last executing test programs: 27.977906409s ago: executing program 2 (id=353): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000100)=[{{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) 25.243435373s ago: executing program 2 (id=357): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) dup2(r1, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x700, 0x5, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x6}]) 24.820451794s ago: executing program 2 (id=360): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x3, 0x7ffc0001}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000000)='./file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0)={0x1, 0x70, 0x100000}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x410}, 0x1, 0x0, 0x0, 0x20000000}, 0x8890) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x40000002, 0x3da}, &(0x7f0000000600), &(0x7f00000005c0), &(0x7f0000000180)) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 21.188672951s ago: executing program 2 (id=367): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x1, @raw_data="d0ddca7e6711e9a131d3a985acda92aacbd0f60a5fbf9f14619c11ca84d3870fb2bddd813d53869aa726eed47705d65882913d9754c57dea5be7770844bb6422f9c307a36d46e627f02fa0765b7c8c2430bb3fabcd7044fb213a0a3d3edc510ac079302729c31173cda6e00eca1b237e7a52a5c047611694d297099cc185762419f248d07db2273fa55149af12a98f244aed9a0f1b04afa7e0dc297fba16b5d62294d051c2a25a353f5bdef87fe43b76e0f71f1e809345716a2d9851e0c39d1e67414355dd261a62"}) 20.849681862s ago: executing program 2 (id=370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = fsopen(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000180)={0x1, 0x100008b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) socket(0x10, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x57c, &(0x7f0000000500)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd=r3, 0x1, 0x0, 0x4, 0x3, 0x1}) r7 = eventfd2(0x1, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000080)=r7, 0x1) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x200009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x43c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000003c0)={0xac1, 0x40, 0x1fc, 0x33, 0x1}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./tracing\x00', r8, 0x4000, r2}, 0x18) pread64$ublk_ch(r8, &(0x7f0000000a00)=@buf_max_buf, 0x1000, 0xffffffffffff777c) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x800, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c2000001000d040000c03c01000099dfc9ef6da9f4f6574ec3fd6f9c6f425e1daa6a706d844e9253809d6c49fd553e7e99e953edf4e750888eda100b97c15f4591fc33dc039de481f41d2af0798b1280bb1052f8e9099b14fbcaa53cf7e93a24aca02b6953f78720b419d1230ee6fea6aa2059f66e916db73bd2976f7c600c7a6b9874ea21"], 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='0', 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) 19.997237918s ago: executing program 2 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1001000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x40001, 0x2000004, 0x8, 0x1, 0x0, 0x0, {0x0, 0xfffffffc}, 0x0, 0x1000}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000360000002b020000000000000502000505020021010a00000000000000000000000000009f41cbf4904fe8659a41752daa0f209da7e63fdc73c2955f83885df9067ab4e01e01a919581c4fbc7fb0722b6295ac9389"], 0x30}}], 0x2, 0xc8040) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000001b40)=""/126, 0x7e}], 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000a00)=0x4) 19.729040114s ago: executing program 32 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1001000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x40001, 0x2000004, 0x8, 0x1, 0x0, 0x0, {0x0, 0xfffffffc}, 0x0, 0x1000}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000029000000360000002b020000000000000502000505020021010a00000000000000000000000000009f41cbf4904fe8659a41752daa0f209da7e63fdc73c2955f83885df9067ab4e01e01a919581c4fbc7fb0722b6295ac9389"], 0x30}}], 0x2, 0xc8040) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000001b40)=""/126, 0x7e}], 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000a00)=0x4) 14.069591585s ago: executing program 3 (id=390): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = fcntl$dupfd(r0, 0x0, r4) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "7d6fe95df526c826d5e4599d4c551df46de6e1278d24239ac1de315e16c0469a944fa53bc61095f32cc59ceade72bdfb03666c83e5e0c1ab0d8fe2971e145190274c103e3e85997223819a04dc157f5bfa99377060cdbe197c8752d4e8dcee9756e8056556c812441addad579075753beebf3f2d82d8c3fa56e5932445fe7f832e58c632e510b0bc6f20e5c9453daf54ae543c709bb8b415463b35e051fc43b22d0d10effc7d258ab7ac38f9f6c6b0805665511799888a389d85b95d8b6ab8c600d8131866b26e6f881b782188043390634d94185e12cddf708e4fe66cef26a1977e9a2cd6fd0c7bc1bcc0be"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "cfac33967246fae983391eb3d5a7be26b4c8b4dad6c7c0b49356285b80017e94bff4642eff5d350c0ebdbeb3bfa129d8caa71c8d0a1ede4fa6dec7c607c52ad8b60ed96308999c895b54361341e161dd56aa7e18d21e1d"}, @NFTA_OBJ_USERDATA={0x71, 0x8, "78b0b5171a0c981bcaf73a3a5570742353229d2de56d802982fdcc1d4624c85af1dac2317e1d056e462c9393307c70ce1e54b208878310501b9fa474ecaf2b99e1c5ff99aec7f195e048a2f920ab59e2fddde5083cc9866c5589739d732bbad46e61b3136433b3fda51492755e"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x76, 0x6, "3143f00ac01fbc56b3ff978f5c684205e8eba21e92ecf1fd8404d1d6e68aca3a93ddbc45da22038f48c6e4b1a4f1c2160d7fef9e14fc131bd2e41783eaabdd10b9d6059a85ab2f4e7ff9ce65ae3b7131cecea98500eec0a8ee1ad4fc33a1d339146837c13513bbf09393c04a0cc0b2396497"}]}, @NFT_MSG_DELTABLE={0x174, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x96, 0x6, "986d4a3075f7455b9448ff61f5ae06bc76a7fd2ecad9cc7c5f24cfebc31e9bb8b750d81265e3d7ee022372e0807ed88ccc4314dc3797b1f0ccd7e13fd6a1efd1a733dec3effdaa0d7caf46a86eb96b58762cdd2b22d1e1bbc2620efffc397776002dc8e3e5e347793cc4b4f87d9ea4ef93609136cd285816a6abbeafcde3375d676da0bebdad65d3535755381b6981de081d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "b4d8798a99f1ae06b04f"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x8d, 0x6, "f2b8dea0fcdac2b5bd6c7659e524bbd2002119881b9dca3688cb954a3e78d90b50bb05022ced7e363002f86c52c3e12b0e5f672c64c95830e85b2ceacb50506806b1eadf4e51e98f3be2dd80abcaec2815550c0892b80c141108093d123330ea9f3874dc27fcde7a16dc81d2ccc089ef9759d56d4427f011b28c03d00fdb0807d91d8548cf638970d6"}]}], {0x14}}, 0x46c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000040) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 13.274922549s ago: executing program 1 (id=393): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c00028008000100"], 0x38}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000041000103030079000000000003"], 0x18}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f0000000080)={0x8, 0x5}) add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180732313232303432343232e8bf00005a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f038094ee301963b7da9314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533a4f5d7f8ebb9347b4f7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02c12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b37bd028f76de73f50fc917c9156d4e5a6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bdaf806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541c1aa8006e97b9ad6f5b89dcb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a056a33a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc", 0x559, r4) ioctl(r0, 0x40204706, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040440647800001010203010902120001019484f43db9ace78aee560080fa090403000096fa05e23f4b1c30d632f65328ca1a34ca592c6043d8b3397b407c81e5fa791f98412524462d961ab57a7a328843671cdc5fa9c272b4d5f8bcd057630502dfe9759b64a36dc3bab1555576baffcd1cf968ff7ba6a21c5d1603bc551ff1a4fc415c534871e0ad2f10ee8fe825c26850de74d8aecfc6ae"], 0x0) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000010000000100000001000000010000000000000020000000200000000100000001") 12.928241815s ago: executing program 3 (id=396): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4000000000000]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x39, 0x6, 0x3, 0x54, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x0, 0x6, 0x10}}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x2000) 11.507732084s ago: executing program 3 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x800004, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='- 1 0 0', 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000091000010000000000000000000200000a50000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000000814000980100002790c0001800800014000000004140000001100010000000000000000000200000a"], 0x78}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) 10.934270845s ago: executing program 4 (id=399): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f001, 0x2}) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x35, 0x0, 0x66, 0x30, 0x33, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x10003b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778a99aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x35}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x32, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 10.721162625s ago: executing program 4 (id=400): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xed}, {{0x0, 0x0, 0x0}, 0x7f}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800008, 0x31, r2, 0xfd5e6000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0x40, 0x40, 0x9, 0x0, 0x2e, 0xd, 0x4}, {0x9000, 0x1, 0xf, 0xc, 0x2, 0x4, 0x7d, 0x7, 0x58, 0x1, 0x3}, {0x100000, 0x200000, 0xe, 0x5, 0x0, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x60000, 0x26000, 0x3, 0x5d, 0x5, 0x42, 0x9, 0x6, 0x6, 0x5, 0xe, 0x7}, {0x0, 0x8000, 0x8, 0x4, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x40000, 0x2, 0xa, 0x2, 0x7, 0x2, 0x5, 0x0, 0x1, 0x82, 0xff}, {0xdddd0000, 0xffff1000, 0xa, 0x5, 0xf, 0x8, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x7000, 0xfff}, 0x80000031, 0x0, 0x8000000, 0x202320, 0xb, 0x0, 0x3000, [0xd, 0xd, 0x7e, 0x102]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') openat(r6, &(0x7f0000000180)='rpc/auth.unix.ip/channel\x00', 0xa802, 0x32) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x5735, 0x0, 0x3, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r14, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) 10.524117845s ago: executing program 0 (id=401): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0xc80c0, 0x130, 0xc}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xd3a, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x0, 0x0}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0xfff7) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x145981) ioctl$BLKDISCARD(r7, 0x1277, &(0x7f0000000140)=0x6) futex$unlock_wake_list32(&(0x7f0000003580)=0x9, 0x68a, 0x10, 0x0, 0x0, 0xffffffff) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) r8 = socket(0x15, 0x5, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0xb000) getsockopt(r8, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 9.866895087s ago: executing program 0 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) (fail_nth: 4) 9.768523434s ago: executing program 0 (id=403): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x800, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x20004804) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x0, 0x7f, 0x6, &(0x7f00000002c0)={0x10, "dbe59aa96be76f16b24f7fa82127993690ff06d3586655d666db04ee3f6df95bc9"}}) 9.761785568s ago: executing program 3 (id=404): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(r4, 0xff7f0000, 0x10, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) close_range(r1, 0xffffffffffffffff, 0x0) 9.690289128s ago: executing program 4 (id=405): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = fcntl$dupfd(r0, 0x0, r4) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "7d6fe95df526c826d5e4599d4c551df46de6e1278d24239ac1de315e16c0469a944fa53bc61095f32cc59ceade72bdfb03666c83e5e0c1ab0d8fe2971e145190274c103e3e85997223819a04dc157f5bfa99377060cdbe197c8752d4e8dcee9756e8056556c812441addad579075753beebf3f2d82d8c3fa56e5932445fe7f832e58c632e510b0bc6f20e5c9453daf54ae543c709bb8b415463b35e051fc43b22d0d10effc7d258ab7ac38f9f6c6b0805665511799888a389d85b95d8b6ab8c600d8131866b26e6f881b782188043390634d94185e12cddf708e4fe66cef26a1977e9a2cd6fd0c7bc1bcc0be"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "cfac33967246fae983391eb3d5a7be26b4c8b4dad6c7c0b49356285b80017e94bff4642eff5d350c0ebdbeb3bfa129d8caa71c8d0a1ede4fa6dec7c607c52ad8b60ed96308999c895b54361341e161dd56aa7e18d21e1d"}, @NFTA_OBJ_USERDATA={0x71, 0x8, "78b0b5171a0c981bcaf73a3a5570742353229d2de56d802982fdcc1d4624c85af1dac2317e1d056e462c9393307c70ce1e54b208878310501b9fa474ecaf2b99e1c5ff99aec7f195e048a2f920ab59e2fddde5083cc9866c5589739d732bbad46e61b3136433b3fda51492755e"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x76, 0x6, "3143f00ac01fbc56b3ff978f5c684205e8eba21e92ecf1fd8404d1d6e68aca3a93ddbc45da22038f48c6e4b1a4f1c2160d7fef9e14fc131bd2e41783eaabdd10b9d6059a85ab2f4e7ff9ce65ae3b7131cecea98500eec0a8ee1ad4fc33a1d339146837c13513bbf09393c04a0cc0b2396497"}]}, @NFT_MSG_DELTABLE={0x174, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x96, 0x6, "986d4a3075f7455b9448ff61f5ae06bc76a7fd2ecad9cc7c5f24cfebc31e9bb8b750d81265e3d7ee022372e0807ed88ccc4314dc3797b1f0ccd7e13fd6a1efd1a733dec3effdaa0d7caf46a86eb96b58762cdd2b22d1e1bbc2620efffc397776002dc8e3e5e347793cc4b4f87d9ea4ef93609136cd285816a6abbeafcde3375d676da0bebdad65d3535755381b6981de081d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "b4d8798a99f1ae06b04f"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x8d, 0x6, "f2b8dea0fcdac2b5bd6c7659e524bbd2002119881b9dca3688cb954a3e78d90b50bb05022ced7e363002f86c52c3e12b0e5f672c64c95830e85b2ceacb50506806b1eadf4e51e98f3be2dd80abcaec2815550c0892b80c141108093d123330ea9f3874dc27fcde7a16dc81d2ccc089ef9759d56d4427f011b28c03d00fdb0807d91d8548cf638970d6"}]}], {0x14}}, 0x46c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000040) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 9.088570289s ago: executing program 3 (id=406): pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40000c4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000001c000000004c00088048000080200004000a004e2100000002000000000000000000000000000000000002000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) r6 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000300)={0x3, @pix_mp={0x3, 0x1, 0x30314247, 0x3, 0x9, [{0x10000, 0x9ca}, {0x5, 0x7}, {0x9, 0x5}, {0x80000001, 0xbe}, {0x2f1, 0x6}, {0x5, 0xffff0000}, {0xffffffff, 0x2}, {0x8, 0x9}], 0x0, 0x9, 0x0, 0x0, 0x7}}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x3, 0x1, 0x1, 0x0, 0x3a}) ioctl$VIDIOC_STREAMON(r6, 0x40045612, 0x0) socket(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x14, 0xd, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d858a17fbe3c87df2f85a1df2c909cbe49a11ff76e906b13a0c24fa2c88ca412c1f9ec49aa55fb0200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0xa2, 0x3562]}) 8.311808755s ago: executing program 4 (id=407): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="95", 0x1}], 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70010000020101010000000000000000030000015000feffffffffffffff0340000000014a00024000000000080002400000000208000240000000020500010008000000080003400000000508000240000000040800034000000001080003400000000808010680080001006401010214000400fe80000000000000000000000000004414000380060002004e220000060001004e22000014000400fe8000000000000000000000000000bb08000200ac14141914000500fe88000000000000000000000000000154000380060001004e220000060001004e200000060001004e210000060002004e200000060002004e200000060001004e240000060001004e240000060001004eff1500000001004e220000060002004e20000014000400ff01000000000000000000000000000108000200ffffffff34000380060002004e240000060001004e230000060001004e240000060001004e210000060002004e200000060002004e20000004001880"], 0x170}, 0x1, 0x0, 0x0, 0x8024800}, 0x200c8041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2}) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r9, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write(r5, &(0x7f0000000080)="a7fe", 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r3, r5, 0x8f5, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0xad9, 0xa900) ioctl$VIDIOC_G_SELECTION(r10, 0xc040565e, &(0x7f0000000040)={0xb, 0x101, 0xd, {0x9, 0x5, 0x9, 0x9}}) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES8], 0x0) 7.979981761s ago: executing program 3 (id=408): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0xb4, &(0x7f0000000140)={0x20, 0xf, 