last executing test programs: 26.028449257s ago: executing program 1 (id=307): syz_emit_ethernet(0x36, &(0x7f00000014c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80003, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000500)={0x88, 0x8, '\x00', [@generic={0xd, 0x3e, "40c081107bf80cb782806d7bf99cac40155353673c7da83cb45c72839a430efac7e0261da55793c8e5bef48074e831d55681c731a6f2ebb523ac8a88c7a2"}]}, 0x48) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000480)=@phonet={0x23, 0xa1, 0x8, 0x47}, 0x80, 0x0}, 0x814) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/ksm/merge_across_nodes\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='0', 0x1) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000180)="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", 0x114, 0xfffffffffffffffe) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) pwritev2(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="a7", 0x1}], 0x1, 0x1000, 0x0, 0x3) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000580)=ANY=[@ANYBLOB="f4060000", @ANYRES8=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESOCT=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x20000884) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20040805}, 0x8004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 25.128067838s ago: executing program 4 (id=309): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000019400)={'broute\x00', 0x0, 0x0, 0x0, [0xb, 0x1, 0x1, 0x0, 0x3812, 0x7], 0x8, &(0x7f0000019340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xf010000, 0xd, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r0, 0x231cd000) (async) r1 = userfaultfd(0x801) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x428}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async) madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, 0x0, 0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0xa878f351c703073, 0x1, 0x400000, 0x0}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000019300)=0x40003) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 21.772672338s ago: executing program 3 (id=317): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6dd4, 0x1, 0x3, 0x0}) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./trace\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./trace/set_event\x00', 0x121302, 0x0) 21.277018272s ago: executing program 4 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000002cc0)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f000001bcc0)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000001bd00)=[{{0x0, 0x0, &(0x7f000001bd40), 0x171}}], 0x400000000000172, 0x4000000) mount(0x0, &(0x7f0000000400)='./sec\x00', &(0x7f0000000440)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000101010400000000000000000000000200002810f5df1b90bab6b78c902db20705aa5cfd5c7c67cf72609f47855f7bc2514db8a4da3870b4eb3ce8202f4c96eb0321618ae40163a83d5baa4a11b129b73ef3dbdd983ce0dd9ea2e29bebc5498772ea03013b8cd473337e79b66b9c0c8d0e359df8a50f12081f09c143daef34f52d3a4136d132895b17011a68715948ff498a702ac5e2e0557ee69c1693a261cf8107d4e5b0f345a75da65bbab92995eba2a579e0ce27c0c3cb2ddcd6c2e1796ee80992cbe92d6620740ebf7955b1e9f797526bebc21b7be856d7c78c053363a1b90954"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 20.599744783s ago: executing program 1 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a38000000060a010400000000000000000a0000010900010073797a31000000000c00064000000000000000010900020073797a32000000001400000011"], 0x60}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) 18.940870653s ago: executing program 1 (id=323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a3200000000f0ff09000000000440000000060a0104000000ffeb0000000a0000000900010073797a31000000000900020073797a320000d54b90a40480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f000001e580)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f000001e5c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001e600)}}], 0x1, 0x20008000) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) add_key$keyring(&(0x7f000001e640), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f000001e6c0)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) rmdir(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/80, 0x50}], 0x5, &(0x7f0000000500)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/82, 0x52}], 0x6}, 0xe}, {{&(0x7f0000002c40)=@pppol2tp, 0x80, &(0x7f0000003440)=[{&(0x7f0000002cc0)=""/141, 0x8d}, {&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/226, 0xe2}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/204, 0xcc}, {&(0x7f00000030c0)=""/243, 0xf3}, {&(0x7f00000031c0)=""/164, 0xa4}, {&(0x7f0000003280)=""/157, 0x9d}, {&(0x7f0000003340)=""/215, 0xd7}], 0x9}, 0x1}, {{&(0x7f0000003500)=@nl=@proc, 0x80, &(0x7f0000003880)=[{&(0x7f0000003580)=""/81, 0x51}, {&(0x7f0000003600)=""/255, 0xff}, {&(0x7f0000003700)=""/128, 0x80}, {&(0x7f0000003780)=""/122, 0x7a}, {&(0x7f0000003800)=""/112, 0x70}], 0x5, &(0x7f0000003900)=""/31, 0x1f}, 0x89b}, {{&(0x7f0000003940)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/182, 0xb6}, {0x0}, {&(0x7f0000004ac0)=""/163, 0xa3}, {&(0x7f0000004b80)=""/69, 0x45}, {&(0x7f0000004c00)=""/1, 0x1}], 0x6, &(0x7f0000004cc0)=""/58, 0x3a}, 0xb}, {{0x0, 0x0, &(0x7f0000004e40)=[{0x0}, {&(0x7f0000004d40)=""/235, 0xeb}], 0x2, &(0x7f0000004e80)=""/49, 0x31}, 0x80000000}, {{&(0x7f0000004ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000005000)=""/171, 0xab}, 0x8000}, {{&(0x7f00000050c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)=""/95, 0x5f}, {&(0x7f00000051c0)=""/83, 0x53}], 0x2, &(0x7f0000005280)=""/225, 0xe1}, 0x200000}], 0x8, 0x2, 0x0) 17.88365697s ago: executing program 1 (id=324): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001840)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r8, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) close(r7) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00'}, 0x48) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f00000010c0)=0x20) ppoll(&(0x7f0000001100)=[{r9}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r9, 0x5008, 0x0) sendto$packet(r0, &(0x7f00000018c0)="02033e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000001900)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 17.799996593s ago: executing program 0 (id=325): write(0xffffffffffffffff, &(0x7f0000000000)="4eecc4d011272cb144e3be6f4349850a", 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000001c0), 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x7e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x20004, r3}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 