T14653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 595.023774][T14653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 595.068073][ T30] audit: type=1400 audit(1768235030.165:9951): avc: denied { read write } for pid=14849 comm="syz.2.2884" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 595.110571][ T30] audit: type=1400 audit(1768235030.165:9952): avc: denied { open } for pid=14849 comm="syz.2.2884" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 595.138897][T14854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=85 sclass=netlink_tcpdiag_socket pid=14854 comm=syz.2.2884 [ 595.440934][ T30] audit: type=1400 audit(1768235030.165:9953): avc: denied { write } for pid=14849 comm="syz.2.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 595.441812][T14653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 595.473371][T14850] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2884'. [ 595.492622][T14850] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 595.728346][T14858] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2885'. [ 595.842134][T14653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 595.910991][T14862] IPv6: Can't replace route, no match found [ 596.236334][ T30] audit: type=1400 audit(1768235031.383:9954): avc: denied { create } for pid=14871 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 596.240948][T14653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.440493][T14653] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.464390][T13897] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.471458][T13897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.501074][T13897] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.508169][T13897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.569171][T14653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 596.612670][T14653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 597.748267][T14881] orangefs_devreq_open: device cannot be opened in blocking mode [ 597.864300][ T12] IPVS: stop unused estimator thread 0... [ 597.969658][T14899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2894'. [ 598.000700][T14899] fuse: Unknown parameter 'group@iąZ–àÜW:{+ô6“Ły(6' [ 598.049605][T14653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.271181][ T5940] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 598.440703][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.455240][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.471542][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.486093][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.524532][T14653] veth0_vlan: entered promiscuous mode [ 598.538419][T14653] veth1_vlan: entered promiscuous mode [ 598.569939][T14653] veth0_macvtap: entered promiscuous mode [ 598.579428][T14653] veth1_macvtap: entered promiscuous mode [ 598.604684][T14653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.628404][T14653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.649708][T14067] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.660564][T14067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.670281][T14067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.682042][T14067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.705250][ T5940] usb 4-1: usb_control_msg returned -32 [ 598.711435][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 598.816587][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.834393][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.874113][T14913] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.891913][T13897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.905590][T13897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.976232][ T30] audit: type=1400 audit(1768235034.259:9955): avc: denied { create } for pid=14917 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 599.117477][ T30] audit: type=1400 audit(1768235034.417:9956): avc: denied { write } for pid=14917 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 599.160418][ T30] audit: type=1400 audit(1768235034.438:9957): avc: denied { read } for pid=14917 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 599.287778][T14931] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 599.296774][ T5920] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 599.305663][ T8255] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 599.429603][ T5920] usb 3-1: device descriptor read/64, error -71 [ 599.450342][ T8255] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 599.458764][ T8255] usb 5-1: config 0 has no interface number 0 [ 599.465023][ T8255] usb 5-1: config 0 interface 41 has no altsetting 0 [ 599.474549][ T8255] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 599.484729][ T8255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.493264][ T8255] usb 5-1: Product: syz [ 599.497556][ T8255] usb 5-1: Manufacturer: syz [ 599.502266][ T8255] usb 5-1: SerialNumber: syz [ 599.518447][ T8255] usb 5-1: config 0 descriptor?? [ 599.658117][ T5920] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 600.786428][ T8255] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 600.802412][ T30] audit: type=1400 audit(1768235036.160:9958): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.816705][ T5931] usb 4-1: USB disconnect, device number 67 [ 600.864904][ T5920] usb 3-1: device descriptor read/64, error -71 [ 600.871979][ T8255] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 600.882062][ T30] audit: type=1400 audit(1768235036.181:9959): avc: denied { ioctl } for pid=14919 comm="syz.2.2898" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 600.898872][ T8255] usb 5-1: USB disconnect, device number 60 [ 600.909259][ T30] audit: type=1400 audit(1768235036.212:9960): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.940272][ T30] audit: type=1400 audit(1768235036.212:9961): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.941406][T14941] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2903'. [ 600.969687][ T30] audit: type=1400 audit(1768235036.275:9962): avc: denied { map_create } for pid=14939 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.991932][ T5920] usb usb3-port1: attempt power cycle [ 601.761648][ T30] audit: type=1400 audit(1768235036.275:9963): avc: denied { prog_load } for pid=14939 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 601.811137][ T30] audit: type=1400 audit(1768235036.275:9964): avc: denied { bpf } for pid=14939 comm="syz.0.2902" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 601.846468][ T30] audit: type=1400 audit(1768235036.275:9965): avc: denied { perfmon } for pid=14939 comm="syz.0.2902" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 601.870660][ T30] audit: type=1400 audit(1768235036.275:9966): avc: denied { read write } for pid=14939 comm="syz.0.2902" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 601.877490][T14938] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 601.894270][ T30] audit: type=1400 audit(1768235036.275:9967): avc: denied { open } for pid=14939 comm="syz.0.2902" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.039226][T14938] usb 1-1: Using ep0 maxpacket: 8 [ 602.091871][T14938] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 602.116588][T14938] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 602.126273][T14938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.188926][T14938] usb 1-1: Product: syz [ 602.211780][T14938] usb 1-1: Manufacturer: syz [ 602.239201][T14938] usb 1-1: SerialNumber: syz [ 602.257361][T14938] usb 1-1: config 0 descriptor?? [ 602.279089][T14938] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 602.314917][T14938] usb 1-1: setting power ON [ 602.322761][T14938] dvb-usb: bulk message failed: -22 (2/0) [ 602.345275][T14938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.389966][T14938] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 602.399971][T14938] usb 1-1: media controller created [ 602.415643][T14938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.615701][T14951] netlink: 568 bytes leftover after parsing attributes in process `syz.2.2908'. [ 603.090238][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 603.107107][T14938] usb 1-1: selecting invalid altsetting 6 [ 603.118818][T14938] usb 1-1: digital interface selection failed (-22) [ 603.141691][T14938] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 603.161899][T14938] usb 1-1: setting power OFF [ 603.167312][T14938] dvb-usb: bulk message failed: -22 (2/0) [ 603.182855][T14938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 603.206102][T14938] (NULL device *): no alternate interface [ 603.296695][T14938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 603.365421][T14938] usb 1-1: USB disconnect, device number 77 [ 604.176048][T14976] netlink: 'syz.0.2911': attribute type 10 has an invalid length. [ 604.183965][T14976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2911'. [ 604.209507][T14976] batman_adv: batadv0: Adding interface: virt_wifi0 [ 604.216162][T14976] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.247021][T14976] batman_adv: batadv0: Interface activated: virt_wifi0 [ 604.254023][T14976] batadv0: mtu less than device minimum [ 604.260668][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.272161][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.283467][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.294776][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.306095][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.317395][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.328693][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.339998][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.351303][T14976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 604.617769][T14983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 604.626833][T14983] overlayfs: missing 'lowerdir' [ 