0x72, "4d1a5452220781007166f19e790a885aa52e36f2ccc2799296472b7178984e15da2cfa32febd4518b7ef55ef9f627d3ec3c11672ca05001df5c4c8312d5980efd6e900000022b78b897c1ab4f8f49d7243ddb7b884041970f5ffffff3eac3ef3c4be67de1a973b1423a9d78ed0d6ca6a9231"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}}, 0x80) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) r4 = socket$inet(0x2, 0x2, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000004c0)={0x20, 0x6, 0xd3, {0xd3, 0x21, "4eb71ffdc0ef2357d74fd7d5ee88f2a5083c4d87ee66aa95b9ec08f97857076e42baf20e79f823d36a0a7cd679a8bee809d51a4b227dcf19ea781b7b10f830dd1f9057c6496224c766eaec7951e000b9ed9f117695ffb08cd9c157391726421ac230981eff196308216f10f6e39999e3ff9e957f858474717b74494694ed7340a7a0fcf5b1d8841a149fd0366b2faa55f92a9980e5cf6ee4d51a125e1b0c749c91f7cbe6cbc992e846e34dc3bf7f6666e250164edb24abbeef819e48c4017a6d011e89f4140e40f5c76379437f0802bf80"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x40, 0x11, 0x3b, "f8f32798f7a4d96b51851d46f6a3db5f20d3bcca08f6d3a3ef5432683343b9ba30c70c98f235aa3fb51b0cbb2064924cc014261e8ad62c2feda677"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000007c0)={0x20, 0x81, 0x2, 'er'}, &(0x7f0000000800)={0x20, 0x82, 0x3, "5abbbf"}, &(0x7f0000000840)={0x20, 0x83, 0x2, 'A$'}, &(0x7f0000000880)={0x20, 0x84, 0x2, "f3f2"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "2fb9e6"}}) sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000080)={0x11}) 7.736509283s ago: executing program 1 (id=409): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00004da000/0x2000)=nil, 0x2000, 0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x218d099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) io_setup(0x1, &(0x7f0000000b80)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0xf, "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"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1) 5.651564117s ago: executing program 0 (id=410): socket$rds(0x15, 0x5, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) (async) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc400, 0x0, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.537972763s ago: executing program 0 (id=411): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4111, 0x100f}], 0x5a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x38) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x20) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0xcd) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705010200020007050202"], 0x0) 5.537513937s ago: executing program 1 (id=412): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = fanotify_init(0x1a, 0x800) io_uring_setup(0x650a, &(0x7f0000000180)={0x0, 0x2c3f, 0x8000, 0x21, 0xab}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mlockall(0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x20) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x441, 0x4800001a, r7, 0x0) fanotify_mark(r1, 0x1, 0x40000030, r7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x94, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x200, {}, [@action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x94}}, 0x84) 2.747083355s ago: executing program 4 (id=413): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0) 2.373361798s ago: executing program 0 (id=414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000200)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x24, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @svalue=0x7f}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x8}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x10, 0x4e, {0x4e, 0x9, "063186c41907c1762d08b80ab40397e922b6cd6bd39f8ea836d0a0300399a320e4c118164a4e6a20e0e6d3dce55da65193b33f22cc4d9e881cd075a5a89016fd56513bf1d7f539125763a65b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x20, 0xc, 0xac, "de6f1129db04b9979ae71b50e9179c357bdb8c74a12024aa8e3c6326b6784a45dc5f3f903e2e6d9d08adf054cc4c790943805bcd770b98a575c2bbc1657b23d01002f662c38a118d8f0c02e978d09e9e91e0248c80be4cb97c5ee0899e6444381993485175ead68c8747590cfe8ea660acfeed135e0fcf0f2e26d30f0d3d08d99942bbf9563b7d7448e3df66ad7decf7980d1ce9021d0673a4a9eb456ccaee073242753e365e33dcaaa927e0"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x75}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x8000}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "f6e21b44798998c0b15f458a4d2bbeda170a96544ec5e6a1e08c4a45543750dfeb2ea73eb8d39685ade4c5820080ef"}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="200e05000000da3c0f22993151d5779f0f602bc4d1cc4de4d74bdea4b33f7042a0b28cb7bf703106a09bfafeb63af2427f2807dfe0414739567bf13c2b114d8f5f3dcd2c6825a6be087b7c7a876f9eabc37215463a134b5928d826f13102cd9783f931034b8828ca602fa06a91fc190c28fe0b45179cd312cb6fa0906a53f728"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.892462902s ago: executing program 1 (id=415): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) io_setup(0x4, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(r4, 0xff7f0000, 0x10, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) close_range(r1, 0xffffffffffffffff, 0x0) 1.759456614s ago: executing program 5 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x7fffffff, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r5 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0x0, &(0x7f0000000440)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.598357311s ago: executing program 1 (id=416): r0 = add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff", 0x1e, 0xfffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r1, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) keyctl$revoke(0x3, 0x0) keyctl$negate(0xd, r0, 0x932a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003) r7 = socket$inet(0x2, 0x4000000000000001, 0x9b4d) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56", 0x20}, {0x0}], 0x2}}], 0x1, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x2, 0x1, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 59.946949ms ago: executing program 1 (id=417): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = fcntl$dupfd(r0, 0x0, r4) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf0, 0x8, "7d6fe95df526c826d5e4599d4c551df46de6e1278d24239ac1de315e16c0469a944fa53bc61095f32cc59ceade72bdfb03666c83e5e0c1ab0d8fe2971e145190274c103e3e85997223819a04dc157f5bfa99377060cdbe197c8752d4e8dcee9756e8056556c812441addad579075753beebf3f2d82d8c3fa56e5932445fe7f832e58c632e510b0bc6f20e5c9453daf54ae543c709bb8b415463b35e051fc43b22d0d10effc7d258ab7ac38f9f6c6b0805665511799888a389d85b95d8b6ab8c600d8131866b26e6f881b782188043390634d94185e12cddf708e4fe66cef26a1977e9a2cd6fd0c7bc1bcc0be"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x5b, 0x8, "cfac33967246fae983391eb3d5a7be26b4c8b4dad6c7c0b49356285b80017e94bff4642eff5d350c0ebdbeb3bfa129d8caa71c8d0a1ede4fa6dec7c607c52ad8b60ed96308999c895b54361341e161dd56aa7e18d21e1d"}, @NFTA_OBJ_USERDATA={0x71, 0x8, "78b0b5171a0c981bcaf73a3a5570742353229d2de56d802982fdcc1d4624c85af1dac2317e1d056e462c9393307c70ce1e54b208878310501b9fa474ecaf2b99e1c5ff99aec7f195e048a2f920ab59e2fddde5083cc9866c5589739d732bbad46e61b3136433b3fda51492755e"}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xa4, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x76, 0x6, "3143f00ac01fbc56b3ff978f5c684205e8eba21e92ecf1fd8404d1d6e68aca3a93ddbc45da22038f48c6e4b1a4f1c2160d7fef9e14fc131bd2e41783eaabdd10b9d6059a85ab2f4e7ff9ce65ae3b7131cecea98500eec0a8ee1ad4fc33a1d339146837c13513bbf09393c04a0cc0b2396497"}]}, @NFT_MSG_DELTABLE={0x174, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x96, 0x6, "986d4a3075f7455b9448ff61f5ae06bc76a7fd2ecad9cc7c5f24cfebc31e9bb8b750d81265e3d7ee022372e0807ed88ccc4314dc3797b1f0ccd7e13fd6a1efd1a733dec3effdaa0d7caf46a86eb96b58762cdd2b22d1e1bbc2620efffc397776002dc8e3e5e347793cc4b4f87d9ea4ef93609136cd285816a6abbeafcde3375d676da0bebdad65d3535755381b6981de081d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "b4d8798a99f1ae06b04f"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x8d, 0x6, "f2b8dea0fcdac2b5bd6c7659e524bbd2002119881b9dca3688cb954a3e78d90b50bb05022ced7e363002f86c52c3e12b0e5f672c64c95830e85b2ceacb50506806b1eadf4e51e98f3be2dd80abcaec2815550c0892b80c141108093d123330ea9f3874dc27fcde7a16dc81d2ccc089ef9759d56d4427f011b28c03d00fdb0807d91d8548cf638970d6"}]}], {0x14}}, 0x46c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000040) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) 54.317964ms ago: executing program 4 (id=418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_sctp(0x2, 0x5, 0x84) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) listen(0xffffffffffffffff, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001000080049b4003800000000a3069078ac1414bbac1414aa070f09e00000027f00000100000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x3}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=419): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b60300000000000085007b27fca9cbb2e89b00000085000000a00000209500000000000000000000000000010000000884bda25591b228268961d682a3f79e505f590d3beb18d423917ef3dc814052e8f80200008b86"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) kernel console output (not intermixed with test programs): nvalid bInterval 0, changing to 7 [ 132.137937][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.138702][ T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.138732][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.138751][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.139510][ T30] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.139541][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.139562][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.141135][ T30] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 132.141152][ T30] usb 2-1: Product: syz [ 132.141163][ T30] usb 2-1: Manufacturer: syz [ 132.141176][ T30] usb 2-1: SerialNumber: syz [ 132.147192][ T30] usb 2-1: config 0 descriptor?? [ 132.170092][ T30] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.404864][ T30] usb 2-1: USB disconnect, device number 6 [ 132.410790][ T30] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 132.421599][ T5704] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 132.455821][ T5724] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 132.495572][ T5704] usb 3-1: USB disconnect, device number 2 [ 132.498644][ T5724] usb 4-1: USB disconnect, device number 2 [ 133.049044][ T10] usb 5-1: USB disconnect, device number 3 [ 134.045235][ T5724] usb 1-1: USB disconnect, device number 5 [ 134.099733][ T6337] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 134.109902][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.144'. [ 134.212674][ T6340] FAULT_INJECTION: forcing a failure. [ 134.212674][ T6340] name failslab, interval 1, probability 0, space 0, times 0 [ 134.212724][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) [ 134.212745][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.212755][ T6340] Call Trace: [ 134.212761][ T6340] [ 134.212767][ T6340] dump_stack_lvl+0x100/0x190 [ 134.212793][ T6340] should_fail_ex.cold+0x5/0xa [ 134.212815][ T6340] should_failslab+0xc2/0x120 [ 134.212834][ T6340] __kmalloc_cache_noprof+0x91/0x6d0 [ 134.212859][ T6340] ? rtnl_newlink+0x139/0x2620 [ 134.212877][ T6340] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.212893][ T6340] rtnl_newlink+0x139/0x2620 [ 134.212917][ T6340] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.212932][ T6340] ? avc_has_perm_noaudit+0x56/0x3b0 [ 134.212951][ T6340] ? find_held_lock+0x2b/0x80 [ 134.212973][ T6340] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.212991][ T6340] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 134.213019][ T6340] ? __lock_acquire+0x4c5/0x1ec0 [ 134.213043][ T6340] ? lock_acquire+0x1d1/0x380 [ 134.213058][ T6340] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 134.213074][ T6340] ? find_held_lock+0x2b/0x80 [ 134.213094][ T6340] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 134.213110][ T6340] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 134.213127][ T6340] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.213144][ T6340] rtnetlink_rcv_msg+0x95e/0xe90 [ 134.213162][ T6340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.213184][ T6340] ? ref_tracker_free+0x37e/0x6c0 [ 134.213204][ T6340] netlink_rcv_skb+0x159/0x420 [ 134.213227][ T6340] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.213245][ T6340] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.213274][ T6340] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.213299][ T6340] netlink_unicast+0x585/0x850 [ 134.213324][ T6340] ? __pfx_netlink_unicast+0x10/0x10 [ 134.213352][ T6340] netlink_sendmsg+0x8b0/0xda0 [ 134.213378][ T6340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.213402][ T6340] ? selinux_socket_sendmsg+0x198/0x2f0 [ 134.213429][ T6340] ____sys_sendmsg+0xa4d/0xbe0 [ 134.213446][ T6340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.213470][ T6340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.213494][ T6340] ? lock_acquire+0x1d1/0x380 [ 134.213508][ T6340] ? get_pid_task+0x2a/0x250 [ 134.213531][ T6340] ___sys_sendmsg+0x190/0x1e0 [ 134.213552][ T6340] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.213572][ T6340] ? get_pid_task+0x106/0x250 [ 134.213605][ T6340] ? find_held_lock+0x2b/0x80 [ 134.213639][ T6340] __sys_sendmsg+0x160/0x210 [ 134.213666][ T6340] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.213701][ T6340] do_syscall_64+0x123/0x790 [ 134.213721][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.213738][ T6340] RIP: 0033:0x7f8affb9e159 [ 134.213751][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.213765][ T6340] RSP: 002b:00007f8b00a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.213782][ T6340] RAX: ffffffffffffffda RBX: 00007f8affe25fa0 RCX: 00007f8affb9e159 [ 134.213793][ T6340] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 134.213802][ T6340] RBP: 00007f8b00a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 134.213811][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.213820][ T6340] R13: 00007f8affe26038 R14: 00007f8affe25fa0 R15: 00007fffe9136898 [ 134.213841][ T6340] [ 134.579068][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 134.979941][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 134.987724][ T31] audit: type=1400 audit(1788082528.888:322): avc: denied { read } for pid=6341 comm="syz.1.149" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.010563][ T31] audit: type=1400 audit(1788082528.888:323): avc: denied { open } for pid=6341 comm="syz.1.149" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.390089][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 135.429433][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 135.542261][ T31] audit: type=1400 audit(1788082529.458:324): avc: denied { bind } for pid=6364 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.542313][ T31] audit: type=1400 audit(1788082529.458:325): avc: denied { name_bind } for pid=6364 comm="syz.4.152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.542365][ T31] audit: type=1400 audit(1788082529.458:326): avc: denied { node_bind } for pid=6364 comm="syz.4.152" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 135.542404][ T31] audit: type=1400 audit(1788082529.458:327): avc: denied { write } for pid=6364 comm="syz.4.152" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.542442][ T31] audit: type=1400 audit(1788082529.458:328): avc: denied { name_connect } for pid=6364 comm="syz.4.152" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.752295][ T31] audit: type=1400 audit(1788082529.648:329): avc: denied { read } for pid=6364 comm="syz.4.152" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.813933][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 135.818806][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 135.818860][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 135.957899][ T31] audit: type=1400 audit(1788082529.878:330): avc: denied { ioctl } for pid=6354 comm="syz.3.150" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10967 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.008727][ T31] audit: type=1400 audit(1788082529.928:331): avc: denied { write } for pid=6369 comm="syz.1.153" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.290021][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.157'. [ 136.320461][ T1214] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.475175][ T1214] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 136.477240][ T1214] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 136.477264][ T1214] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 136.477283][ T1214] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 136.477302][ T1214] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 136.477321][ T1214] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 64 [ 136.479890][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.479909][ T1214] usb 2-1: Product: syz [ 136.479921][ T1214] usb 2-1: Manufacturer: syz [ 136.479933][ T1214] usb 2-1: SerialNumber: syz [ 136.484858][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.484971][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.485048][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.485137][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.485283][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.502481][ T1214] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 136.514599][ T1214] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 136.518491][ T1214] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 136.548798][ T1214] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 136.553551][ T1214] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 136.775174][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.775526][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.270496][ T6380] bond1: entered promiscuous mode [ 137.270921][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.892177][ T5338] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.909567][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 138.003903][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.042659][ T5338] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 138.059346][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.059384][ T5338] usb 3-1: Product: syz [ 138.059410][ T5338] usb 3-1: Manufacturer: syz [ 138.059427][ T5338] usb 3-1: SerialNumber: syz [ 138.272240][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 138.272944][ T5724] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 138.276989][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.277008][ T5724] usb 1-1: Product: syz [ 138.277019][ T5724] usb 1-1: Manufacturer: syz [ 138.277037][ T5724] usb 1-1: SerialNumber: syz [ 138.346104][ T5724] usb 1-1: config 0 descriptor?? [ 138.360095][ T5724] usb 1-1: selecting invalid altsetting 1 [ 138.360130][ T5724] technisat-usb2: could not set alternate setting to 0 [ 138.690127][ T5724] technisat-usb2: firmware version: 0.0 [ 138.691245][ T5724] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 138.813043][ T5338] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 138.825233][ T5338] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 139.007376][ T30] usb 2-1: USB disconnect, device number 7 [ 139.058000][ T30] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 139.071607][ T30] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 139.097198][ T30] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 139.114802][ T30] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 139.122671][ T30] keyspan 2-1:1.0: device disconnected [ 139.189440][ T6416] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 139.196977][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.199355][ T5724] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 139.199391][ T5724] usb 1-1: media controller created [ 139.199590][ T5724] technisat-usb2: i2c-error: out failed 53 = -22 [ 139.199665][ T5724] dvb-usb: MAC address reading failed. [ 139.510956][ T6419] Zero length message leads to an empty skb [ 139.786550][ T6428] technisat-usb2: i2c-error: out failed 00 = -22 [ 139.807217][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.832953][ T5704] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.032506][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 140.048278][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.048334][ T5704] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 140.071249][ T5704] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 140.071316][ T5704] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 140.071347][ T5704] usb 5-1: config 14 has no interface number 0 [ 140.071365][ T5704] usb 5-1: config 14 has no interface number 1 [ 140.071418][ T5704] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 140.071464][ T5704] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 140.071489][ T5704] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 140.071517][ T5704] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 140.071545][ T5704] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 140.071573][ T5704] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.071621][ T5704] usb 5-1: config 14 interface 57 has no altsetting 0 [ 140.071642][ T5704] usb 5-1: config 14 interface 228 has no altsetting 0 [ 140.216376][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.216433][ T5704] usb 5-1: Product: syz [ 140.216459][ T5704] usb 5-1: Manufacturer: syz [ 140.216477][ T5704] usb 5-1: SerialNumber: syz [ 140.630192][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 140.630230][ T31] audit: type=1400 audit(1788082534.548:348): avc: denied { write } for pid=6415 comm="syz.3.167" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.695041][ T5704] legousbtower 5-1:14.57: interrupt endpoints not found [ 140.969123][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.012856][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.402733][ T5704] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 141.496656][ T5724] DVB: Unable to find symbol stv090x_attach() [ 141.512662][ T5724] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 141.645952][ T5704] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 141.703537][ T31] audit: type=1400 audit(1788082535.628:349): avc: denied { allowed } for pid=6442 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 141.813239][ T31] audit: type=1400 audit(1788082535.718:350): avc: denied { read write } for pid=6442 comm="syz.2.174" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.813315][ T31] audit: type=1400 audit(1788082535.728:351): avc: denied { open } for pid=6442 comm="syz.2.174" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.372167][ T5724] rc_core: IR keymap rc-technisat-usb2 not found [ 142.372203][ T5724] Registered IR keymap rc-empty [ 142.599492][ T5724] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 142.601182][ T5724] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 142.618213][ T6450] ext4: Unknown parameter 'barbierys/net/ipv4/vs/sync_ports' [ 142.621415][ T31] audit: type=1400 audit(1788082536.538:352): avc: denied { mounton } for pid=6447 comm="syz.1.173" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 142.630706][ T5724] dvb-usb: schedule remote query interval to 100 msecs. [ 142.631706][ T5724] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 142.635488][ T5724] usb 1-1: USB disconnect, device number 6 [ 142.664697][ T31] audit: type=1400 audit(1788082536.588:353): avc: denied { name_connect } for pid=6448 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 142.689691][ T31] audit: type=1400 audit(1788082536.608:354): avc: denied { ioctl } for pid=6448 comm="syz.0.175" path="socket:[11057]" dev="sockfs" ino=11057 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.795216][ T31] audit: type=1400 audit(1788082536.718:355): avc: denied { listen } for pid=6448 comm="syz.0.175" lport=33377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.815900][ T31] audit: type=1400 audit(1788082536.738:356): avc: denied { accept } for pid=6448 comm="syz.0.175" lport=33377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.128066][ T5724] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 143.961559][ T5338] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -ETIMEDOUT [ 143.961621][ T5338] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 143.963759][ T31] audit: type=1400 audit(1788082537.278:357): avc: denied { execute } for pid=6455 comm="syz.2.176" path="/40/file1" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.969762][ T30] usb 5-1: USB disconnect, device number 4 [ 144.238832][ T30] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 144.269651][ T5338] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.291362][ T5338] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -110 [ 144.350069][ T5338] usb 3-1: USB disconnect, device number 3 [ 144.610802][ T6476] syzkaller1: entered promiscuous mode [ 144.617998][ T6476] syzkaller1: entered allmulticast mode [ 144.869325][ T6484] xt_ipcomp: unknown flags 1D [ 144.945870][ T6482] ceph: Path missing in source [ 145.212646][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.374128][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 145.405305][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.413730][ T30] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 145.447578][ T30] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 145.456774][ T30] usb 2-1: config 2 has no interface number 0 [ 145.464045][ T30] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 145.464132][ T30] usb 2-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.476361][ T30] usb 2-1: config 2 interface 232 has no altsetting 0 [ 145.555198][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.555310][ T30] usb 2-1: Product: syz [ 145.555365][ T30] usb 2-1: Manufacturer: syz [ 145.555457][ T30] usb 2-1: SerialNumber: syz [ 145.637710][ T6482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.731882][ T6488] 9pnet_fd: p9_fd_create_unix (6488): problem connecting socket: ./cgroup: -111 [ 145.736693][ T59] IPVS: starting estimator thread 0... [ 145.747401][ T6488] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 145.747613][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 145.747624][ T31] audit: type=1400 audit(1788082539.668:361): avc: denied { mount } for pid=6487 comm="syz.3.188" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 145.784502][ T31] audit: type=1400 audit(1788082539.678:362): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 145.823065][ T6489] IPVS: using max 49 ests per chain, 117600 per kthread [ 145.976356][ T6491] 0: reclassify loop, rule prio 0, protocol 03 [ 145.988962][ T6491] EXT4-fs (loop4): unable to read superblock [ 146.052252][ T31] audit: type=1400 audit(1788082539.948:363): avc: denied { ioctl } for pid=6490 comm="syz.4.187" path="/36/file0" dev="tmpfs" ino=219 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.487083][ T31] audit: type=1400 audit(1788082542.408:364): avc: denied { ioctl } for pid=6516 comm="syz.4.195" path="socket:[11264]" dev="sockfs" ino=11264 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.538104][ T30] usb 2-1: USB disconnect, device number 8 [ 148.739772][ T31] audit: type=1400 audit(1788082542.658:365): avc: denied { lock } for pid=6516 comm="syz.4.195" path="socket:[11562]" dev="sockfs" ino=11562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.919925][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.196'. [ 148.922196][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 148.922266][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 149.448520][ T5724] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.455636][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.661646][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 149.669839][ T5724] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.724068][ T5724] usb 5-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.739403][ T5724] usb 5-1: config 1 interface 0 altsetting 252 bulk endpoint 0x3 has invalid maxpacket 56 [ 149.739466][ T5724] usb 5-1: config 1 interface 0 has no altsetting 0 [ 149.870943][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.871022][ T5724] usb 5-1: Product: ܘ粽甥ꅈ凭越꼾»懤䙜ｫ欭橈ढ़鎶 [ 149.871110][ T5724] usb 5-1: Manufacturer: 볹฿暃ޔ䤠ꄡ궥蹕쓾㲊᜔∊균⻊㓙အ菭ꚩ頪㠾琓轷砄ꨓ淡艇컑欒횙㚪鸵ၰኺ废拟䗩䒋㷫髸섮荘磕∻䌀鐖貆으˧ݤ榅Գᖮ䨪㑼ᱮ䃧ⷻ䅿쬱↿㸒ｷ阦냒즹膊ꦌ퇠ꭵ挿뱵齹彷ⶺ⌂跳㙼ū䢻㾹ᶩ⏢㒣揑᭍̥爿㹭騸棤䴆Ⳳ픁孧ꫝ [ 149.871195][ T5724] usb 5-1: SerialNumber: ࠁ [ 150.021060][ T6517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.021149][ T6517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.404958][ T31] audit: type=1400 audit(1788082544.328:366): avc: denied { getopt } for pid=6530 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.082119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.162115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.672114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.204000][ T5724] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 152.210595][ T5724] usb 5-1: USB disconnect, device number 5 [ 152.541073][ T6542] ip6t_hbh: too many supported opts specified [ 152.906227][ T31] audit: type=1400 audit(1788082546.828:367): avc: denied { watch watch_reads } for pid=6537 comm="syz.0.203" path="/43" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.833358][ T31] audit: type=1400 audit(1788082547.748:368): avc: denied { create } for pid=6556 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.850042][ T31] audit: type=1400 audit(1788082547.768:369): avc: denied { setopt } for pid=6556 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.910212][ T6555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.052647][ T31] audit: type=1400 audit(1788082547.978:370): avc: denied { create } for pid=6560 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.096408][ T31] audit: type=1400 audit(1788082548.018:371): avc: denied { connect } for pid=6560 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.122864][ T31] audit: type=1400 audit(1788082548.048:372): avc: denied { bind } for pid=6562 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.135650][ T31] audit: type=1400 audit(1788082548.058:373): avc: denied { shutdown } for pid=6560 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.145217][ T5338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.341397][ T5338] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.352406][ T5338] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.361040][ T5338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.361054][ T5338] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.361080][ T5338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.794122][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.802236][ T5338] usb 1-1: Product: syz [ 154.802257][ T5338] usb 1-1: Manufacturer: syz [ 154.825089][ T5338] cdc_wdm 1-1:1.0: skipping garbage [ 154.831154][ T5338] cdc_wdm 1-1:1.0: skipping garbage [ 154.837649][ T5338] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 154.843707][ T5338] cdc_wdm 1-1:1.0: Unknown control protocol [ 154.852387][ T5724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.023452][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 155.035175][ T5724] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 155.035370][ T31] audit: type=1400 audit(1788082548.958:374): avc: denied { read write } for pid=6556 comm="syz.0.207" name="cdc-wdm0" dev="devtmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 155.036202][ T5724] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 155.036221][ T5724] usb 5-1: config 0 has no interface number 0 [ 155.036249][ T5724] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 155.036270][ T5724] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 155.037837][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.037853][ T5724] usb 5-1: Product: syz [ 155.037864][ T5724] usb 5-1: Manufacturer: syz [ 155.037875][ T5724] usb 5-1: SerialNumber: syz [ 155.039893][ T5724] usb 5-1: config 0 descriptor?? [ 155.170591][ T31] audit: type=1400 audit(1788082548.988:375): avc: denied { open } for pid=6556 comm="syz.0.207" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 155.177695][ T6561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.177780][ T6561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.215426][ T31] audit: type=1400 audit(1788082549.138:376): avc: denied { ioctl } for pid=6556 comm="syz.0.207" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2887 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 155.436842][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 155.439799][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 155.439901][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 155.650698][ T6561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.650814][ T6561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.689610][ T5824] usb 1-1: USB disconnect, device number 7 [ 156.042427][ T5338] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.243001][ T5338] usb 2-1: Using ep0 maxpacket: 16 [ 156.243558][ T5338] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 156.260234][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.260314][ T5338] usb 2-1: Product: syz [ 156.260399][ T5338] usb 2-1: Manufacturer: syz [ 156.260462][ T5338] usb 2-1: SerialNumber: syz [ 156.305519][ T5338] usb 2-1: config 0 descriptor?? [ 156.333582][ T5338] usb 2-1: selecting invalid altsetting 1 [ 156.333610][ T5338] technisat-usb2: could not set alternate setting to 0 [ 156.844813][ T5338] technisat-usb2: firmware version: 0.0 [ 156.844883][ T5338] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 157.178526][ T6589] FAULT_INJECTION: forcing a failure. [ 157.178526][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.193186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 157.210447][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 157.210475][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.210486][ T6589] Call Trace: [ 157.210492][ T6589] [ 157.210499][ T6589] dump_stack_lvl+0x100/0x190 [ 157.210531][ T6589] should_fail_ex.cold+0x5/0xa [ 157.210558][ T6589] _copy_to_user+0x32/0xd0 [ 157.210587][ T6589] simple_read_from_buffer+0xcb/0x170 [ 157.210610][ T6589] proc_fail_nth_read+0x1af/0x230 [ 157.210631][ T6589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.210654][ T6589] ? rw_verify_area+0xce/0x6d0 [ 157.210679][ T6589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.210699][ T6589] vfs_read+0x1e4/0xb40 [ 157.210724][ T6589] ? lock_acquire+0x1d1/0x380 [ 157.210750][ T6589] ? __fget_files+0x34/0x3d0 [ 157.210770][ T6589] ? __pfx_vfs_read+0x10/0x10 [ 157.210794][ T6589] ? find_held_lock+0x2b/0x80 [ 157.210818][ T6589] ? __fget_files+0x215/0x3d0 [ 157.210841][ T6589] ? __fget_files+0x21f/0x3d0 [ 157.210868][ T6589] ksys_read+0x12a/0x250 [ 157.210893][ T6589] ? __pfx_ksys_read+0x10/0x10 [ 157.210925][ T6589] do_syscall_64+0x123/0x790 [ 157.210949][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.210968][ T6589] RIP: 0033:0x7f8affb5e98e [ 157.210984][ T6589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.211001][ T6589] RSP: 002b:00007f8b00a69fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.211021][ T6589] RAX: ffffffffffffffda RBX: 00007f8b00a6a6c0 RCX: 00007f8affb5e98e [ 157.211033][ T6589] RDX: 000000000000000f RSI: 00007f8b00a6a0a0 RDI: 0000000000000004 [ 157.211043][ T6589] RBP: 00007f8b00a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.211054][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.211065][ T6589] R13: 00007f8affe26038 R14: 00007f8affe25fa0 R15: 00007fffe9136898 [ 157.211087][ T6589] [ 157.263200][ T5338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.265685][ T5338] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 157.265720][ T5338] usb 2-1: media controller created [ 157.265755][ T5338] technisat-usb2: i2c-error: out failed 53 = -22 [ 157.265785][ T5338] dvb-usb: MAC address reading failed. [ 157.294711][ T5338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.458260][ T5724] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 157.458305][ T5724] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 157.479713][ T5724] asix 5-1:0.34: probe with driver asix failed with error -71 [ 157.493126][ T5724] usb 5-1: USB disconnect, device number 6 [ 157.543903][ T5338] DVB: Unable to find symbol stv090x_attach() [ 157.583553][ T5704] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.289683][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 158.289721][ T31] audit: type=1400 audit(1788082551.578:380): avc: denied { bind } for pid=6594 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.289758][ T31] audit: type=1400 audit(1788082551.598:381): avc: denied { read write } for pid=6594 comm="syz.3.219" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 158.289794][ T31] audit: type=1400 audit(1788082551.598:382): avc: denied { open } for pid=6594 comm="syz.3.219" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 158.289829][ T31] audit: type=1400 audit(1788082551.658:383): avc: denied { setattr } for pid=6594 comm="syz.3.219" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 158.291670][ T5338] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 158.374107][ T5704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.376367][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.376393][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.376414][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.376432][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.376464][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.379609][ T5704] usb 1-1: config 0 descriptor?? [ 158.495210][ T6597] technisat-usb2: i2c-error: out failed 00 = -22 [ 158.552152][ T31] audit: type=1400 audit(1788082552.468:384): avc: denied { setopt } for pid=6608 comm="syz.3.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.632200][ T5338] rc_core: IR keymap rc-technisat-usb2 not found [ 158.632233][ T5338] Registered IR keymap rc-empty [ 158.633370][ T5338] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 158.643610][ T5338] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 158.660580][ T5338] dvb-usb: schedule remote query interval to 100 msecs. [ 158.664720][ T5338] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 158.776580][ T5338] dvb-usb: error -32 while querying for an remote control event. [ 158.830324][ T5338] usb 2-1: USB disconnect, device number 9 [ 158.836649][ T5704] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 158.973679][ T5338] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 159.000913][ T31] audit: type=1400 audit(1788082552.918:385): avc: denied { write } for pid=6617 comm="syz.4.222" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.413324][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 159.415732][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 159.415809][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 159.913957][ T5724] usb 1-1: USB disconnect, device number 8 [ 160.099920][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.225'. [ 160.827294][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 161.337839][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.366582][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.375845][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.420812][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 161.493697][ T5704] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.581581][ T6657] xt_hashlimit: overflow, try lower: 0/0 [ 161.599737][ T6658] FAULT_INJECTION: forcing a failure. [ 161.599737][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.599780][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 161.599801][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.599810][ T6658] Call Trace: [ 161.599815][ T6658] [ 161.599820][ T6658] dump_stack_lvl+0x100/0x190 [ 161.599848][ T6658] should_fail_ex.cold+0x5/0xa [ 161.599871][ T6658] _copy_from_user+0x2e/0xd0 [ 161.599896][ T6658] copy_msghdr_from_user+0x9f/0x4c0 [ 161.599930][ T6658] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.599955][ T6658] ? lock_acquire+0x1d1/0x380 [ 161.599971][ T6658] ? get_pid_task+0x2a/0x250 [ 161.599993][ T6658] ___sys_sendmsg+0x106/0x1e0 [ 161.600014][ T6658] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.600034][ T6658] ? get_pid_task+0x106/0x250 [ 161.600062][ T6658] ? find_held_lock+0x2b/0x80 [ 161.600096][ T6658] __sys_sendmsg+0x160/0x210 [ 161.600121][ T6658] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.600156][ T6658] do_syscall_64+0x123/0x790 [ 161.600176][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.600192][ T6658] RIP: 0033:0x7faad419e159 [ 161.600206][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.600220][ T6658] RSP: 002b:00007faad4fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.600237][ T6658] RAX: ffffffffffffffda RBX: 00007faad4425fa0 RCX: 00007faad419e159 [ 161.600247][ T6658] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 161.600257][ T6658] RBP: 00007faad4fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 161.600267][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.600276][ T6658] R13: 00007faad4426038 R14: 00007faad4425fa0 R15: 00007ffdc51c7328 [ 161.600298][ T6658] [ 161.662844][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 161.663521][ T5704] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 161.666124][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.666147][ T5704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.666175][ T5704] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 161.667024][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.667045][ T5704] usb 4-1: SerialNumber: syz [ 161.691810][ T5704] usb 4-1: 0:2 : does not exist [ 161.878910][ T6664] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 161.886811][ T6664] netlink: 232 bytes leftover after parsing attributes in process `syz.0.232'. [ 161.895881][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 162.990808][ T5616] Bluetooth: hci1: connection err: -111 [ 163.789388][ T31] audit: type=1400 audit(1788082557.688:386): avc: denied { write } for pid=6675 comm="syz.2.235" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 163.813813][ T31] audit: type=1400 audit(1788082557.698:387): avc: denied { audit_write } for pid=6675 comm="syz.2.235" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 163.813904][ T31] audit: type=1400 audit(1788082557.698:388): avc: denied { watch watch_reads } for pid=6675 comm="syz.2.235" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 164.176772][ T5724] usb 4-1: USB disconnect, device number 3 [ 164.496642][ T6687] FAULT_INJECTION: forcing a failure. [ 164.496642][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.496718][ T6687] CPU: 1 UID: 0 PID: 6687 Comm: syz.1.238 Not tainted syzkaller #0 PREEMPT(full) [ 164.496740][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.496751][ T6687] Call Trace: [ 164.496758][ T6687] [ 164.496766][ T6687] dump_stack_lvl+0x100/0x190 [ 164.496797][ T6687] should_fail_ex.cold+0x5/0xa [ 164.496824][ T6687] _copy_to_user+0x32/0xd0 [ 164.496853][ T6687] msr_read+0x144/0x240 [ 164.496879][ T6687] ? __pfx_msr_read+0x10/0x10 [ 164.496899][ T6687] ? bpf_lsm_file_permission+0x9/0x10 [ 164.496917][ T6687] ? security_file_permission+0x76/0x210 [ 164.496932][ T6687] ? rw_verify_area+0xce/0x6d0 [ 164.496952][ T6687] ? __pfx_msr_read+0x10/0x10 [ 164.496973][ T6687] vfs_read+0x1e4/0xb40 [ 164.496994][ T6687] ? lock_acquire+0x1d1/0x380 [ 164.497008][ T6687] ? __fget_files+0x34/0x3d0 [ 164.497024][ T6687] ? __pfx_vfs_read+0x10/0x10 [ 164.497044][ T6687] ? find_held_lock+0x2b/0x80 [ 164.497063][ T6687] ? __fget_files+0x215/0x3d0 [ 164.497078][ T6687] ? __fget_files+0x215/0x3d0 [ 164.497096][ T6687] ? __fget_files+0x21f/0x3d0 [ 164.497117][ T6687] ksys_read+0x12a/0x250 [ 164.497138][ T6687] ? __pfx_ksys_read+0x10/0x10 [ 164.497169][ T6687] do_syscall_64+0x123/0x790 [ 164.497187][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.497202][ T6687] RIP: 0033:0x7fe7afd9e159 [ 164.497214][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.497228][ T6687] RSP: 002b:00007fe7b0c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.497243][ T6687] RAX: ffffffffffffffda RBX: 00007fe7b0026180 RCX: 00007fe7afd9e159 [ 164.497253][ T6687] RDX: 0000000000019000 RSI: 0000200000032680 RDI: 0000000000000009 [ 164.497262][ T6687] RBP: 00007fe7b0c13090 R08: 0000000000000000 R09: 0000000000000000 [ 164.497270][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.497279][ T6687] R13: 00007fe7b0026218 R14: 00007fe7b0026180 R15: 00007ffe565b84a8 [ 164.497298][ T6687] [ 164.689644][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.236'. [ 164.691778][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 164.691834][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 165.797919][ T31] audit: type=1400 audit(1788082559.718:389): avc: granted { setsecparam } for pid=6696 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 166.031271][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 166.501114][ T6710] FAULT_INJECTION: forcing a failure. [ 166.501114][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 166.518333][ T6710] CPU: 1 UID: 0 PID: 6710 Comm: syz.4.242 Not tainted syzkaller #0 PREEMPT(full) [ 166.518360][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 166.518371][ T6710] Call Trace: [ 166.518377][ T6710] [ 166.518387][ T6710] dump_stack_lvl+0x100/0x190 [ 166.518419][ T6710] should_fail_ex.cold+0x5/0xa [ 166.518445][ T6710] should_failslab+0xc2/0x120 [ 166.518467][ T6710] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 166.518487][ T6710] ? __alloc_skb+0x5b7/0x710 [ 166.518514][ T6710] ? __alloc_skb+0x140/0x710 [ 166.518544][ T6710] __alloc_skb+0x140/0x710 [ 166.518568][ T6710] ? __alloc_skb+0x5b7/0x710 [ 166.518593][ T6710] ? __pfx___alloc_skb+0x10/0x10 [ 166.518626][ T6710] pfkey_sendmsg+0x161/0x840 [ 166.518652][ T6710] ____sys_sendmsg+0xa4d/0xbe0 [ 166.518672][ T6710] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 166.518694][ T6710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.518720][ T6710] ? lock_acquire+0x1d1/0x380 [ 166.518739][ T6710] ? get_pid_task+0x2a/0x250 [ 166.518765][ T6710] ___sys_sendmsg+0x190/0x1e0 [ 166.518789][ T6710] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.518816][ T6710] ? get_pid_task+0x106/0x250 [ 166.518848][ T6710] ? find_held_lock+0x2b/0x80 [ 166.518887][ T6710] __sys_sendmsg+0x160/0x210 [ 166.518916][ T6710] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.518956][ T6710] do_syscall_64+0x123/0x790 [ 166.518979][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.518998][ T6710] RIP: 0033:0x7f1f5439e159 [ 166.519013][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.519030][ T6710] RSP: 002b:00007f1f55188028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.519049][ T6710] RAX: ffffffffffffffda RBX: 00007f1f54625fa0 RCX: 00007f1f5439e159 [ 166.519061][ T6710] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 166.519072][ T6710] RBP: 00007f1f55188090 R08: 0000000000000000 R09: 0000000000000000 [ 166.519083][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.519093][ T6710] R13: 00007f1f54626038 R14: 00007f1f54625fa0 R15: 00007ffc4751bcc8 [ 166.519118][ T6710] [ 166.645425][ T5338] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.844194][ T5338] usb 2-1: Using ep0 maxpacket: 8 [ 166.844841][ T5338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.861266][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.861314][ T5338] usb 2-1: Product: syz [ 166.861339][ T5338] usb 2-1: Manufacturer: syz [ 166.861353][ T5338] usb 2-1: SerialNumber: syz [ 166.940675][ T5614] udevd[5614]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 167.395322][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.428679][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.582677][ T5338] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 167.582838][ T5338] cdc_ncm 2-1:1.0: bind() failure [ 167.591952][ T5338] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 167.591998][ T5338] cdc_ncm 2-1:1.1: bind() failure [ 167.646752][ T31] audit: type=1400 audit(1788082561.568:390): avc: denied { getopt } for pid=6726 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.986698][ T6733] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 168.040042][ T6733] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 168.113211][ T31] audit: type=1400 audit(1788082562.038:391): avc: denied { create } for pid=6738 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.130611][ T6728] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.135999][ T31] audit: type=1400 audit(1788082562.058:392): avc: denied { read } for pid=6738 comm="syz.4.249" path="socket:[12076]" dev="sockfs" ino=12076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.386894][ T6733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.418646][ T6739] bond1: (slave veth0_to_bond): making interface the new active one [ 168.426814][ T6739] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 168.436345][ T6740] bond1: entered promiscuous mode [ 168.436395][ T6740] veth0_to_bond: entered promiscuous mode [ 168.436543][ T6740] bond1: entered allmulticast mode [ 168.436554][ T6740] veth0_to_bond: entered allmulticast mode [ 168.685145][ T6728] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.851159][ T5824] usb 2-1: USB disconnect, device number 10 [ 168.863930][ T6728] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.999591][ T6728] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.092643][ T1215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.122166][ T1215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.132320][ T1215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.132372][ T1215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.162262][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.192667][ T31] audit: type=1400 audit(1788082563.118:393): avc: denied { create } for pid=6755 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.362708][ T5824] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.382225][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 169.388560][ T5724] usb 3-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice= 0.40 [ 169.402413][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.402447][ T5724] usb 3-1: Product: syz [ 169.402470][ T5724] usb 3-1: Manufacturer: syz [ 169.402487][ T5724] usb 3-1: SerialNumber: syz [ 169.432237][ T5704] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.515911][ T5824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.528927][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.528991][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.529027][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.529051][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.529090][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.572164][ T5704] usb 5-1: device descriptor read/64, error -71 [ 169.594860][ T5824] usb 2-1: config 0 descriptor?? [ 169.649113][ T5724] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.660682][ T5724] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 169.812201][ T5704] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.255107][ T31] audit: type=1400 audit(1788082564.038:394): avc: denied { read write } for pid=6763 comm="syz.0.258" name="video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.300716][ T31] audit: type=1400 audit(1788082564.048:395): avc: denied { open } for pid=6763 comm="syz.0.258" path="/dev/video4" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.344433][ T31] audit: type=1400 audit(1788082564.058:396): avc: denied { ioctl } for pid=6763 comm="syz.0.258" path="/dev/video4" dev="devtmpfs" ino=935 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 170.372232][ T5704] usb 5-1: device descriptor read/64, error -71 [ 170.384072][ T5724] usb 3-1: USB disconnect, device number 4 [ 170.416729][ T5824] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 170.482512][ T5704] usb usb5-port1: attempt power cycle [ 170.834529][ T5704] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.852891][ T5704] usb 5-1: device descriptor read/8, error -71 [ 171.679785][ T5731] usb 2-1: USB disconnect, device number 11 [ 171.742177][ T5704] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 171.764357][ T5704] usb 5-1: device descriptor read/8, error -71 [ 171.829053][ T31] audit: type=1400 audit(1788082565.748:397): avc: denied { write } for pid=6788 comm="syz.0.265" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.853443][ T31] audit: type=1400 audit(1788082565.778:398): avc: denied { ioctl } for pid=6788 comm="syz.0.265" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.879929][ T5704] usb usb5-port1: unable to enumerate USB device [ 171.967945][ T31] audit: type=1400 audit(1788082565.888:399): avc: denied { ioctl } for pid=6792 comm="syz.0.266" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.495412][ T5731] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.665436][ T5731] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.687008][ T5731] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 172.687057][ T5731] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 172.691297][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 172.691320][ T5731] usb 5-1: Product: syz [ 172.691333][ T5731] usb 5-1: Manufacturer: syz [ 172.939981][ T6810] FAULT_INJECTION: forcing a failure. [ 172.939981][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.953487][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 172.953515][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 172.953526][ T6810] Call Trace: [ 172.953533][ T6810] [ 172.953540][ T6810] dump_stack_lvl+0x100/0x190 [ 172.953572][ T6810] should_fail_ex.cold+0x5/0xa [ 172.953598][ T6810] _copy_from_user+0x2e/0xd0 [ 172.953626][ T6810] copy_msghdr_from_user+0x9f/0x4c0 [ 172.953651][ T6810] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 172.953678][ T6810] ? _kstrtoull+0x144/0x200 [ 172.953697][ T6810] ? __pfx__kstrtoull+0x10/0x10 [ 172.953721][ T6810] ___sys_sendmsg+0x106/0x1e0 [ 172.953746][ T6810] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.953779][ T6810] ? __fget_files+0x34/0x3d0 [ 172.953817][ T6810] __sys_sendmmsg+0x20c/0x440 [ 172.953838][ T6810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.953855][ T6810] ? ksys_write+0x190/0x250 [ 172.953890][ T6810] ? fput+0x7c/0x100 [ 172.953912][ T6810] ? ksys_write+0x1ac/0x250 [ 172.953928][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 172.953949][ T6810] __x64_sys_sendmmsg+0x9c/0x100 [ 172.953967][ T6810] ? lockdep_hardirqs_on+0x7d/0x110 [ 172.953987][ T6810] do_syscall_64+0x123/0x790 [ 172.954010][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.954029][ T6810] RIP: 0033:0x7fe7afd9e159 [ 172.954046][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.954064][ T6810] RSP: 002b:00007fe7b0c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.954083][ T6810] RAX: ffffffffffffffda RBX: 00007fe7b0025fa0 RCX: 00007fe7afd9e159 [ 172.954095][ T6810] RDX: 0000000000034000 RSI: 0000200000001d00 RDI: 0000000000000003 [ 172.954105][ T6810] RBP: 00007fe7b0c55090 R08: 0000000000000000 R09: 0000000000000000 [ 172.954116][ T6810] R10: 0000000024005805 R11: 0000000000000246 R12: 0000000000000001 [ 172.954127][ T6810] R13: 00007fe7b0026038 R14: 00007fe7b0025fa0 R15: 00007ffe565b84a8 [ 172.954151][ T6810] [ 172.997474][ T5704] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.005838][ T31] audit: type=1400 audit(1788082566.858:400): avc: denied { create } for pid=6809 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.005883][ T31] audit: type=1400 audit(1788082566.858:401): avc: denied { connect } for pid=6809 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.005933][ T31] audit: type=1400 audit(1788082566.858:402): avc: denied { ioctl } for pid=6809 comm="syz.1.272" path="socket:[12284]" dev="sockfs" ino=12284 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.066185][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 173.261153][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 173.267282][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 173.267361][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 173.518933][ T5731] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 173.570813][ T5731] usb 5-1: USB disconnect, device number 11 [ 173.616861][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 173.642103][ T5704] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 173.714808][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.723063][ T5704] usb 1-1: Product: syz [ 173.727283][ T5704] usb 1-1: Manufacturer: syz [ 173.727303][ T5704] usb 1-1: SerialNumber: syz [ 173.772266][ T5704] usb 1-1: config 0 descriptor?? [ 173.781723][ T5704] usb 1-1: selecting invalid altsetting 1 [ 173.787889][ T5704] technisat-usb2: could not set alternate setting to 0 [ 173.974404][ T6822] FAULT_INJECTION: forcing a failure. [ 173.974404][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 173.978829][ T6818] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.273' sets config #0 [ 173.997995][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) [ 173.998019][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 173.998029][ T6822] Call Trace: [ 173.998035][ T6822] [ 173.998041][ T6822] dump_stack_lvl+0x100/0x190 [ 173.998072][ T6822] should_fail_ex.cold+0x5/0xa [ 173.998100][ T6822] should_failslab+0xc2/0x120 [ 173.998123][ T6822] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.998149][ T6822] ? rtnl_newlink+0x139/0x2620 [ 173.998170][ T6822] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.998189][ T6822] rtnl_newlink+0x139/0x2620 [ 173.998216][ T6822] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.998232][ T6822] ? avc_has_perm_noaudit+0x56/0x3b0 [ 173.998254][ T6822] ? find_held_lock+0x2b/0x80 [ 173.998279][ T6822] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 173.998300][ T6822] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 173.998333][ T6822] ? __lock_acquire+0x4c5/0x1ec0 [ 173.998361][ T6822] ? lock_acquire+0x1d1/0x380 [ 173.998379][ T6822] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 173.998398][ T6822] ? find_held_lock+0x2b/0x80 [ 173.998421][ T6822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 173.998439][ T6822] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 173.998459][ T6822] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.998479][ T6822] rtnetlink_rcv_msg+0x95e/0xe90 [ 173.998500][ T6822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.998526][ T6822] ? ref_tracker_free+0x37e/0x6c0 [ 173.998550][ T6822] netlink_rcv_skb+0x159/0x420 [ 173.998578][ T6822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.998600][ T6822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.998635][ T6822] ? netlink_deliver_tap+0x1ae/0xcc0 [ 173.998665][ T6822] netlink_unicast+0x585/0x850 [ 173.998696][ T6822] ? __pfx_netlink_unicast+0x10/0x10 [ 173.998728][ T6822] netlink_sendmsg+0x8b0/0xda0 [ 173.998764][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.998793][ T6822] ? selinux_socket_sendmsg+0x198/0x2f0 [ 173.998828][ T6822] ____sys_sendmsg+0xa4d/0xbe0 [ 173.998850][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.998878][ T6822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.998905][ T6822] ? lock_acquire+0x1d1/0x380 [ 173.998922][ T6822] ? get_pid_task+0x2a/0x250 [ 173.998949][ T6822] ___sys_sendmsg+0x190/0x1e0 [ 173.998974][ T6822] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.998997][ T6822] ? get_pid_task+0x106/0x250 [ 173.999029][ T6822] ? find_held_lock+0x2b/0x80 [ 173.999069][ T6822] __sys_sendmsg+0x160/0x210 [ 173.999098][ T6822] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.999139][ T6822] do_syscall_64+0x123/0x790 [ 173.999163][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.999181][ T6822] RIP: 0033:0x7fe7afd9e159 [ 173.999197][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.999214][ T6822] RSP: 002b:00007fe7b0c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.999231][ T6822] RAX: ffffffffffffffda RBX: 00007fe7b0025fa0 RCX: 00007fe7afd9e159 [ 173.999243][ T6822] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 173.999253][ T6822] RBP: 00007fe7b0c55090 R08: 0000000000000000 R09: 0000000000000000 [ 173.999262][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.999272][ T6822] R13: 00007fe7b0026038 R14: 00007fe7b0025fa0 R15: 00007ffe565b84a8 [ 173.999293][ T6822] [ 174.863374][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 174.863392][ T31] audit: type=1400 audit(1788082567.898:405): avc: denied { append } for pid=6811 comm="syz.3.273" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.937159][ T5704] technisat-usb2: firmware version: 0.0 [ 174.937182][ T5704] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 174.942504][ T31] audit: type=1400 audit(1788082568.868:406): avc: denied { read } for pid=6811 comm="syz.3.273" path="socket:[12959]" dev="sockfs" ino=12959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.273029][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.282935][ T5704] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 175.291813][ T5704] usb 1-1: media controller created [ 175.309014][ T5704] technisat-usb2: i2c-error: out failed 53 = -22 [ 175.309080][ T5704] dvb-usb: MAC address reading failed. [ 175.335388][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.472429][ T5704] DVB: Unable to find symbol stv090x_attach() [ 176.212107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.362117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.482798][ T5704] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 176.705087][ T5704] rc_core: IR keymap rc-technisat-usb2 not found [ 176.705112][ T5704] Registered IR keymap rc-empty [ 176.705627][ T5704] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 176.733024][ T5704] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 176.770518][ T5704] dvb-usb: schedule remote query interval to 100 msecs. [ 176.782981][ T5704] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 176.795469][ T5824] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.808710][ T5704] usb 1-1: USB disconnect, device number 9 [ 176.914966][ T5704] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 176.936316][ T5824] usb 2-1: device descriptor read/64, error -71 [ 177.194583][ T5824] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 177.364967][ T6861] siw: device registration error -23 [ 177.435087][ T5824] usb 2-1: device descriptor read/64, error -71 [ 177.542555][ T5824] usb usb2-port1: attempt power cycle [ 178.068941][ T31] audit: type=1400 audit(1788082571.988:407): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.252175][ T5824] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 178.272759][ T5824] usb 2-1: device descriptor read/8, error -71 [ 178.447556][ T31] audit: type=1400 audit(1788082572.368:408): avc: denied { write } for pid=6867 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.512205][ T5824] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.532383][ T5724] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.684477][ T5724] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 178.705951][ T5724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.707488][ T5724] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 178.722163][ T5824] usb 2-1: device not accepting address 15, error -71 [ 178.722377][ T5824] usb usb2-port1: unable to enumerate USB device [ 178.745882][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.745909][ T5724] usb 1-1: Product: syz [ 178.745935][ T5724] usb 1-1: Manufacturer: syz [ 178.745950][ T5724] usb 1-1: SerialNumber: syz [ 178.782280][ T5724] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 178.795454][ T5724] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 178.795454][ T5724] Please send a copy of this message to and [ 179.188378][ T31] audit: type=1400 audit(1788082573.108:409): avc: denied { bind } for pid=6865 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.221770][ T31] audit: type=1400 audit(1788082573.138:410): avc: denied { listen } for pid=6865 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.292719][ T5724] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 179.329987][ T5724] usb 1-1: USB disconnect, device number 10 [ 179.371873][ T31] audit: type=1400 audit(1788082573.288:411): avc: denied { create } for pid=6865 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.573711][ T6884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6884 comm=syz.3.286 [ 179.643370][ T6883] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 179.835103][ T31] audit: type=1400 audit(1788082573.748:412): avc: denied { ioctl } for pid=6894 comm="syz.4.279" path="socket:[13023]" dev="sockfs" ino=13023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.835441][ T31] audit: type=1400 audit(1788082573.748:413): avc: denied { bind } for pid=6894 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.886026][ T31] audit: type=1400 audit(1788082573.758:414): avc: denied { connect } for pid=6894 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.928123][ T31] audit: type=1400 audit(1788082573.828:415): avc: denied { write } for pid=6894 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.114727][ T31] audit: type=1400 audit(1788082574.018:416): avc: denied { append } for pid=6894 comm="syz.4.279" name="video1" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 181.496084][ T31] audit: type=1400 audit(1788082575.418:417): avc: denied { write } for pid=6871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.015006][ T6910] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 182.015130][ T6910] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 182.497223][ T6913] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 182.562383][ T5338] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 182.712238][ T5338] usb 2-1: Using ep0 maxpacket: 16 [ 182.721149][ T5338] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 182.743933][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.743975][ T5338] usb 2-1: Product: syz [ 182.744001][ T5338] usb 2-1: Manufacturer: syz [ 182.744019][ T5338] usb 2-1: SerialNumber: syz [ 182.753653][ T31] audit: type=1400 audit(1788082576.678:418): avc: denied { write } for pid=6916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.802366][ T5338] usb 2-1: config 0 descriptor?? [ 182.823585][ T5338] usb 2-1: selecting invalid altsetting 1 [ 182.829413][ T5338] technisat-usb2: could not set alternate setting to 0 [ 183.277833][ T31] audit: type=1400 audit(1788082577.168:419): avc: denied { bind } for pid=6914 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.751899][ T5338] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 183.752791][ T5338] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 183.752821][ T5338] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 183.919196][ T6928] FAULT_INJECTION: forcing a failure. [ 183.919196][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 183.919231][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 183.919253][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.919265][ T6928] Call Trace: [ 183.919271][ T6928] [ 183.919278][ T6928] dump_stack_lvl+0x100/0x190 [ 183.919306][ T6928] should_fail_ex.cold+0x5/0xa [ 183.919331][ T6928] should_failslab+0xc2/0x120 [ 183.919351][ T6928] kmem_cache_alloc_noprof+0x92/0x6a0 [ 183.919370][ T6928] ? d_instantiate+0x8a/0xb0 [ 183.919394][ T6928] ? alloc_empty_file+0x5b/0x1c0 [ 183.919420][ T6928] alloc_empty_file+0x5b/0x1c0 [ 183.919442][ T6928] alloc_file_pseudo+0x183/0x290 [ 183.919465][ T6928] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 183.919486][ T6928] ? alloc_fd+0x471/0x7a0 [ 183.919510][ T6928] sock_alloc_file+0x50/0x210 [ 183.919528][ T6928] __sys_socket+0x1c0/0x260 [ 183.919549][ T6928] ? __pfx___sys_socket+0x10/0x10 [ 183.919575][ T6928] __x64_sys_socket+0x72/0xb0 [ 183.919595][ T6928] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.919614][ T6928] do_syscall_64+0x123/0x790 [ 183.919634][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.919652][ T6928] RIP: 0033:0x7faad419e159 [ 183.919667][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.919683][ T6928] RSP: 002b:00007faad4fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 183.919700][ T6928] RAX: ffffffffffffffda RBX: 00007faad4426090 RCX: 00007faad419e159 [ 183.919726][ T6928] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 183.919736][ T6928] RBP: 00007faad4235024 R08: 0000000000000000 R09: 0000000000000000 [ 183.919746][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.919756][ T6928] R13: 00007faad4426128 R14: 00007faad4426090 R15: 00007ffdc51c7328 [ 183.919779][ T6928] [ 184.133368][ T5711] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.205618][ T6933] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 184.286996][ T5711] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 184.292247][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.292287][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.316079][ T5711] usb 5-1: config 0 descriptor?? [ 184.484358][ T6937] mmap: syz.0.298 (6937) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.491525][ T6937] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.298'. [ 184.496490][ T31] audit: type=1400 audit(1788082578.408:420): avc: denied { name_connect } for pid=6934 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 184.570572][ T31] audit: type=1400 audit(1788082578.468:421): avc: denied { mount } for pid=6934 comm="syz.0.298" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 184.972829][ T5711] elecom 0003:056E:010C.0006: unknown main item tag 0x2 [ 184.979933][ T5711] elecom 0003:056E:010C.0006: unknown main item tag 0x2 [ 184.979951][ T5711] elecom 0003:056E:010C.0006: unknown global tag 0xd [ 184.979960][ T5711] elecom 0003:056E:010C.0006: item 0 1 1 13 parsing failed [ 184.980284][ T5711] elecom 0003:056E:010C.0006: probe with driver elecom failed with error -22 [ 185.061306][ T31] audit: type=1400 audit(1788082578.978:422): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 185.178326][ T31] audit: type=1400 audit(1788082579.098:423): avc: denied { mount } for pid=6943 comm="syz.1.300" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 185.692185][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 185.788749][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 185.788785][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 185.788806][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 185.788826][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 185.903348][ T31] audit: type=1400 audit(1788082579.828:424): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 186.168925][ T6961] block2mtd: error: cannot open device #! ./mnt [ 186.194803][ T6962] capability: warning: `syz.0.304' uses 32-bit capabilities (legacy support in use) [ 186.238021][ T31] audit: type=1400 audit(1788082580.158:425): avc: denied { setopt } for pid=6966 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 186.265880][ T31] audit: type=1400 audit(1788082580.188:426): avc: denied { connect } for pid=6966 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.341335][ T31] audit: type=1400 audit(1788082580.258:427): avc: denied { setopt } for pid=6966 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.366689][ T31] audit: type=1400 audit(1788082580.288:428): avc: denied { shutdown } for pid=6966 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.485410][ T31] audit: type=1400 audit(1788082580.408:429): avc: denied { read write } for pid=6971 comm="syz.1.306" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 186.490726][ T31] audit: type=1400 audit(1788082580.408:430): avc: denied { open } for pid=6971 comm="syz.1.306" path="/dev/input/mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 186.577471][ T31] audit: type=1400 audit(1788082580.498:431): avc: denied { getattr } for pid=6971 comm="syz.1.306" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.702346][ T5731] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.753981][ T6976] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.754023][ T6976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.808157][ T5724] usb 5-1: USB disconnect, device number 12 [ 186.852764][ T5731] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 186.853640][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.853676][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.872278][ T5696] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.929986][ T5731] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 186.930158][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 186.935075][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 186.936048][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 186.936104][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 186.957795][ T5731] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 186.971188][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 186.973925][ T5731] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 186.997221][ T5731] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 187.033895][ T5696] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 187.045074][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.058290][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.183535][ T5696] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 187.193813][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 187.202132][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 187.220039][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 187.230770][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 187.292629][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.308'. [ 187.557126][ T5696] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 187.629614][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 187.640579][ T5696] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 187.674119][ T5696] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 187.848568][ T5724] usb 3-1: USB disconnect, device number 5 [ 187.888784][ T5724] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 187.963543][ T5724] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 187.963996][ T5724] keyspan 3-1:1.0: device disconnected [ 188.327019][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 188.747297][ T6989] siw: device registration error -23 [ 188.759581][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.654456][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 190.692226][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.771116][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.773675][ T6997] jffs2: notice: (6997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.810938][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 190.843692][ T6725] IPVS: starting estimator thread 0... [ 191.143102][ T7003] IPVS: using max 37 ests per chain, 88800 per kthread [ 191.194617][ T5731] usb 4-1: USB disconnect, device number 5 [ 191.269794][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 191.276085][ T31] audit: type=1400 audit(1788082585.188:435): avc: denied { ioctl } for pid=7005 comm="syz.1.315" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.306052][ T31] audit: type=1400 audit(1788082585.228:436): avc: denied { set_context_mgr } for pid=7005 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 191.411143][ T7006] binder: BINDER_SET_CONTEXT_MGR already set [ 191.426119][ T7006] binder: 7005:7006 ioctl 4018620d 200000004a80 returned -16 [ 191.502946][ T31] audit: type=1400 audit(1788082585.418:437): avc: denied { map } for pid=7005 comm="syz.1.315" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.748080][ T5731] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 191.765655][ T5731] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 191.799018][ T5731] keyspan 4-1:1.0: device disconnected [ 192.454589][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.443800][ T30] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 193.446580][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.446632][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.446820][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.489005][ T30] ums-alauda 5-1:1.0: USB Mass Storage device detected [ 193.529753][ T30] ums-alauda 5-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 193.529753][ T30] Please send a copy of this message to and [ 193.785085][ T7017] syz.2.318 (7017): drop_caches: 0 [ 194.653079][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7026 comm=syz.1.322 [ 194.779155][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=7026 comm=syz.1.322 [ 194.892399][ T5824] usb 5-1: USB disconnect, device number 13 [ 195.917784][ T31] audit: type=1400 audit(1788082589.308:438): avc: denied { write } for pid=7029 comm="syz.1.325" name="instances" dev="tracefs" ino=4458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.917854][ T31] audit: type=1400 audit(1788082589.308:439): avc: denied { add_name } for pid=7029 comm="syz.1.325" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.917883][ T31] audit: type=1400 audit(1788082589.308:440): avc: denied { create } for pid=7029 comm="syz.1.325" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 196.130144][ T7034] sd 0:0:1:0: PR command failed: 1026 [ 196.130206][ T7034] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 196.130235][ T7034] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 197.313403][ T30] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 197.462923][ T30] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 197.463780][ T30] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 197.463812][ T30] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.463834][ T30] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.463859][ T30] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 197.463879][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.463902][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.471518][ T30] usb 3-1: config 0 descriptor?? [ 197.876209][ T31] audit: type=1400 audit(1788082591.718:441): avc: denied { ioctl } for pid=7058 comm="syz.0.333" path="socket:[13871]" dev="sockfs" ino=13871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.963963][ T30] ryos 0003:1E7D:3138.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 198.435934][ T31] audit: type=1400 audit(1788082592.358:442): avc: denied { read append } for pid=7047 comm="syz.2.329" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.436956][ T31] audit: type=1400 audit(1788082592.358:443): avc: denied { open } for pid=7047 comm="syz.2.329" path="/dev/usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.488560][ T5711] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 198.496623][ T31] audit: type=1400 audit(1788082592.408:444): avc: denied { map } for pid=7047 comm="syz.2.329" path="/dev/usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.496668][ T31] audit: type=1400 audit(1788082592.408:445): avc: denied { execute } for pid=7047 comm="syz.2.329" path="/dev/usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.500147][ T31] audit: type=1400 audit(1788082592.418:446): avc: denied { ioctl } for pid=7047 comm="syz.2.329" path="/dev/usbmon1" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.728126][ T5711] usb 1-1: Using ep0 maxpacket: 16 [ 198.735505][ T10] usb 3-1: USB disconnect, device number 6 [ 198.742982][ T5711] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 198.754098][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 198.754150][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.779863][ T5711] usb 1-1: config 0 descriptor?? [ 198.790137][ T7059] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 199.065720][ T7068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.116773][ T7068] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 199.448350][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.576085][ T10] usb 4-1: device descriptor read/64, error -71 [ 200.492751][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.622299][ T10] usb 4-1: device descriptor read/64, error -71 [ 200.735920][ T10] usb usb4-port1: attempt power cycle [ 201.039844][ T5711] usbhid 1-1:0.0: can't add hid device: -71 [ 201.071229][ T5711] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 201.103554][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.150679][ T10] usb 4-1: device descriptor read/8, error -71 [ 201.205052][ T5711] usb 1-1: USB disconnect, device number 11 [ 201.437752][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.505652][ T10] usb 4-1: device descriptor read/8, error -71 [ 201.613996][ T10] usb usb4-port1: unable to enumerate USB device [ 201.722517][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 201.888445][ T9] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 201.910872][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.924029][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 201.935889][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.274849][ T9] ums-alauda 5-1:1.0: USB Mass Storage device detected [ 202.298965][ T9] ums-alauda 5-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 202.298965][ T9] Please send a copy of this message to and [ 202.351983][ T7081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7081 comm=syz.2.336 [ 202.493617][ T30] usb 5-1: USB disconnect, device number 14 [ 203.009727][ T7087] xt_connbytes: Forcing CT accounting to be enabled [ 203.494335][ T31] audit: type=1400 audit(1788082597.418:447): avc: denied { mounton } for pid=7077 comm="syz.1.337" path="/60/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 203.495433][ T7092] fuse: Unknown parameter 'ootmo' [ 203.506893][ T31] audit: type=1400 audit(1788082597.428:448): avc: denied { mount } for pid=7085 comm="syz.2.339" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 203.548726][ T6725] IPVS: starting estimator thread 0... [ 203.790795][ T7094] IPVS: using max 42 ests per chain, 100800 per kthread [ 203.896681][ T31] audit: type=1400 audit(1788082597.818:449): avc: denied { setattr } for pid=7077 comm="syz.1.337" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 203.952052][ T31] audit: type=1400 audit(1788082597.868:450): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 204.006020][ T31] audit: type=1400 audit(1788082597.928:451): avc: denied { write } for pid=7097 comm="syz.2.342" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.442195][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.459493][ T7122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.633475][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 205.636805][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 205.637695][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 