17.73180514s ago: executing program 4 (id=326): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600010324bd7000fcffffff2e"], 0x14}, 0x1, 0x0, 0x0, 0x20044853}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ipv6={@empty, @local, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff], 'batadv0\x00', 'veth0_to_team\x00', {}, {}, 0x84, 0x11, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7f19}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d3], 0x1}}, @common=@icmp6={{0x28}, {0xc, "5987", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0xe47, 0x6, 0xebc, 'snmp_trap\x00', 'syz1\x00', {0x74c9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 16.711937445s ago: executing program 0 (id=327): unshare(0x100000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e, 0x0, 0x1}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x210a, r0}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x1000) 16.53493455s ago: executing program 0 (id=328): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1f03, 0xd8401}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)) (async) lstat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in=@private=0xa010100, 0x4e21, 0x0, 0x4e20, 0xa7, 0x2, 0x80, 0x80, 0x62, r2, r3}, {0x0, 0xb, 0x10000, 0x6, 0x82, 0x1, 0x8, 0x3}, {0x40, 0x8, 0xdd}, 0x6fd2e346, 0x6e6bb7, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x4d6, 0x6c}, 0xa, @in=@local, 0x3505, 0x1, 0x2, 0x6d, 0x9, 0x7, 0xd6}}, 0xe8) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, &(0x7f0000000500)='casefold,strict_encoding\x00') (async) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, &(0x7f0000000500)='casefold,strict_encoding\x00') r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8001) fsmount(r7, 0x1, 0x70) fsmount(r7, 0x0, 0xb4) (async) fsmount(r7, 0x0, 0xb4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir\x00', 0x10000, 0x0) openat(r8, &(0x7f0000000040)='./mnt\x00', 0x60040, 0xce4324ece455b0a2) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) 15.430664928s ago: executing program 0 (id=329): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f00000003c0), 0x0, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x143102) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000680)=0x100000001, 0x59) connect$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000700), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000740)=@gcm_256={{0x303}, "e10b1d9abcfaa10c", "60b8d9b429db61cce77ede61f8abbb9052ba09245ed69f0d41de5b35fdafd4fa", '\x00\b\x00'}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000780)=0x2, 0x4) sendto$inet6(r5, &(0x7f00000007c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000800)=0x2100e6d4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000880)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x3ff, 0x6, 0xfffffffb}}]}]}}}]}, 0x6c}}, 0x4000080) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x100, 0x880, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 12.390793045s ago: executing program 3 (id=331): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2}, &(0x7f00000001c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfc, {0x2, 0x1, 0xf822bdac7e7715e8, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000008c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup(r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r9, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x0, 0x20}, 0xc) r11 = dup(r9) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000003c0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r13, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r12, 0x0, r9, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000200)={0x4, 0xffffffff, 0xc000, 0x8}) 12.346138019s ago: executing program 2 (id=332): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f000001e580)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f000001e5c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001e600)}}], 0x1, 0x20008000) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) add_key$keyring(&(0x7f000001e640), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f000001e6c0)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) rmdir(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/80, 0x50}], 0x5, &(0x7f0000000500)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/82, 0x52}], 0x6}, 0xe}, {{&(0x7f0000002c40)=@pppol2tp, 0x80, &(0x7f0000003440)=[{&(0x7f0000002cc0)=""/141, 0x8d}, {&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/226, 0xe2}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/204, 0xcc}, {&(0x7f00000030c0)=""/243, 0xf3}, {&(0x7f00000031c0)=""/164, 0xa4}, {&(0x7f0000003280)=""/157, 0x9d}, {&(0x7f0000003340)=""/215, 0xd7}], 0x9}, 0x1}, {{&(0x7f0000003500)=@nl=@proc, 0x80, &(0x7f0000003880)=[{&(0x7f0000003580)=""/81, 0x51}, {&(0x7f0000003600)=""/255, 0xff}, {&(0x7f0000003700)=""/128, 0x80}, {&(0x7f0000003780)=""/122, 0x7a}, {&(0x7f0000003800)=""/112, 0x70}], 0x5, &(0x7f0000003900)=""/31, 0x1f}, 0x89b}, {{&(0x7f0000003940)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/10, 0xa}, {&(0x7f0000004ac0)=""/163, 0xa3}, {&(0x7f0000004b80)=""/69, 0x45}, {&(0x7f0000004c00)=""/1, 0x1}], 0x5, &(0x7f0000004cc0)=""/58, 0x3a}, 0xb}, {{0x0, 0x0, &(0x7f0000004e40)=[{0x0}, {&(0x7f0000004d40)=""/235, 0xeb}], 0x2, &(0x7f0000004e80)=""/49, 0x31}, 0x80000000}, {{&(0x7f0000004ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000005000)=""/171, 0xab}, 0x8000}, {{&(0x7f00000050c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)=""/95, 0x5f}, {&(0x7f00000051c0)=""/83, 0x53}], 0x2, &(0x7f0000005280)=""/225, 0xe1}, 0x200000}], 0x8, 0x2, 0x0) 11.356552002s ago: executing program 2 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a38000000060a010400000000000000000a0000010900010073797a31000000000c00064000000000000000010900020073797a320000"], 0x60}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) 11.247664899s ago: executing program 0 (id=334): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r3, &(0x7f00000196c0)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000080)={0xec, 0x6, 0x15}}) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x85ffffff}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.873142886s ago: executing program 0 (id=335): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x11, 0x13, &(0x7f0000002540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000002600)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002640)={r1, 0xffffffff, 0xe, 