604.668520][T14938] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 604.820739][T14938] usb 3-1: Using ep0 maxpacket: 8 [ 604.832798][T14938] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 604.845998][T14938] usb 3-1: config 11 has no interface number 0 [ 604.854079][T14938] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 604.865147][ T8255] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 604.955194][T14938] usb 3-1: config 11 interface 95 has no altsetting 0 [ 604.964331][T14938] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 604.973984][T14938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.982063][T14938] usb 3-1: Product: syz [ 604.986825][T14938] usb 3-1: Manufacturer: syz [ 604.991444][T14938] usb 3-1: SerialNumber: syz [ 605.449592][ T5940] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 605.497159][T14938] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 605.509933][T14938] usb 3-1: USB disconnect, device number 65 [ 605.544596][ T8255] usb 4-1: device descriptor read/64, error -71 [ 605.641061][ T5940] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 605.650940][ T5940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.659264][ T5940] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 605.668498][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.676486][ T5940] usb 1-1: Product: syz [ 605.680738][ T5940] usb 1-1: Manufacturer: syz [ 605.685305][ T5940] usb 1-1: SerialNumber: syz [ 605.691228][ T5940] usb 1-1: config 0 descriptor?? [ 605.782543][ T8255] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 605.906174][ T8255] usb 4-1: device descriptor read/64, error -71 [ 606.011102][ T8255] usb usb4-port1: attempt power cycle [ 606.039484][T14938] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 606.183598][T14938] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 606.191738][T14938] usb 3-1: config 0 has no interface number 0 [ 606.198226][T14938] usb 3-1: config 0 interface 41 has no altsetting 0 [ 606.206645][T14938] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 606.215731][T14938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.223726][T14938] usb 3-1: Product: syz [ 606.227877][T14938] usb 3-1: Manufacturer: syz [ 606.232478][T14938] usb 3-1: SerialNumber: syz [ 606.239117][T14938] usb 3-1: config 0 descriptor?? [ 606.334738][ T8255] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 606.354120][ T8255] usb 4-1: device descriptor read/8, error -71 [ 606.916374][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 606.923375][ T30] audit: type=1400 audit(1768235042.596:10092): avc: denied { name_bind } for pid=14990 comm="syz.2.2916" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 607.595638][ T30] audit: type=1400 audit(1768235042.596:10093): avc: denied { node_bind } for pid=14990 comm="syz.2.2916" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 607.639596][ T8255] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 607.682415][ T8255] usb 4-1: device descriptor read/8, error -71 [ 607.760470][ T30] audit: type=1400 audit(1768235043.488:10094): avc: denied { create } for pid=14995 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 607.772368][ T5940] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 607.879348][ T8255] usb usb4-port1: unable to enumerate USB device [ 607.886884][ T30] audit: type=1400 audit(1768235043.509:10095): avc: denied { connect } for pid=14995 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 607.919903][ T5940] imon 1-1:0.0: unable to initialize intf0, err -19 [ 607.937004][ T5940] imon:imon_probe: failed to initialize context! [ 607.943776][ T5940] imon 1-1:0.0: unable to register, err -19 [ 607.952538][ T5940] usb 1-1: USB disconnect, device number 78 [ 608.390836][ T30] audit: type=1400 audit(1768235043.751:10096): avc: denied { read } for pid=14995 comm="syz.3.2917" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 608.431775][ T30] audit: type=1400 audit(1768235043.751:10097): avc: denied { open } for pid=14995 comm="syz.3.2917" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 608.457506][ T30] audit: type=1400 audit(1768235043.761:10098): avc: denied { ioctl } for pid=14995 comm="syz.3.2917" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 608.484230][ T30] audit: type=1400 audit(1768235043.761:10099): avc: denied { map } for pid=14995 comm="syz.3.2917" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 608.509489][ T30] audit: type=1400 audit(1768235043.761:10100): avc: denied { execute } for pid=14995 comm="syz.3.2917" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 608.637540][ T30] audit: type=1400 audit(1768235043.950:10101): avc: denied { write } for pid=14995 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 609.338051][T15011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2921'. [ 609.389137][T15011] bond0: (slave rose0): Enslaving as an active interface with an up link [ 