205.637721][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.637749][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.639838][ T10] usb 5-1: config 0 descriptor?? [ 206.213654][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 206.216287][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 206.216359][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'. [ 206.522943][ T10] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 206.522986][ T10] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 206.523018][ T10] corsair-psu 0003:1B1C:1C09.0008: unknown main item tag 0x0 [ 206.523040][ T10] corsair-psu 0003:1B1C:1C09.0008: item fetching failed at offset 4/5 [ 206.524823][ T10] corsair-psu 0003:1B1C:1C09.0008: probe with driver corsair-psu failed with error -22 [ 206.813037][ T31] audit: type=1400 audit(1788082600.738:452): avc: denied { create } for pid=7132 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.993004][ T31] audit: type=1400 audit(1788082600.918:453): avc: denied { node_bind } for pid=7136 comm="syz.2.353" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 207.072312][ T5731] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.125450][ T5724] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 207.227019][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 207.245380][ T5731] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 207.266692][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.266789][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.268299][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.332962][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 207.343412][ T5724] usb 1-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 207.377623][ T5724] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 207.377666][ T5724] usb 1-1: config 9 has an invalid interface number: 221 but max is 1 [ 207.400317][ T5724] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 207.411162][ T5724] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 207.422077][ T5724] usb 1-1: config 9 has no interface number 0 [ 207.422313][ T5724] usb 1-1: config 9 interface 221 has no altsetting 0 [ 207.448828][ T5731] usb 4-1: config 0 descriptor?? [ 207.503696][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.503872][ T5724] usb 1-1: Product: syz [ 207.503950][ T5724] usb 1-1: Manufacturer: syz [ 207.504017][ T5724] usb 1-1: SerialNumber: syz [ 208.047582][ T31] audit: type=1400 audit(1788082601.968:454): avc: denied { append } for pid=7134 comm="syz.0.352" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.331018][ T31] audit: type=1400 audit(1788082602.248:455): avc: denied { ioctl } for pid=7134 comm="syz.0.352" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.763217][ T30] usb 5-1: USB disconnect, device number 15 [ 208.850116][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.850483][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.987719][ T31] audit: type=1400 audit(1788082602.908:456): avc: denied { setopt } for pid=7136 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.130208][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 209.149796][ T4922] Bluetooth: hci0: unexpected event for opcode 0x040d [ 209.576066][ T7153] binfmt_misc: register: failed to install interpreter ./file0 [ 209.630837][ T5724] usb 1-1: USB disconnect, device number 12 [ 209.684042][ T6453] udevd[6453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.719189][ T31] audit: type=1400 audit(1788082603.638:457): avc: denied { accept } for pid=7154 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.929632][ T7164] erofs (device loop1): cannot find valid erofs superblock [ 209.941985][ T5731] usbhid 4-1:0.0: can't add hid device: -71 [ 209.944679][ T5731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 209.961860][ T5731] usb 4-1: USB disconnect, device number 10 [ 210.011746][ T31] audit: type=1400 audit(1788082603.928:458): avc: denied { name_bind } for pid=7163 comm="syz.1.358" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 211.057303][ T31] audit: type=1326 audit(1788082604.948:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.085645][ T31] audit: type=1326 audit(1788082604.948:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.085775][ T31] audit: type=1326 audit(1788082604.948:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.085875][ T31] audit: type=1326 audit(1788082604.948:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.085980][ T31] audit: type=1326 audit(1788082604.948:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.086076][ T31] audit: type=1326 audit(1788082604.948:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.086175][ T31] audit: type=1326 audit(1788082604.948:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.360" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e759e159 code=0x7ffc0000 [ 211.859631][ T7175] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 211.888833][ T7175] CIFS: Attempting to mount //127.0.0.1/share [ 211.945004][ T7175] CIFS: VFS: Error connecting to socket. Aborting operation. [ 211.949198][ T7175] CIFS: VFS: cifs_mount failed w/return code = -111 [ 213.893212][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 213.940756][ T4922] Bluetooth: hci0: unexpected event for opcode 0x040d [ 213.970823][ T7189] overlayfs: failed to create directory ./bus/index (errno: 1); mounting read-only [ 213.970871][ T7189] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 214.130370][ T7195] syzkaller0: entered promiscuous mode [ 214.130409][ T7195] syzkaller0: entered allmulticast mode [ 214.157281][ T7202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.162304][ T31] kauditd_printk_skb: 115 callbacks suppressed [ 214.162334][ T31] audit: type=1400 audit(1788082608.068:581): avc: denied { ioctl } for pid=7194 comm="syz.0.369" path="socket:[14123]" dev="sockfs" ino=14123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 214.979568][ T4436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.078652][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.185338][ T4436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.233841][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.243360][ T31] audit: type=1400 audit(1788082609.158:582): avc: denied { create } for pid=7216 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 215.268595][ T9] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 215.268648][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 215.305655][ T9] usb 5-1: string descriptor 0 read error: -22 [ 215.305784][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.389680][ T4436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.450165][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.460760][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.469322][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.480196][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.487987][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.555919][ T4436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.049888][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 216.056460][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 216.082697][ T9] usb 5-1: USB disconnect, device number 16 [ 216.230293][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 216.895475][ T4436] bridge_slave_1: left allmulticast mode [ 216.895542][ T4436] bridge_slave_1: left promiscuous mode [ 216.896403][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.969084][ T4436] bridge_slave_0: left allmulticast mode [ 216.981416][ T4436] bridge_slave_0: left promiscuous mode [ 216.981619][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.993692][ T7248] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 217.547437][ T5615] Bluetooth: hci4: command tx timeout [ 217.771518][ T31] audit: type=1400 audit(1788082611.688:583): avc: denied { write } for pid=7240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.227933][ T7263] netlink: Unknown conntrack attr (type=13573, max=9) [ 218.364106][ T7263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.640764][ T5615] Bluetooth: hci4: command tx timeout [ 219.904980][ T31] audit: type=1400 audit(1788082613.828:584): avc: denied { write } for pid=7271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.998081][ T31] audit: type=1400 audit(1788082613.918:585): avc: denied { map } for pid=7269 comm="syz.1.385" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.023872][ T31] audit: type=1400 audit(1788082613.928:586): avc: denied { read write } for pid=7269 comm="syz.1.385" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 220.049684][ T31] audit: type=1400 audit(1788082613.928:587): avc: denied { open } for pid=7269 comm="syz.1.385" path="/71/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 220.085018][ T4436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.121339][ T4436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.141760][ T4436] bond0 (unregistering): Released all slaves [ 220.197921][ T4436] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 220.209123][ T4436] veth0_to_bond: left promiscuous mode [ 220.215284][ T4436] veth0_to_bond: left allmulticast mode [ 220.219513][ T6725] smbdirect: ib_dev[syz1] removed [ 220.229214][ T4436] bond1 (unregistering): Released all slaves [ 220.449120][ T7275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.457233][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.470073][ T9] infiniband syz1: ib_query_port failed (-19) [ 220.487927][ T6725] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.505205][ T6725] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.515562][ T6725] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.524945][ T6725] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.529520][ T31] audit: type=1400 audit(1788082614.348:588): avc: denied { create } for pid=7278 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 220.529563][ T31] audit: type=1400 audit(1788082614.358:589): avc: denied { connect } for pid=7278 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 221.016635][ T7298] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.203890][ T7301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'. [ 221.702870][ T5615] Bluetooth: hci4: command tx timeout [ 221.776850][ T31] audit: type=1400 audit(1788082615.698:590): avc: denied { write } for pid=7282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.909792][ T31] audit: type=1400 audit(1788082615.828:591): avc: denied { setopt } for pid=7312 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.059454][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.059808][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.080268][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 222.141174][ T31] audit: type=1400 audit(1788082616.058:592): avc: denied { bind } for pid=7318 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.196052][ T31] audit: type=1400 audit(1788082616.118:593): avc: denied { write } for pid=7326 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.358416][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 223.517840][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.518683][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.518704][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.518719][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.518752][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 223.518774][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 223.526710][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.526733][ T9] usb 1-1: Product: syz [ 223.526745][ T9] usb 1-1: Manufacturer: syz [ 223.536881][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 223.536898][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 223.569830][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 223.569852][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 223.712537][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.741297][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.741681][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.783779][ T5615] Bluetooth: hci4: command tx timeout [ 223.790925][ T5711] usb 1-1: USB disconnect, device number 13 [ 223.903150][ T4436] hsr_slave_0: left promiscuous mode [ 223.925710][ T4436] hsr_slave_1: left promiscuous mode [ 223.926432][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.926463][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.947881][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.947919][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.103716][ T4436] veth1_macvtap: left promiscuous mode [ 224.103792][ T4436] veth0_macvtap: left promiscuous mode [ 224.105404][ T4436] veth1_vlan: left promiscuous mode [ 224.105478][ T4436] veth0_vlan: left promiscuous mode [ 224.635156][ T7350] process 'syz.3.398' launched './file1' with NULL argv: empty string added [ 225.040531][ T7357] FAULT_INJECTION: forcing a failure. [ 225.040531][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 225.040586][ T7357] CPU: 1 UID: 0 PID: 7357 Comm: syz.0.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.040613][ T7357] Tainted: [L]=SOFTLOCKUP [ 225.040620][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.040632][ T7357] Call Trace: [ 225.040638][ T7357] [ 225.040645][ T7357] dump_stack_lvl+0x100/0x190 [ 225.040677][ T7357] should_fail_ex.cold+0x5/0xa [ 225.040699][ T7357] ? __netlink_lookup+0x652/0x900 [ 225.040728][ T7357] should_failslab+0xc2/0x120 [ 225.040751][ T7357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 225.040772][ T7357] ? skb_clone+0x190/0x400 [ 225.040794][ T7357] skb_clone+0x190/0x400 [ 225.040813][ T7357] netlink_deliver_tap+0xaed/0xcc0 [ 225.040843][ T7357] netlink_unicast+0x62b/0x850 [ 225.040874][ T7357] ? __pfx_netlink_unicast+0x10/0x10 [ 225.040908][ T7357] netlink_sendmsg+0x8b0/0xda0 [ 225.040939][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.040968][ T7357] ? selinux_socket_sendmsg+0x198/0x2f0 [ 225.041000][ T7357] ____sys_sendmsg+0xa4d/0xbe0 [ 225.041021][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.041049][ T7357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.041077][ T7357] ? lock_acquire+0x1d1/0x380 [ 225.041095][ T7357] ? get_pid_task+0x2a/0x250 [ 225.041122][ T7357] ___sys_sendmsg+0x190/0x1e0 [ 225.041147][ T7357] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.041170][ T7357] ? get_pid_task+0x106/0x250 [ 225.041201][ T7357] ? find_held_lock+0x2b/0x80 [ 225.041240][ T7357] __sys_sendmsg+0x160/0x210 [ 225.041269][ T7357] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.041311][ T7357] do_syscall_64+0x123/0x790 [ 225.041335][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.041355][ T7357] RIP: 0033:0x7faad419e159 [ 225.041371][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.041388][ T7357] RSP: 002b:00007faad4fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.041406][ T7357] RAX: ffffffffffffffda RBX: 00007faad4425fa0 RCX: 00007faad419e159 [ 225.041419][ T7357] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 225.041430][ T7357] RBP: 00007faad4fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 225.041442][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.041453][ T7357] R13: 00007faad4426038 R14: 00007faad4425fa0 R15: 00007ffdc51c7328 [ 225.041477][ T7357] [ 225.315862][ T7362] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 225.449619][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.465749][ T4436] team0 (unregistering): Port device team_slave_1 removed [ 225.478802][ T4436] team0 (unregistering): Port device team_slave_0 removed [ 225.579126][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.405'. [ 226.002136][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 226.002648][ T30] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 226.006242][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.006271][ T30] usb 1-1: Product: syz [ 226.006288][ T30] usb 1-1: Manufacturer: syz [ 226.006304][ T30] usb 1-1: SerialNumber: syz [ 226.020539][ T30] usb 1-1: config 0 descriptor?? [ 226.038529][ T30] usb 1-1: selecting invalid altsetting 1 [ 226.038547][ T30] technisat-usb2: could not set alternate setting to 0 [ 226.533826][ T30] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 226.565418][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 226.625809][ T6453] udevd[6453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 227.269619][ T5731] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.336700][ T7387] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 227.389243][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.415140][ T7387] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.436526][ T5731] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 227.437432][ T5731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.437505][ T5731] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.437527][ T5731] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.437548][ T5731] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.437576][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.454777][ T4436] IPVS: stop unused estimator thread 0... [ 227.562593][ T5711] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 227.684782][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.684913][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.685066][ T7222] bridge_slave_0: entered allmulticast mode [ 227.722216][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 227.728083][ T5711] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 227.740576][ T7222] bridge_slave_0: entered promiscuous mode [ 227.748834][ T5711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.760647][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.772916][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.772953][ T5711] usb 5-1: SerialNumber: syz [ 227.805645][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.817579][ T5711] usb 5-1: 0:2 : does not exist [ 227.824535][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.824728][ T7222] bridge_slave_1: entered allmulticast mode [ 227.855876][ T7222] bridge_slave_1: entered promiscuous mode [ 227.986189][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 227.992607][ T31] audit: type=1400 audit(1788082621.908:595): avc: denied { write } for pid=7384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.182531][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.199862][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.255591][ T31] audit: type=1400 audit(1788082622.178:596): avc: denied { write } for pid=7416 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.346868][ T7222] team0: Port device team_slave_0 added [ 228.358007][ T7222] team0: Port device team_slave_1 added [ 228.391831][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 228.445636][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.445682][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.445701][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.449886][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.449901][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.449920][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.568967][ T7222] hsr_slave_0: entered promiscuous mode [ 228.581752][ T7222] hsr_slave_1: entered promiscuous mode [ 228.796387][ T5731] gud 4-1:1.0: [drm] [PLANE:35:plane-0] pixel format with alpha exposed but blend mode not setup. Please fix. [ 228.857086][ T5731] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 228.909262][ T31] audit: type=1400 audit(1788082622.828:597): avc: denied { write } for pid=7422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.001898][ T31] audit: type=1400 audit(1788082622.918:598): avc: denied { read } for pid=7379 comm="syz.3.408" name="card1" dev="devtmpfs" ino=3277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.001995][ T31] audit: type=1400 audit(1788082622.918:599): avc: denied { open } for pid=7379 comm="syz.3.408" path="/dev/dri/card1" dev="devtmpfs" ino=3277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.007817][ T31] audit: type=1400 audit(1788082622.928:600): avc: denied { ioctl } for pid=7379 comm="syz.3.408" path="/dev/dri/card1" dev="devtmpfs" ino=3277 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.018690][ T7222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.038711][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.044100][ T7222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.063748][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.065438][ T7222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.067177][ T31] audit: type=1400 audit(1788082622.988:601): avc: denied { write } for pid=7433 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.090182][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.095591][ T7222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.114786][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.247207][ T31] audit: type=1400 audit(1788082623.168:602): avc: denied { create } for pid=7441 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.286579][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.310776][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 229.348309][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.369422][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.369505][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.413359][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.413478][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.456845][ T31] audit: type=1400 audit(1788082623.378:603): avc: denied { create } for pid=7450 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 229.537667][ T31] audit: type=1400 audit(1788082623.458:604): avc: denied { bind } for pid=7450 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 231.811632][ T5711] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 231.823493][ T5711] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 231.823541][ T5711] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 231.823557][ T5711] usb 5-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 231.826675][ T5711] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 231.830193][ T5711] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 231.838345][ T5711] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 231.843355][ T5711] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 231.866003][ T5711] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 231.912003][ T5711] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 231.919191][ T5711] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 232.031069][ T5711] usb 5-1: USB disconnect, device number 17 [ 232.275436][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.562953][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.597283][ T7222] veth0_vlan: entered promiscuous mode [ 232.607365][ T7222] veth1_vlan: entered promiscuous mode [ 232.631790][ T7222] veth0_macvtap: entered promiscuous mode [ 232.636164][ T7222] veth1_macvtap: entered promiscuous mode [ 232.654199][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.660294][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.712342][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 232.713761][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 232.715053][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 232.715073][ T9] usb 5-1: config 0 has no interface number 0 [ 232.715101][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.715118][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 232.715140][ T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.715160][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.716820][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.716839][ T9] usb 5-1: Product: syz [ 232.716852][ T9] usb 5-1: Manufacturer: syz [ 232.716864][ T9] usb 5-1: SerialNumber: syz [ 232.718853][ T9] usb 5-1: config 0 descriptor?? [ 232.734347][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input15 [ 232.742447][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.742483][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.742509][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.742534][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.885430][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.885464][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.975235][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.975276][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.003868][ T9] usb 5-1: USB disconnect, device number 18 [ 233.025919][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 233.025966][ T31] audit: type=1400 audit(1788082626.948:610): avc: denied { mounton } for pid=7222 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 233.083314][ T7486] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 233.425465][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.377'. [ 233.428019][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.377'. [ 233.428105][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.377'. [ 233.647761][ T31] audit: type=1400 audit(1788082627.568:611): avc: denied { view } for pid=7490 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.882384][ T5731] gud 4-1:1.0: [drm] format XR24 little-endian (0x34325258) not supported [ 234.891489][ T5731] gud 4-1:1.0: [drm] No compatible format found [ 234.905925][ T5731] gud 4-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 234.930670][ T7379] ------------[ cut here ]------------ [ 234.930711][ T7379] !set->fb [ 234.930744][ T7379] WARNING: drivers/gpu/drm/drm_atomic.c:2031 at __drm_atomic_helper_set_config+0xa45/0xee0, CPU#0: syz.3.408/7379 [ 234.951925][ T7379] Modules linked in: [ 234.956008][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.3.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.966853][ T7379] Tainted: [L]=SOFTLOCKUP [ 234.972341][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.982468][ T7379] RIP: 0010:__drm_atomic_helper_set_config+0xa45/0xee0 [ 234.989345][ T7379] Code: 84 c0 74 09 3c 03 7f 05 e8 28 6e b4 fc 45 89 75 38 e9 0e fb ff ff e8 6a 5b 41 fc 90 0f 0b 90 e9 9f f7 ff ff e8 5c 5b 41 fc 90 <0f> 0b 90 e9 47 f7 ff ff 8b 6c 24 28 e8 4a 5b 41 fc 49 8d 7c 24 08 [ 235.009044][ T7379] RSP: 0018:ffffc90006eff970 EFLAGS: 00010293 [ 235.015168][ T7379] RAX: 0000000000000000 RBX: ffff8880735f2580 RCX: 0000000000000000 [ 235.023708][ T7379] RDX: ffff888032802580 RSI: ffffffff85ca8bd4 RDI: ffff888032802580 [ 235.032968][ T7379] RBP: ffff888032436d00 R08: 0000000000000007 R09: fffffffffffff000 [ 235.040969][ T7379] R10: ffff88807c8c4000 R11: 0000000000000000 R12: ffff88803c91e600 [ 235.049766][ T7379] R13: ffff88807c8c4000 R14: ffff888054031800 R15: ffff88807febd328 [ 235.058130][ T7379] FS: 000055555b90e500(0000) GS:ffff888123b64000(0000) knlGS:0000000000000000 [ 235.067191][ T7379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.073863][ T7379] CR2: 00007ffd84028f52 CR3: 00000000760df000 CR4: 00000000003526f0 [ 235.081881][ T7379] Call Trace: [ 235.085189][ T7379] [ 235.088122][ T7379] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 235.094824][ T7379] ? drm_client_rotation+0x451/0x6a0 [ 235.100121][ T7379] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 235.106435][ T7379] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 235.112834][ T7379] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 235.119618][ T7379] ? drm_master_internal_acquire+0x21/0x80 [ 235.125568][ T7379] drm_client_modeset_commit_locked+0x14d/0x580 [ 235.131829][ T7379] drm_client_modeset_commit+0x4f/0x80 [ 235.138524][ T7379] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 235.147501][ T7379] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 235.154456][ T7379] drm_fbdev_client_restore+0x1b/0x30 [ 235.159858][ T7379] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 235.166024][ T7379] drm_client_dev_restore+0x205/0x2a0 [ 235.171436][ T7379] drm_release+0x2c6/0x360 [ 235.175878][ T7379] ? __pfx_drm_release+0x10/0x10 [ 235.180838][ T7379] __fput+0x3ff/0xb50 [ 235.184908][ T7379] task_work_run+0x150/0x240 [ 235.189520][ T7379] ? __pfx_task_work_run+0x10/0x10 [ 235.194708][ T7379] exit_to_user_mode_loop+0x1d8/0x700 [ 235.200083][ T7379] ? rcu_is_watching+0x13/0xc0 [ 235.204892][ T7379] do_syscall_64+0x661/0x790 [ 235.209496][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.215495][ T7379] RIP: 0033:0x7f8affb9e159 [ 235.219921][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.240830][ T7379] RSP: 002b:00007fffe91369f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 235.250122][ T7379] RAX: 0000000000000000 RBX: 00007fffe9136ae0 RCX: 00007f8affb9e159 [ 235.258205][ T7379] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 235.266210][ T7379] RBP: 000000000003768d R08: 0000000000000001 R09: 0000000000000000 [ 235.274296][ T7379] R10: 0000001b31e20000 R11: 0000000000000246 R12: 00007fffe9136b20 [ 235.282321][ T7379] R13: 00007f8affe25fac R14: 0000000000037eaa R15: 00007f8affe25fa0 [ 235.290311][ T7379] [ 235.293380][ T7379] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.300661][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.3.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.311419][ T7379] Tainted: [L]=SOFTLOCKUP [ 235.315725][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.325769][ T7379] Call Trace: [ 235.329045][ T7379] [ 235.331976][ T7379] dump_stack_lvl+0x100/0x190 [ 235.336667][ T7379] vpanic+0x553/0x970 [ 235.340646][ T7379] ? __pfx_vpanic+0x10/0x10 [ 235.345175][ T7379] panic+0xd1/0xe0 [ 235.348896][ T7379] ? __pfx_panic+0x10/0x10 [ 235.353326][ T7379] check_panic_on_warn.cold+0x19/0x34 [ 235.358700][ T7379] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 235.364936][ T7379] __warn.cold+0x191/0x318 [ 235.369340][ T7379] __report_bug+0x30f/0x440 [ 235.373849][ T7379] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 235.380101][ T7379] ? __pfx___report_bug+0x10/0x10 [ 235.385127][ T7379] ? __drm_dev_dbg+0x149/0x1a0 [ 235.389883][ T7379] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 235.396124][ T7379] report_bug+0xb3/0x220 [ 235.400370][ T7379] ? __drm_atomic_helper_set_config+0xa45/0xee0 [ 235.406627][ T7379] handle_bug+0x16a/0x2a0 [ 235.410955][ T7379] exc_invalid_op+0x17/0x50 [ 235.415450][ T7379] asm_exc_invalid_op+0x1a/0x20 [ 235.420284][ T7379] RIP: 0010:__drm_atomic_helper_set_config+0xa45/0xee0 [ 235.427127][ T7379] Code: 84 c0 74 09 3c 03 7f 05 e8 28 6e b4 fc 45 89 75 38 e9 0e fb ff ff e8 6a 5b 41 fc 90 0f 0b 90 e9 9f f7 ff ff e8 5c 5b 41 fc 90 <0f> 0b 90 e9 47 f7 ff ff 8b 6c 24 28 e8 4a 5b 41 fc 49 8d 7c 24 08 [ 235.446727][ T7379] RSP: 0018:ffffc90006eff970 EFLAGS: 00010293 [ 235.452788][ T7379] RAX: 0000000000000000 RBX: ffff8880735f2580 RCX: 0000000000000000 [ 235.460765][ T7379] RDX: ffff888032802580 RSI: ffffffff85ca8bd4 RDI: ffff888032802580 [ 235.468722][ T7379] RBP: ffff888032436d00 R08: 0000000000000007 R09: fffffffffffff000 [ 235.476687][ T7379] R10: ffff88807c8c4000 R11: 0000000000000000 R12: ffff88803c91e600 [ 235.484651][ T7379] R13: ffff88807c8c4000 R14: ffff888054031800 R15: ffff88807febd328 [ 235.492617][ T7379] ? __drm_atomic_helper_set_config+0xa44/0xee0 [ 235.498923][ T7379] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 235.505548][ T7379] ? drm_client_rotation+0x451/0x6a0 [ 235.510844][ T7379] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 235.517095][ T7379] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 235.523959][ T7379] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 235.530728][ T7379] ? drm_master_internal_acquire+0x21/0x80 [ 235.536572][ T7379] drm_client_modeset_commit_locked+0x14d/0x580 [ 235.542829][ T7379] drm_client_modeset_commit+0x4f/0x80 [ 235.548282][ T7379] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 235.556090][ T7379] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 235.562942][ T7379] drm_fbdev_client_restore+0x1b/0x30 [ 235.568302][ T7379] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 235.574372][ T7379] drm_client_dev_restore+0x205/0x2a0 [ 235.580090][ T7379] drm_release+0x2c6/0x360 [ 235.584499][ T7379] ? __pfx_drm_release+0x10/0x10 [ 235.589439][ T7379] __fput+0x3ff/0xb50 [ 235.593450][ T7379] task_work_run+0x150/0x240 [ 235.598060][ T7379] ? __pfx_task_work_run+0x10/0x10 [ 235.603192][ T7379] exit_to_user_mode_loop+0x1d8/0x700 [ 235.608564][ T7379] ? rcu_is_watching+0x13/0xc0 [ 235.613339][ T7379] do_syscall_64+0x661/0x790 [ 235.617939][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.623836][ T7379] RIP: 0033:0x7f8affb9e159 [ 235.628257][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.647902][ T7379] RSP: 002b:00007fffe91369f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 235.656398][ T7379] RAX: 0000000000000000 RBX: 00007fffe9136ae0 RCX: 00007f8affb9e159 [ 235.664365][ T7379] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 235.672332][ T7379] RBP: 000000000003768d R08: 0000000000000001 R09: 0000000000000000 [ 235.680316][ T7379] R10: 0000001b31e20000 R11: 0000000000000246 R12: 00007fffe9136b20 [ 235.688288][ T7379] R13: 00007f8affe25fac R14: 0000000000037eaa R15: 00007f8affe25fa0 [ 235.696267][ T7379] [ 235.699494][ T7379] Kernel Offset: disabled [ 235.703799][ T7379] Rebooting in 86400 seconds..