0x0, &(0x7f00000026c0)="05004013ffffffffa000c4353512", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002480)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x13, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0xfffd, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0xd6, @multicast1, 0x5, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}}}}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000400)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0xffff1000, {}, 0x1, 0x20000009a4}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674ae9d23da53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a33a5264657ccf35ccd4507b8f0d879db556faf8278371ab25ac2c35d7d77fbe00dfdffeb722a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d87830517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b89be82a2db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c3343b6d39b1cf318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a285a57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e47860d59811af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847ceb5ee150eddc6c7e823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90a732f6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74ba94ef0da27cbf2fbdc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9dfdcef2ab1770f8f6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb80d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a368829d250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f140d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632563a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b2b448f6c7d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70cb391d400a1406b02d612918a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "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"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'veth1_to_hsr\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x0, 0x4}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x69, 0x5}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xff000000, 0xffffff00, 0x0, 0xffffff00], [], 'veth0_to_team\x00', 'pimreg1\x00', {0xcf0f066856f06171}, {0xff}, 0x1d, 0x5, 0x2, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x4a3, 0xd, 0x3, '\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) 8.681394754s ago: executing program 3 (id=336): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000002cc0)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f000001bcc0)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f000001bd00)=[{{0x0, 0x0, &(0x7f000001bd40), 0x171}}], 0x400000000000172, 0x4000000) mount(0x0, &(0x7f0000000400)='./sec\x00', &(0x7f0000000440)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000101010400000000000000000000000200002810f5df1b90bab6b78c902db20705aa5cfd5c7c67cf72609f47855f7bc2514db8a4da3870b4eb3ce8202f4c96eb0321618ae40163a83d5baa4a11b129b73ef3dbdd983ce0dd9ea2e29bebc5498772ea03013b8cd473337e79b66b9c0c8d0e359df8a50f12081f09c143daef34f52d3a4136d132895b17011a68715948ff498a702ac5e2e0557ee69c1693a261cf8107d4e5b0f345a75da65bbab92995eba2a579e0ce27c0c3cb2ddcd6c2e1796ee80992cbe92d6620740ebf7955b1e9f797526bebc21b7be856d7c78c053363a1b90954"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 7.431886887s ago: executing program 4 (id=337): write(0xffffffffffffffff, &(0x7f0000000000)="4eecc4d011272cb144e3be6f4349850a", 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000001c0), 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x7e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x20004, r3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 7.393691763s ago: executing program 3 (id=338): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000340)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)=@ll={0x11, 0x4, r9, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f00000002c0)="4987", 0x2}, {&(0x7f0000000300)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 7.349146302s ago: executing program 1 (id=339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7ff}, 0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r4, &(0x7f00000003c0), 0x10106, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x101001, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracefs\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r6, 0x0, 0x0) open(&(0x7f00000005c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20082000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x70}}, 0x280400c0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd27, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x2400d044}, 0x4004014) 7.298388072s ago: executing program 2 (id=340): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x200000e0) ppoll(&(0x7f0000000540)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006fc0), r6) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20048800) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000007080)={&(0x7f0000000200)={0x48, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x10) 6.223573691s ago: executing program 2 (id=341): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close_range(r0, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000040)="c7c34a23cf4d5e4c50ce3585b2052d7944f939071816708cc3f4c0e5741e22a2fe363e6f7525498f5d91ca73412a397589fed1e3c57a77e0b2b5c7cf53f7664de2ebcbec76f456bb522ab8ce8a693e5aa9b6db1aa1fe14bae8f25a360d69dd296c7c5069f3a239e3b85c7380591738de14531144010ae70576f6270f5435dc91329a3b393810f08aefb7d411c257c454f3f28ec01168fef675bab98cbbc441d1cf970826f98985c84851f1081d241b93ce5ad968b2017392e9c380867c91ca2b7c37de4a9bcb9cf8b8bab04134418ca8accad33540892f58ace56f11e85ac943e452b1d58efc1a141404a47ea78954c619", 0xf1) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002180)={0x20, 0x0, r3, {0x0, 0x2}}, 0x20) (async, rerun: 32) syz_ublk_setup_io_uring(0xe47, &(0x7f00000021c0)={0x0, 0x4aa0, 0x8, 0x1, 0x13d}, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) (rerun: 32) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000002300)=0xd4f9) (async, rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000002340)={0x2, r1}) (rerun: 64) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000002380)=0x5) (async) fchown(r1, r4, r5) (async, rerun: 32) landlock_restrict_self(r1, 0x10) (async, rerun: 32) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000f) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000002400)={{0x8, 0x8, &(0x7f00000023c0)=[{0xb2, 0x0, 0x2}, {0xfc, 0x0, 0x9}, {0x7, 0x0, 0x9}, {0x0, 0x0, 0x43}, {0x2, 0x0, 0xa7f}, {0x9, 0x0, 0x10000}, {0x80, 0x0, 0x7fff}, {0x5, 0x0, 0x858d}]}, 0x8, 0x2, 0x5, 0x2, 0x0, 