708.685333][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 708.692291][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5813/1:b..l P5811/1:b..l [ 708.701767][ C1] rcu: (detected by 1, t=10502 jiffies, g=66093, q=421 ncpus=2) [ 708.709471][ C1] task:syz-executor state:R running task stack:23992 pid:5811 tgid:5811 ppid:5803 task_flags:0x400140 flags:0x00080000 [ 708.723396][ C1] Call Trace: [ 708.726663][ C1] [ 708.729586][ C1] ? __schedule+0x10b9/0x6150 [ 708.734257][ C1] __schedule+0x1139/0x6150 [ 708.738768][ C1] ? __pfx___schedule+0x10/0x10 [ 708.743620][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 708.748982][ C1] preempt_schedule_common+0x44/0xc0 [ 708.754263][ C1] preempt_schedule_thunk+0x16/0x30 [ 708.759455][ C1] _raw_spin_unlock+0x3e/0x50 [ 708.764121][ C1] copy_page_range+0x22d0/0x6780 [ 708.769090][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 708.774382][ C1] ? __pfx___might_resched+0x10/0x10 [ 708.779656][ C1] ? __pfx_mas_store+0x10/0x10 [ 708.784419][ C1] ? dup_mmap+0xba4/0x20e0 [ 708.788831][ C1] ? down_write+0x14d/0x200 [ 708.793331][ C1] ? up_write+0x282/0x4e0 [ 708.797655][ C1] dup_mmap+0xbea/0x20e0 [ 708.801906][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 708.806595][ C1] copy_process+0x3b9f/0x7430 [ 708.811260][ C1] ? do_wp_page+0x1c04/0x5010 [ 708.815937][ C1] ? __pfx_copy_process+0x10/0x10 [ 708.820958][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 708.825992][ C1] kernel_clone+0xfc/0x910 [ 708.830397][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 708.835423][ C1] __do_sys_clone+0xce/0x120 [ 708.840000][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 708.845185][ C1] ? count_memcg_events+0x122/0x290 [ 708.850389][ C1] ? do_user_addr_fault+0x843/0x1370 [ 708.855671][ C1] do_syscall_64+0xcd/0xf80 [ 708.860171][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.866053][ C1] RIP: 0033:0x7fea8b185e93 [ 708.870459][ C1] RSP: 002b:00007fff1d11c718 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 708.878861][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fea8b185e93 [ 708.886819][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 708.894778][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 708.902736][ C1] R10: 00005555877797d0 R11: 0000000000000246 R12: 0000000000000000 [ 708.910696][ C1] R13: 00000000000927c0 R14: 000000000009ae3d R15: 00007fff1d11c8b0 [ 708.918669][ C1] [ 708.921674][ C1] task:syz-executor state:R running task stack:23656 pid:5813 tgid:5813 ppid:5806 task_flags:0x400140 flags:0x00080000 [ 708.935149][ C1] Call Trace: [ 708.938416][ C1] [ 708.941336][ C1] ? __schedule+0x10b9/0x6150 [ 708.946006][ C1] __schedule+0x1139/0x6150 [ 708.950516][ C1] ? __pfx___schedule+0x10/0x10 [ 708.955363][ C1] ? mark_held_locks+0x49/0x80 [ 708.960122][ C1] preempt_schedule_irq+0x51/0x90 [ 708.965139][ C1] irqentry_exit+0x1d8/0x8c0 [ 708.969727][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.975699][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 708.980888][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 e2 c1 ee 0e 0f 82 74 02 00 00 8b 35 7a f2 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 b3 18 12 0f 85 ad 02 00 00 48 83 c4 [ 709.000486][ C1] RSP: 0018:ffffc900040af470 EFLAGS: 00000206 [ 709.006540][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000028f51708 [ 709.014497][ C1] RDX: 0000000000000000 RSI: ffffffff8daa8a1d RDI: ffffffff8bf2b400 [ 709.022455][ C1] RBP: 0000000000000002 R08: 000000009ecfde30 R09: 0000000009ecfde3 [ 709.030414][ C1] R10: 0000000000000002 R11: ffff888077ebd4b0 R12: 0000000000000000 [ 709.038374][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.046346][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 709.051539][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 709.057687][ C1] unwind_next_frame+0xd1/0x20b0 [ 709.062626][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 709.067733][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 709.073360][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 709.079504][ C1] arch_stack_walk+0x94/0x100 [ 709.084177][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 709.089804][ C1] stack_trace_save+0x8e/0xc0 [ 709.094473][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 709.099833][ C1] ? copy_page_range+0x22fb/0x6780 [ 709.104944][ C1] ? copy_page_range+0x5dc/0x6780 [ 709.109964][ C1] kasan_save_stack+0x33/0x60 [ 709.114634][ C1] ? kasan_save_stack+0x33/0x60 [ 709.119475][ C1] ? kasan_save_track+0x14/0x30 [ 709.124317][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 709.129334][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 709.134992][ C1] kasan_save_track+0x14/0x30 [ 709.139662][ C1] __kasan_slab_alloc+0x89/0x90 [ 709.144510][ C1] kmem_cache_alloc_noprof+0x25e/0x770 [ 709.149959][ C1] ? vm_area_dup+0x27/0x8d0 [ 709.154465][ C1] ? vm_area_dup+0x27/0x8d0 [ 709.158962][ C1] vm_area_dup+0x27/0x8d0 [ 709.163292][ C1] dup_mmap+0x6a4/0x20e0 [ 