0x207, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000002440)={r6}) (async) mmap$panthor(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x3a3f) r7 = add_key$user(&(0x7f0000002480), &(0x7f00000024c0)={'syz', 0x3}, &(0x7f0000002500)="535c10b66e038f7c149e553c73142fa77ae6e2be21e20fe8dcf4cdaddbd260af9853bd73932652f8487cbcc40a6afd060886d2804b0e7004599e0eea7e4edaec71bf8fba2a4614fe20b506a1214615d0f39e0ccac4ca8354d1daa84f1147a843556c31c2419e384f16babf9c65f73f8036b4600c9e887ead88218ebc564af6ef49423b3b88ee0326d82002d89a39295711fec0c06a381e1eca4f33f1f45121127d1954a3b8dc10f9b808905b2d8a553e9004adf164e0dac19f451c4362647090e5b32998c222234b27e276db17a89c27582175aa3a523ff97aed2d3b599267763baa718309d98cee0727cab94c3d2e90424c1758bb71669330faa3776221960e201cc717df7ff7ad5b085407d79ad42b2f97fe81dd9693270721716146cab5a1c94f38be085b494f054dfd337221f4f269aaaee3389dc16c5a52e0998126fd9c2ac37219f8d8608fd0195e12bb5c2eb6a310f5b43552496d5252411559d199ed5f7ce25da7126b3de96ec5f0c0090bea3e723b02214658f4fa72c63324b1453896f2be9dad0bd8f6c2e81b144ef1cbad61df51ed822b354f7977ceb504a8ac42e74af85fc7872bad2c4dc481e17df64c0ffdce4a2f3d1f9478cb3e2eeec851f8b642d9f28abfb726c15f8151254e08342597e6528153b9a807d29597128e13e24a3dc74eac0c2a9560a5eaf59b3ddcde143a3b67830ebf39d3b76ac52b84e9708fc7c4fae6404285bfb993837780be565da668db9f986bbce620936ae0a9cc8b3f6507d8688dbdf5a258a8bc4d03d61fe23e1befe834827b7c98b25d558a91cf53ad254863a65d38a05d5b58302635ea715ce83c8adde303188f7b57fa46978113b4c664b7c4cf5d0ca88fb529887814d4423b043fb6fb4731b71ba0c220b9a33efce5cf28733fa071b737d19e22b84dbe687209ab1d103294d1d39a6228de3c6cf0997b34972956058019effb1a799fe1f315bd294bdbfc87d49dd6c889c14cb940bf0fe9678d364e3867a4262d4888ad174f777a096c40474f1cd89b1b3d527760d36e41847991c909ab30d13ce625e10afe3187ca2af5e49397df46bd4f59f868def343930878426313985081c27a743db828dbc001e1cbdbfcf6e8e711a30a873f2bfec3e4929f5dfbab127cd024acb410412ba78737e2cf94024eb47911c954c225c9752289a34751ff9b831bd31c6a05e0b9ca3a8e3243d5be79c63556073874c7bb818b3e0c6c9752f2ce71c6191235a3fb4aebd77f7e0ad67fdf2941640c01435f880600942feb8ec1b613224deddf1d6ceadf99f25150b8f89bbee21131826be20cade14bf2e48ef790df814d61a4cfce7e057ca8479572c19508d81cc450bdcf9488c56a4cc45ddfd47400bef442e056415c88a9156c8c566b66de7a6bb4fc8353ff2f2963636bca66c89f31c84e569a76d4f30997bfb0d87d7ece6fd96ac5b9b2775743a914785d3c095e56c6b30d316228814380920160a27a79bc4d3043e792e6c3414d2d2145f11c363bf0d9c17fb86beb6534f40e3a265f1b627403bc4d563ce7ddcdc42f3f2b938e4c04bc453389aef5410e0c7d8485f3ab9ae065eb21fb4ff947c6c74c3f381d93fd70141460263d715ea0d777fcbe5ab02b20ea9d31b83f8d2f283a58da56fe0c807ffce977e2048398478d4119528667d0733543c4c9237ff74daa80df2d862f3ff96d0c48c510c570c74aded48e11f33613c55c949ddc112538fcbffa39aadc1a57c88f73cadcba7c86ed877d9977b3fca4c36b5495e2cd40e0e60aae0eb92447ed75601a94869401fcfdc694a8a3358fcb4482edc4ccda742287bbca511d5fc18596931095affe2be07fdd021e89c29f16d59c75bf9976b9ab25b82fa92a27910bc4aa4c54d32e125d26c83d824394960e5f1a45f94a34f51064c54a204b412660a68a87784b217a74ac0bec8f848bf62af8ffd93b01f05954a65dfe47ff68e8520840ac23dd1bd443bdaf3450dc271a3c9b12d744b9ddce5a4beaf4cde307653b621645b8ef215dc32a890d5467c86142a4c65f996ba7caea4728c43426a2d1d653ee0efe5856c3cc0c244715848d68b3c1288dd3031c3208193cad46542b056bb7c0a67f755b8f2f0e7c9f247b0ee91c9b28187acb70ea6815af3d91bcc5a0dcc13056342ed41f9198dea66df0cb55c958576cc775d186e58af456732af096349a1300f340752109954850d32a3a2312426628995a1a4bf03d5eb1771f47b7e2f72bded148428b26387b249587a593450848fe4c84fc9176c8f02f0622745de564fa911aed53ccb4c03d43c9eebb1a90265f3dfecf8fca8fed0a47f6eedb51a938296201bd4571ec5607ff78c1bbb51995f0d393e61f68026502a051871718f4fd1bca43301e12c269851054e8457b68f8af6c829fccee22f36ab4a0e2b3cc1d88d8500d8facb5d767cbadb8e0c08336c275ea5df79f1c8b184b5c65a881fd7cc7214fcb4562bc097f16fb08f6804cf009e879e60da583ca88e9d29d31fb8ee605120a1cfd63b877a92e01c3f88c38d52085f979b42622c911780c2c9d30c4c3d5a11d7d8ce699d1c35f82686760045c902eb1dc0466ae1ec99082fbb04591eba2b6310554d7a03877bbf8292a1beb7b4d4cc1c09e88227230e689ddbacf9308a622dc84e085f88e3c5c99d33bb13fa16752be5ef4617653708b8e6028b040b12436f4edfdfb6f496df029d1b88df22746ade9fb7876f196a585b02a9f52c77ac4e245a6c1f87c8ecaa285e3e51e26780e43141478252e7688b3a65b950fa621f37f28b8a41a419b2ddff9392cd8ddc41d621451fee9015c346612ac21c9138c776e98c879cce2da3a4d9b398dc3bd998f9f6508a913bd08f374e3de0f5cbcae064fa168076b68ad54953d3a65933e32ad65ac75c4c84effa06e632866c9628cc42e8452cf77f22eee598d91ba05e386eb63742199beeeb20e71a5d7946dccbc1d37ae26389496bd9b68b5fd0a99612c14ba30fc753f3fb6e7b54cb4eecaf8adaba480f095be19bb51d7547aa91099eb5f13ea5256676a838393d0c3c4d2e6dab46845ffd3166b0c9cc15eb89b4cc282174dd04f0748ecada81f674819706fea53257f313e049c2911c91b38d03398d0c3c22ec9a2536f457ffaa9a75742038b72a05d016844daefb3cb7c9516b0a0cc81317ef7476ea92ea575d6e7157e8216ee8064d19770d6576434dfd368d6e2a97c4a017ee7e1ce48dcdb9e2351a5b7bab55ae29527bbd6268e03c9cc248bc4b55e73d14035f68d5c1808351fed32b1c70bfd723c22799fb5ca4d2743e8e9002401af8c7bf1ec030b7a4bbf3612b882aba73b2fb98456c86ec909799c58e05dd5a4961dbbcbbb5e1ea66e06e6f99880673f1ed72e5f2eb6e9e4e979444027a01833a51d3416b8882b335e04f1aa6dd36e8c7d907638ef382ee205fb3824c82f760866454a658234349c1ebc0efd2c38643949522526a8816468a048916304ebbd3614e51dba6076cd109ba7d608633b3ef39f470e4e9ae2aca218cde55997e46bde30fe5262df984a7a422ca5465662c403761e7cf3b6b8171ecf468e7407a5c8c3d77cdc4888067bdd155f7f263051a68bc1f1c377637099eb62bf8441781dc6fdc96f5abb56315fda355f5edbcbadb834862b755b7792bb3c114261f8cbf7cf291f4e712623d6d41cddfa480cfc7578939a770548d4c63e5916844cf9cf52114b0d44d8cd415ebce3ace889f8148e642445ff25263469b2b3e3a86b7a37ca2dccec949bf7ad2d56584711df0ea3b46547b7f7edac09e67685c1efbef78ef4bfd2019e2a3527a247a088dd8fa5f0844cadb78c7ddefb3fcf9c511bc6a85e594c1f6a45c864665e6819b455375c5cb29761b7057bdcd41bc8a4641550e6a14f9b51ddf29d75b91d653f73db91b73f7199d4232fd269cdeb340cd8fac7f209d97a12d4c526c5df64603686175fffe3f2f9ee4208bae0e4b11844f94e2fb2be001569ba8b9317e7a9ef94940917c6450390675bcbd89f9545e52b56ca750f7c972fe9b37e73e405a5383112f857df7ae1e54f8df1e6e1fc7b3a09fbb1631fefa5f1c294185ee7171ca319f739d5f1b18a076b2da26b93a468ecbfac790c15bdcaecd8f686351cb49081bbe903969e2bffd62a3f28b6149763f8a47f8bfac80fc8b614d333e8d9af1460c144f70277793a9bfa01bb2280fe956b501924356f03c629e3cb7258393d1ae53da238145e28c5986bf699a4f71b50435193f9965ffd74e53d7eeb1b3364ff4f26a956c0beba10dc18e2542a8daee8006b3aabff5ae7b67aff196e95549d028853c8e6f8f42a6d13c365f9eccf4643cc017f187b64eba0290dd360c31b56b2c2b3ebcf5693edfcf3b5b0c8da2ef9934b07617a63aeaab1e2c165ae2db738e0bf2757fc11cc71409ba5082f712a9c1cc40777a16d5e8543a5bccb6a396ee8775950687ad793719531b3b35890c257b00705d97c7b4d0f7888d0da885ec1c50443211f0b55d8c276ff72036ce1acae6fcd93fd4bfb6195fa28f679b04edaeb6c7fd69ec798f63e875b508bd97bbda0ed6e764590f1d1c98b85a83eda8964dfba791839a21d4afe68ea6fe3f0998ca2efcec9e60eb24c29569284ff9190522471a88a637207391363bc9d346c98241ada851015674e4eb279e2ddb60c8a522ff5888849ca51efde3464318c974c91936d9eda6e8f8f574d778d7d082d5e532eae5d8157b675d7178202e0134f3c97371f5627c93cb6f7e2884ed1a74e3e944c5fd2bfe2f231a220438506f03717fba36cec97221fee1aa6eb53706b2ff4508efd524a1ed7a050507e31e8c5864a1e2000bb529e982c969486ffeb3e476f776b46459c0ff042c151a0dfe39bb227f306aa2f99ec941ad170f25fb2f07751e652e6a1df8b542b75437b49b6e75f924a5626757b8702e6879b304af069eac093d9440765b01b82a35cd0f6b34baa6d2ecccb79259146b8db14ea40e1f5190c4e1d24abb8cc7cadde4bff81d1adb5a628b61d1627165d3b1702c9778fd01d4647397b9bca0818dfc7894d73e499d88d88e79b46a2ad7e3a54b508172fa4e4d089ab79ab411283eeb81ce6e38316ad2479a47100f07aed15724cfcbf80cc2e82a0978645007d89fa7007bea03125d2dbed7c4ccb0d6ae24d18599a439e74868cb4fe2cc0b57e1a141987b9aeb86957fe3b945affd1629a3c8bf1798c054989a1a1d0e2b3a722f42b1992873bafb41875690ab74da616729fed7233614592c96a5fd4c6d28696fd608c120b9768e262a1ed0216ee1880f8b3b1b8e937152021ce7ac2af76def55f95571dcde3fe48faad1744e14ae0e12b69921be4a1d13ba96b32320fed9931e71e7b51135c434ed7c5bbbeeab7a903c7de42d874f5fb81fc90919436f3b5efae53799e5d1a03684cdbe635a8f2e05afae9a8530ef6b2be223c6c4261b47f45cac838bca077fb203d7173797a429150c5d0170eaf6be214a70049eb4cfc6363822729d5089af4ed64539c7b1c975b68cbd8aceaea9b573daf240be205d414d7bcd22c4cbdcccf36c01720229c062f440d7162911536b6e6c8ab2ceaf1dc5688d771530ef35a9f548520d8c027097ce3d8eb0da2e158e2fdf3acc1c9dd7730994815bf30f739527da9c50eccc15df5a684180677657c0297d7b22feb55610df02149042fe9d1fd9c6b3fee7a7e02147621f529de1cb82245b871185e897d59d024edbb32fbc83c84639d72dd61a9da2d4cb88e6db1c64dbb9fbd18a25fca43fd2f3c22bd222bdd5b1447e6b70ab17bb7d636efa9", 0x1000, 0xfffffffffffffff8) (async) r8 = add_key$keyring(&(0x7f0000003500), &(0x7f0000003540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000003580), &(0x7f00000035c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r9, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003600)=@ethernet={0x301, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003680)="33c58e4874984d640b414f9eeae257449e4abe50ce7426ced626b75f06278706de49f3cb43137eb4d8e0290e94eae112e6616e5a7396aed8095ec33a8c76dc0fba9da0c0261ee65a9612478aea27c3a72dac3b7ebcee1a863d0d0fd12e252408a13b88b119cb6d3bbb217cd0ab2f94cc6f115fee93405a06eec37238b0e83fd88ed8ca9a0419a8af5c8cc02e90784b3cb1e0f50bf5384cfe298e09952ee8a6db4c2e53bc8de7967d9b402396741cefce656fb9", 0xb3}, {&(0x7f0000003740)="fdebc85e82192555b82de378f7f17f40d044dae84a794fcd36d6ec", 0x1b}, {&(0x7f0000003780)="0d8c0215284d64ed5bb763c1141838870d5000b6ed19e03509f7419a5defe670f1108e576c37796d5aa8ed4d5b4ace29ac600dae247ac33ddc5f2ede834ad43db456adf564552c9c9a4e45d96cc720c7eac3618a2173a1d4f7618f52de8b33de679a512dd8e3c32fe3a8c29ee412ae2c2642cc6ef029806040bbbbea811c2eb5f6dd05ae05c3fc396641af9b1981bb2fd8", 0x91}, {&(0x7f0000003840)="a716ce37daab09fdf4afde6a09fbc961e87dea5a47dbc9dce22f425628e5bd03ccfd903396a58ec4f09550301607b17f628b78168f9e686c86b610dfddf3d4b83d18098798425fc8d1760c6f75b02c4eefb39eac13ceed14bb20a2b4f357a061893a3ce4c3008204e572e6a8b7cdfb7002f28aa94392cb65130efd9ebceae7165c0f056f9ed76e39f703c221d5903e2995a2441d43acf31f37a3693032336dba", 0xa0}, {&(0x7f0000003900)="36f3a16eebf3396dcbab1a743a3ab312e86fea6d2b82a06265becdee68c51bbc2d10ad0ee37396ba6d5f55d69536af8bb8bb97d4d6e6408691ad9dca1c65e48aecd7653bd4af6d47131997f6d3b8b3c34e3f5a6eeeb01065a24d444110ef5461e71bbd854ee5d8d289a3ff291ac75f", 0x6f}, {&(0x7f0000003980)="61b1e746e87b217d87b0a241128b7f4429eeb03e5189b6ecd6bec7628f371daa73b548619055764efc614792aa16623d53459619c134cccef87a12c54de938acbc4a01045927253be3ebe8706c844adca89b5d261a0f35f54d5e8f24fb73", 0x5e}], 0x6, &(0x7f0000003a80)=[{0x38, 0x11, 0x1, "1b218ecf7d46081af3d609e810a565a4335745b2bb684ac04f086b0ed96ab938b9"}, {0x40, 0x3a, 0x6, "1e35192b90958bacce5263ea2aed0b7c5e4f23842c62b6a6c15a6bfe316ff1c0e317b5290817e5746e23fcab1dc8be5f"}, {0x48, 0x10e, 0x7, "c6cdb077a23cf43753de51e595c5b2971f7d96f47327451a4d7cf19fae6d38f239854e19f9fa39a6661bf0fc356097f11605"}, {0x88, 0x113, 0xffff97ba, "7ac6e3bcceb5888605416e2707c8d3c3ec7db0f9b945aef0e2f078d9655d366590454c5454aa670b8ee37da3edee5f17d4f00d27119821289385c3e3b6ba3fb1e2c431210544d4655ac6cc26a5857d8c6871381bb3512a8cb52e0a915bc7c8a62de022f273dfdfe475d9b1b98afa553356e7f7"}, {0x50, 0x0, 0x2, "75b70e843274ba35ff35b9fe8d08664c872747367a31a6c1daec91a870550f53960eb0b3c44a93e2bb07ec6142ad2e6ff5820bd468689cee59d8d63f26"}], 0x198}, 0x4000000) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000003c80)={r6}) (async) lstat(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d80), 0x2, 0x0) splice(r10, &(0x7f0000003dc0)=0x4, r0, &(0x7f0000003e00)=0x56d, 0xffffffff, 0x4) (async) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000003e40)={0x0, 0x2, 0x3, 0x4, 0x4, 0x3}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000003e80), 0x600001, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003ec0)={'batadv_slave_1\x00', 0x0}) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000003f00)=r12) 5.656802104s ago: executing program 4 (id=342): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008f3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) brk(0x200000ffc000) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="81") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8102") syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x1, 0xbc, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x0, 0x20, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1e, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x3, 0x206, 0x5, 0x1, 0x7, 0x8, 0x1000, 0x9, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0xa, 0x0, "be4aabde33c6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff, 0x810, 0x2, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x3, 0x0, {0xa, 0x25, 0x25, 0x7, 0xe9, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x94d6, 0x400, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x5, 0x20, {0xa, 0x25, 0x25, 0x0, 0x0, 0x3}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x2, 0x0, 0x0, 0x10, 0xe2}, 0x86, &(0x7f00000002c0)={0x5, 0xf, 0x86, 0x4, [@generic={0x50, 0x10, 0xa, "3fe12f70b0cf897b939ad900544267620385ac9481da0cd6a04cf002bc88dc702c6087300bab4f8a1c569ed48c97933bcb3e9ac3485972fcab94e3a025b8f3230381dff24d88b0dbda339cb774"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x7213}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x7, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7, 0xf000, 