709.167538][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 709.172227][ C1] copy_process+0x3b9f/0x7430 [ 709.176891][ C1] ? do_wp_page+0x1c04/0x5010 [ 709.181577][ C1] ? __pfx_copy_process+0x10/0x10 [ 709.186598][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 709.191626][ C1] kernel_clone+0xfc/0x910 [ 709.196034][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 709.201059][ C1] __do_sys_clone+0xce/0x120 [ 709.205640][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 709.210827][ C1] ? count_memcg_events+0x122/0x290 [ 709.216030][ C1] ? do_user_addr_fault+0x843/0x1370 [ 709.221319][ C1] do_syscall_64+0xcd/0xf80 [ 709.225821][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.231700][ C1] RIP: 0033:0x7f035b785e93 [ 709.236102][ C1] RSP: 002b:00007fffb7e93f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 709.244502][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f035b785e93 [ 709.252460][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 709.260421][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 709.268380][ C1] R10: 00005555605dc7d0 R11: 0000000000000246 R12: 0000000000000000 [ 709.276339][ C1] R13: 00000000000927c0 R14: 000000000009ae91 R15: 00007fffb7e940b0 [ 709.284312][ C1] [ 709.287320][ C1] rcu: rcu_preempt kthread starved for 10562 jiffies! g66093 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 709.298502][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 709.308452][ C1] rcu: RCU grace-period kthread stack dump: [ 709.314322][ C1] task:rcu_preempt state:R running task stack:28024 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 709.327804][ C1] Call Trace: [ 709.331071][ C1] [ 709.333997][ C1] ? __schedule+0x10b9/0x6150 [ 709.338664][ C1] __schedule+0x1139/0x6150 [ 709.343160][ C1] ? __lock_acquire+0x436/0x2890 [ 709.348097][ C1] ? __mod_timer+0x8f2/0xd30 [ 709.352689][ C1] ? __pfx___schedule+0x10/0x10 [ 709.357531][ C1] ? find_held_lock+0x2b/0x80 [ 709.362205][ C1] ? schedule+0x2d7/0x3a0 [ 709.366527][ C1] schedule+0xe7/0x3a0 [ 709.370591][ C1] schedule_timeout+0x123/0x290 [ 709.375432][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 709.380798][ C1] ? __pfx_process_timeout+0x10/0x10 [ 709.386076][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 709.391881][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 709.397336][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 709.402099][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 709.407377][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.412567][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 709.417494][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 709.422339][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 709.428140][ C1] rcu_gp_kthread+0x26d/0x380 [ 709.432810][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 709.438000][ C1] ? rcu_is_watching+0x12/0xc0 [ 709.442753][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.447945][ C1] ? __kthread_parkme+0x19e/0x250 [ 709.452961][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 709.458153][ C1] kthread+0x3c5/0x780 [ 709.462215][ C1] ? __pfx_kthread+0x10/0x10 [ 709.466796][ C1] ? rcu_is_watching+0x12/0xc0 [ 709.471545][ C1] ? __pfx_kthread+0x10/0x10 [ 709.476126][ C1] ret_from_fork+0x983/0xb10 [ 709.480708][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 709.485811][ C1] ? __switch_to+0x7af/0x10d0 [ 709.490482][ C1] ? __pfx_kthread+0x10/0x10 [ 709.495067][ C1] ret_from_fork_asm+0x1a/0x30 [ 709.499844][ C1] [ 709.502852][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 709.509160][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.519649][ C1] Tainted: [L]=SOFTLOCKUP [ 709.523956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.533995][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 709.539621][ C1] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 709.559216][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 709.565273][ C1] RAX: 0000000002fcfacf RBX: 0000000000000001 RCX: ffffffff8b7846d9 [ 709.573231][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b400 [ 709.581190][ C1] RBP: ffffed1003bd9498 R08: 0000000000000001 R09: ffffed10170a673d [ 709.589146][ C1] R10: ffff8880b85339eb R11: ffff88801decaff0 R12: 0000000000000001 [ 709.597104][ C1] R13: ffff88801deca4c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 709.605060][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 709.613990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.620561][ C1] CR2: 00007f10f11733e0 CR3: 0000000029dfe000 CR4: 00000000003526f0 [ 709.628524][ C1] Call Trace: [ 709.631788][ C1] [ 709.634708][ C1] default_idle+0x13/0x20 [ 709.639034][ C1] default_idle_call+0x6c/0xb0 [ 709.643797][ C1] do_idle+0x38d/0x510 [ 709.647865][ C1] ? __pfx_do_idle+0x10/0x10 [ 709.652456][ C1] cpu_startup_entry+0x4f/0x60 [ 709.657219][ C1] start_secondary+0x21d/0x2d0 [ 709.661972][ C1] ? __pfx_start_secondary+0x10/0x10 [ 709.667252][ C1] common_startup_64+0x13e/0x148 [ 709.672192][ C1]