0x1ff, [0xc0, 0xffc0f0, 0x3f0f, 0xf, 0x1fe003f]}]}, 0x9, [{0x4, &(0x7f0000000380)=@string={0x4, 0x3, "6bfc"}}, {0xfd, &(0x7f0000000400)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x415}}, {0xb3, &(0x7f0000000540)=@string={0xb3, 0x3, "161b10be241905053eec80fecf382d089935e0c4f8a8dad60a7fa2ac96b3ae76f18f36da0886ea057eb50c32d8fb7e539024877473e5fa419e54bde8c2bf45053ca74d0dd41bbb45262f19344093771be89198900e84408a8c0adc755d3415873c29c613d47a6c4bc593fff5dba32cf3fae6af6592fb5c4cbeb29bde56f853dc1016be7d73f7361268784cb4d9f6443befefb4a26c44be3d933da1d322f999a2a6e900d29192e15a314bf58b5de44ebdb5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb2, &(0x7f0000000640)=@string={0xb2, 0x3, "edba56ac924b7d55ca72604bf41a2857eeabe3325a6861bb89a165ee7c7a61ea30798555974ed9fb58216a7804099512a1027c432b3ae711e08ab763b2c9b82c4c2e6ea3eafdd2d9963e0a3b1bf266c595b77c2877692df31b1f87fd8d81e2e53bde96cee1d484577e86c166e159800fae2601e00c7c781099cc1484b8e0107f3926fec06bdd894746dea9586fe955127466dd51acd9b8a84f9dc54018f38ef0ff6f0697d5a7ed655c4a76e02d1488b5"}}, {0xe, &(0x7f0000000700)=@string={0xe, 0x3, "53b4d734d3cddb9dd0c5eaf1"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_ep_write(r1, 0xc, 0xdf, &(0x7f0000000880)="3673c2c62f632f3f814ba1ee418fe418eeacc7b51f3e37aa09df00164dbee20b8b6ece4018941018932ab776c82dd44c9a931a97d6215baf1c1702190b015b1d5c1af70c39cc02870cdfac2538a09504f37d2f9c36cc67b67b8071c3d1a02b51eb6b0a68310ea1a6ce1e2e21fea15f1e50ba5c0db25b6db54042d08fe67f2660489ee7676105cbf36d55637405676693e17451ffd3510e161d90f3cbd2b5ea638c6d3c3dfd0468561f7b2b6ffb3397e42cb0f6d21bf165a3cbd7f0f903664a691a64bfd975866c889c4328e71a2655dfc3f4c96674b6cb4556e00eeecfa833") 5.246260265s ago: executing program 3 (id=343): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40) 4.383804093s ago: executing program 2 (id=344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000800)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000840), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102400, 0x19000) sched_setaffinity(r2, 0x47, &(0x7f000001e580)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f000001e5c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001e600)}}], 0x1, 0x20008000) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) add_key$keyring(&(0x7f000001e640), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(&(0x7f000001e6c0)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) rmdir(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000400)=""/80, 0x50}], 0x5, &(0x7f0000000500)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000600)=@x25, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000000680)=""/22, 0x16}, {&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/82, 0x52}], 0x6}, 0xe}, {{&(0x7f0000002c40)=@pppol2tp, 0x80, &(0x7f0000003440)=[{&(0x7f0000002cc0)=""/141, 0x8d}, {&(0x7f0000002d80)=""/5, 0x5}, {&(0x7f0000002dc0)=""/226, 0xe2}, {&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000002fc0)=""/204, 0xcc}, {&(0x7f00000030c0)=""/243, 0xf3}, {&(0x7f00000031c0)=""/164, 0xa4}, {&(0x7f0000003280)=""/157, 0x9d}, {&(0x7f0000003340)=""/215, 0xd7}], 0x9}, 0x1}, {{&(0x7f0000003500)=@nl=@proc, 0x80, &(0x7f0000003880)=[{&(0x7f0000003580)=""/81, 0x51}, {&(0x7f0000003600)=""/255, 0xff}, {&(0x7f0000003700)=""/128, 0x80}, {&(0x7f0000003780)=""/122, 0x7a}, {&(0x7f0000003800)=""/112, 0x70}], 0x5, &(0x7f0000003900)=""/31, 0x1f}, 0x89b}, {{&(0x7f0000003940)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000004c40)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/10, 0xa}, {&(0x7f0000004ac0)=""/163, 0xa3}, {&(0x7f0000004b80)=""/69, 0x45}, {&(0x7f0000004c00)=""/1, 0x1}], 0x5, &(0x7f0000004cc0)=""/58, 0x3a}, 0xb}, {{0x0, 0x0, &(0x7f0000004e40)=[{0x0}, {&(0x7f0000004d40)=""/235, 0xeb}], 0x2, &(0x7f0000004e80)=""/49, 0x31}, 0x80000000}, {{&(0x7f0000004ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000005000)=""/171, 0xab}, 0x8000}, {{&(0x7f00000050c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005140)=""/95, 0x5f}, {&(0x7f00000051c0)=""/83, 0x53}], 0x2, &(0x7f0000005280)=""/225, 0xe1}, 0x200000}], 0x8, 0x2, 0x0) 4.354902828s ago: executing program 3 (id=345): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019b80)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x5f2, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x14a}}}, &(0x7f0000019540)) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000019a80)={0x0, 0xffff, 0x40, &(0x7f0000019a40)=@ublk_ctrl_dev_info_existing}) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000019b00)={r5, 0xffff, 0x0, 0x0, r3}) r6 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019480)=0x40003) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f00000194c0)) fanotify_init(0x200, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000019500)={0x2, 0x4e21, @broadcast}, 0x2f) sendto$inet(0xffffffffffffffff, &(0x7f0000019540), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000019580), 0x2, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e"], 0x0) ioctl$DM_DEV_SUSPEND(r7, 0xc138fd06, &(0x7f00000195c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x5, 0x2, "8252"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x20, 0x0, 0xcd, {0xcd, 0x23, "b4664e6de1ae52729b7f8319a319ca43e7d7a220fddc9ed780acce016417f8b041eef4cfeff7790da01a57be4f6369ee5a908f2fe5a0f1ba3d76963b522267b845e2ba6c29850e8c0cca1d509b406e159674c9d907305dc32b58067033a9eaaee81a0d7f084d7b5269de5254659b4120de67d29f1115f2f5ec01bb535305816eaeedfe3cb789681eb622c1dceb2e0738c2e3cf9ec473cb00235bb4c354cf7f83ba66f09d200f5505b1a8741401ad87be9f14805a16043e3f14a3324bfbfc50085100dd0e8e6c466d7e9cb7"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}}, &(0x7f00000199c0)={0x44, &(0x7f0000019700)={0x40, 0xa, 0xdd, "b77f1fa32f1d9f39a1887718e31c424881e589ad9e7b939332ea66171533bc70e04be0ae2710e1655b958545b994f8db160139b7b10f0b02f15098dcabb36c4a0b5dcfa1661c80f7c1f38cd9b138435284206d2c05d321ce77057f8c13f2dcabe2cabdcf4caf7d14eb1b356aae26e8a2d822800b244425fe521d0cc90551591e7f460c6795d684d6f0e5b34d9ab4f2c60f02a13949aa868d9ad576a12f4c5fcfa1a96fd30f3b44d001c0ea000d92bb61192dc829e0402d87b1508322a1311930c7a419b611c999693ebaad84e785bf41ac3e5aa8f6c9bf1a012976a7ff"}, &(0x7f0000019800)={0x0, 0xa, 0x1, 0xae}, &(0x7f0000019840)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000019880)={0x20, 0x81, 0x3, "d38e37"}, &(0x7f00000198c0)={0x20, 0x82, 0x1, "a4"}, &(0x7f0000019900)={0x20, 0x83, 0x2, "1f31"}, &(0x7f0000019940)={0x20, 0x84, 0x1, "db"}, &(0x7f0000019980)={0x20, 0x85, 0x3, "e27444"}}) 3.107992196s ago: executing program 2 (id=346): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000000c40)=""/102368, 0x18fe0) sched_setscheduler(0x0, 0x1, &(0x7f0000019c40)=0x20000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x20400, 0x20) 3.045695302s ago: executing program 1 (id=347): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000280), 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x0, 0xfe, 0xa6, 0x8b, 0x4}}]}}]}}, 0x0) symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x2, @raw_data="337363d36ffe2360eb41276e6e1cee7dc78095982f5434ab4dec7fef0af7ef6d46f66ad6bd78818b5055df6a3d93a1d24b5432f6d1e71cc2cd7e0685d8d2a896b877f105caf4b20fb106bfb6ab18c9d2f0e4564d8dbbee078c4948c852523a8ccde8ac8ce3550a4ec00ae07944e4926954bc6bd2b759621d686270684ab8b2e7b1ed9dd94b368bbfc532dedf6e2e1d01e68a987694c5909a0d5204fcbd90d2169ed260d8db52259763404d39915b50a04471515340466bddb05b9c5e0c189681874e0c85081afbe9"}) r2 = socket$inet6(0xa, 0x6, 0x400) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x60) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8, 0x80000001}, {0x0, 0xffffffd3}]}, 0x14, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000300)={0x4, "ffff5ccf51fe9d4f5e0d33a3e68ce81484be82afef8da2335681e02fa92baa16", 0x2, 0x7, 0xfffffffd, 0x100, 0x2}) 0s ago: executing program 4 (id=348): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700ecff00000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 107.572850][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.574009][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 107.691198][ T31] audit: type=1400 audit(1794068465.958:280): avc: denied { read write } for pid=6109 comm="syz.3.53" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 107.719073][ T6110] zero sized request [ 107.755436][ T6114] vhci_hcd: connection closed [ 107.758715][ T992] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 107.773058][ T1488] vhci_hcd vhci_hcd.3: stop threads [ 107.791043][ T1488] vhci_hcd vhci_hcd.3: release socket [ 107.791936][ T1488] vhci_hcd vhci_hcd.3: disconnect device [ 107.816731][ T992] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 107.816786][ T992] usb 39-1: enqueue for inactive port 0 [ 107.885819][ T992] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 108.124087][ T5725] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 108.276220][ T5725] usb 3-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 108.281268][ T5725] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 108.281297][ T5725] usb 3-1: config 1 has no interface number 0 [ 108.281342][ T5725] usb 3-1: config 1 interface 105 has no altsetting 0 [ 108.320587][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 108.320614][ T5725] usb 3-1: Product: syz [ 108.320628][ T5725] usb 3-1: Manufacturer: syz [ 108.320642][ T5725] usb 3-1: SerialNumber: syz [ 108.443284][ T6118] FAULT_INJECTION: forcing a failure. [ 108.443284][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.443311][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(full) [ 108.443331][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.443341][ T6118] Call Trace: [ 108.443346][ T6118] [ 108.443353][ T6118] dump_stack_lvl+0x100/0x190 [ 108.443453][ T6118] should_fail_ex.cold+0x5/0xa [ 108.443500][ T6118] _copy_from_user+0x2e/0xd0 [ 108.443524][ T6118] copy_msghdr_from_user+0x9f/0x4c0 [ 108.443556][ T6118] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.443587][ T6118] ? lock_acquire+0x1d1/0x380 [ 108.443622][ T6118] ? get_pid_task+0x2a/0x250 [ 108.443648][ T6118] ___sys_sendmsg+0x106/0x1e0 [ 108.443709][ T6118] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.443741][ T6118] ? get_pid_task+0x106/0x250 [ 108.443764][ T6118] ? find_held_lock+0x2b/0x80 [ 108.443793][ T6118] __sys_sendmsg+0x160/0x210 [ 108.443816][ T6118] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.443846][ T6118] do_syscall_64+0x123/0x790 [ 108.443868][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.443913][ T6118] RIP: 0033:0x7f008619fb19 [ 108.443930][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.443943][ T6118] RSP: 002b:00007f008704c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.443961][ T6118] RAX: ffffffffffffffda RBX: 00007f0086425fa0 RCX: 00007f008619fb19 [ 108.443972][ T6118] RDX: 0000000020004880 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 108.443981][ T6118] RBP: 00007f008704c090 R08: 0000000000000000 R09: 0000000000000000 [ 108.443991][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.444000][ T6118] R13: 00007f0086426038 R14: 00007f0086425fa0 R15: 00007ffe585db428 [ 108.444023][ T6118] [ 109.356758][ T5725] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 109.356879][ T5725] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 109.427254][ T5725] usb 3-1: USB disconnect, device number 3 [ 109.935460][ T6133] 0x0000000000ec-0x0000000000f2 : "" [ 110.564541][ T6133] ftl_cs: FTL header corrupt! [ 112.384813][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 112.384832][ T31] audit: type=1400 audit(1794068470.648:286): avc: denied { mount } for pid=6140 comm="syz.3.61" name="/" dev="autofs" ino=10486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.575923][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 112.671684][ T6134] syz.0.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 112.671708][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 112.671719][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 112.671725][ T6134] Call Trace: [ 112.671729][ T6134] [ 112.671733][ T6134] dump_stack_lvl+0x100/0x190 [ 112.671785][ T6134] dump_header+0xfb/0x606 [ 112.671798][ T6134] oom_kill_process.cold+0xd/0x380 [ 112.671812][ T6134] out_of_memory+0x343/0x14c0 [ 112.671830][ T6134] ? __pfx_out_of_memory+0x10/0x10 [ 112.671850][ T6134] mem_cgroup_out_of_memory+0xc6/0x130 [ 112.671861][ T6134] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 112.671870][ T6134] ? find_held_lock+0x2b/0x80 [ 112.671885][ T6134] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.671895][ T6134] ? _raw_spin_unlock+0x28/0x50 [ 112.671907][ T6134] try_charge_memcg+0x779/0xf30 [ 112.671925][ T6134] ? __pfx_try_charge_memcg+0x10/0x10 [ 112.671938][ T6134] ? find_held_lock+0x2b/0x80 [ 112.671948][ T6134] ? rcu_read_unlock+0x17/0x60 [ 112.671963][ T6134] ? rcu_read_unlock+0x17/0x60 [ 112.671978][ T6134] ? find_held_lock+0x2b/0x80 [ 112.671989][ T6134] ? rcu_read_unlock+0x17/0x60 [ 112.672006][ T6134] charge_memcg+0x1ae/0x210 [ 112.672021][ T6134] __mem_cgroup_charge+0x2b/0x1c0 [ 112.672038][ T6134] shmem_alloc_and_add_folio+0x451/0xd40 [ 112.672053][ T6134] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 112.672065][ T6134] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 112.672080][ T6134] shmem_get_folio_gfp+0x758/0x1af0 [ 112.672095][ T6134] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 112.672108][ T6134] ? filemap_map_pages+0x1155/0x1f10 [ 112.672126][ T6134] shmem_fault+0x1fb/0xa30 [ 112.672139][ T6134] ? __pfx_shmem_fault+0x10/0x10 [ 112.672150][ T6134] ? __pte_offset_map+0x9a/0x470 [ 112.672167][ T6134] ? __pfx_filemap_map_pages+0x10/0x10 [ 112.672184][ T6134] ? find_held_lock+0x2b/0x80 [ 112.672197][ T6134] ? __pfx_filemap_map_pages+0x10/0x10 [ 112.672212][ T6134] __do_fault+0x10b/0x440 [ 112.672227][ T6134] do_fault+0xb3f/0x1890 [ 112.672238][ T6134] ? __pfx_do_fault+0x10/0x10 [ 112.672247][ T6134] ? rcu_read_unlock+0x2d/0xb0 [ 112.672259][ T6134] ? rcu_read_unlock+0x2d/0xb0 [ 112.672274][ T6134] __handle_mm_fault+0x1858/0x2f40 [ 112.672290][ T6134] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.672301][ T6134] ? __pfx_follow_page_pte+0x10/0x10 [ 112.672328][ T6134] handle_mm_fault+0x363/0xa30 [ 112.672343][ T6134] __get_user_pages+0x7ca/0x1d50 [ 112.672362][ T6134] ? lock_acquire+0x1d1/0x380 [ 112.672376][ T6134] ? __pfx___get_user_pages+0x10/0x10 [ 112.672397][ T6134] get_dump_page+0x27e/0x3d0 [ 112.672413][ T6134] ? __pfx_get_dump_page+0x10/0x10 [ 112.672428][ T6134] ? dump_user_range+0x7e0/0xe90 [ 112.672444][ T6134] dump_user_range+0x19c/0xe90 [ 112.672460][ T6134] ? __pfx_dump_user_range+0x10/0x10 [ 112.672475][ T6134] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 112.672490][ T6134] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 112.672506][ T6134] ? __pfx_writenote+0x10/0x10 [ 112.672522][ T6134] elf_core_dump+0x2d97/0x3d60 [ 112.672543][ T6134] ? __pfx_elf_core_dump+0x10/0x10 [ 112.672555][ T6134] ? kasan_save_stack+0x3f/0x50 [ 112.672565][ T6134] ? kasan_save_stack+0x30/0x50 [ 112.672574][ T6134] ? kasan_save_track+0x14/0x30 [ 112.672584][ T6134] ? __kasan_kmalloc+0xaa/0xb0 [ 112.672593][ T6134] ? coredump_write+0x37b/0x1c20 [ 112.672604][ T6134] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 112.672616][ T6134] ? vfs_coredump+0x9b0/0x1180 [ 112.672627][ T6134] ? asm_exc_page_fault+0x26/0x30 [ 112.672639][ T6134] ? 0xffffffffff600000 [ 112.672664][ T6134] ? lock_acquire+0x1d1/0x380 [ 112.672678][ T6134] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 112.672695][ T6134] ? coredump_write+0xd88/0x1c20 [ 112.672706][ T6134] coredump_write+0xd88/0x1c20 [ 112.672723][ T6134] ? __pfx_coredump_write+0x10/0x10 [ 112.672740][ T6134] ? __pfx_make_vfsuid+0x10/0x10 [ 112.672762][ T6134] do_coredump.constprop.0+0x9bb/0x25e0 [ 112.672776][ T6134] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 112.672801][ T6134] ? __lock_acquire+0x5c0/0x1f40 [ 112.672816][ T6134] ? trace_kmalloc+0xeb/0x110 [ 112.672828][ T6134] ? __kasan_kmalloc+0xaa/0xb0 [ 112.672838][ T6134] ? __kmalloc_noprof+0x350/0x840 [ 112.672856][ T6134] ? lock_acquire+0x1d1/0x380 [ 112.672870][ T6134] ? do_raw_spin_lock+0x128/0x260 [ 112.672879][ T6134] ? find_held_lock+0x2b/0x80 [ 112.672890][ T6134] ? vfs_coredump+0x6f8/0x1180 [ 112.672902][ T6134] ? rcu_is_watching+0x13/0xc0 [ 112.672916][ T6134] vfs_coredump+0x9b0/0x1180 [ 112.672930][ T6134] ? __pfx_vfs_coredump+0x10/0x10 [ 112.672959][ T6134] ? rcu_is_watching+0x13/0xc0 [ 112.672972][ T6134] get_signal+0x1fba/0x22e0 [ 112.672992][ T6134] ? __pfx_get_signal+0x10/0x10 [ 112.673008][ T6134] arch_do_signal_or_restart+0x91/0x7e0 [ 112.673021][ T6134] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.673040][ T6134] irqentry_exit+0x542/0xab0 [ 112.673054][ T6134] asm_exc_page_fault+0x26/0x30 [ 112.673064][ T6134] RIP: 0033:0x7f008619fb21 [ 112.673074][ T6134] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 112.673084][ T6134] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 112.673094][ T6134] RAX: 0000000000000000 RBX: 00007f0086426090 RCX: 00007f008619fb19 [ 112.673100][ T6134] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 112.673106][ T6134] RBP: 00007f0086237b70 R08: 0000000000000000 R09: 0000000000000000 [ 112.673112][ T6134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.673117][ T6134] R13: 00007f0086426128 R14: 00007f0086426090 R15: 00007ffe585db428 [ 112.673131][ T6134] [ 112.673135][ T6134] memory: usage 307200kB, limit 307200kB, failcnt 37028 [ 112.673141][ T6134] memory+swap: usage 432092kB, limit 9007199254740988kB, failcnt 0 [ 112.673148][ T6134] kmem: usage 2396kB, limit 9007199254740988kB, failcnt 0 [ 112.673153][ T6134] Memory cgroup stats for /syz0: [ 112.673274][ T6134] cache 311717888 [ 112.673279][ T6134] rss 131072 [ 112.673282][ T6134] rss_huge 0 [ 112.673285][ T6134] shmem 311447552 [ 112.673289][ T6134] mapped_file 213553152 [ 112.673292][ T6134] dirty 0 [ 112.673295][ T6134] writeback 45056 [ 112.673299][ T6134] workingset_refault_anon 6 [ 112.673303][ T6134] workingset_refault_file 34 [ 112.673306][ T6134] swap 127889408 [ 112.673310][ T6134] swapcached 24576 [ 112.673313][ T6134] pgpgin 165658 [ 112.673316][ T6134] pgpgout 89517 [ 112.673320][ T6134] pgfault 80756 [ 112.673323][ T6134] pgmajfault 3 [ 112.673326][ T6134] inactive_anon 139718656 [ 112.673330][ T6134] active_anon 171864064 [ 112.673334][ T6134] inactive_file 176128 [ 112.673337][ T6134] active_file 28672 [ 112.673340][ T6134] unevictable 0 [ 112.673344][ T6134] hierarchical_memory_limit 314572800 [ 112.673348][ T6134] hierarchical_memsw_limit 9223372036854771712 [ 112.673352][ T6134] total_cache 311717888 [ 112.673356][ T6134] total_rss 131072 [ 112.673359][ T6134] total_rss_huge 0 [ 112.673363][ T6134] total_shmem 311447552 [ 112.673366][ T6134] total_mapped_file 213553152 [ 112.673370][ T6134] total_dirty 0 [ 112.673373][ T6134] total_writeback 45056 [ 112.673377][ T6134] total_workingset_refault_anon 6 [ 112.673380][ T6134] total_workingset_refault_file 34 [ 112.673384][ T6134] total_swap 127889408 [ 112.673388][ T6134] total_swapcached 24576 [ 112.673391][ T6134] total_pgpgin 165658 [ 112.673395][ T6134] total_pgpgout 89517 [ 112.673398][ T6134] total_pgfault 80756 [ 112.673402][ T6134] total_pgmajfault 3 [ 112.673405][ T6134] total_inactive_anon 139718656 [ 112.673409][ T6134] total_active_anon 171864064 [ 112.673413][ T6134] total_inactive_file 176128 [ 112.673416][ T6134] total_active_file 28672 [ 112.673420][ T6134] total_unevictable 0 [ 112.673423][ T6134] anon_cost 0 [ 112.673427][ T6134] file_cost 0 [ 112.673430][ T6134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.23,pid=5959,uid=0 [ 112.673538][ T6134] Memory cgroup out of memory: Killed process 5959 (syz.0.23) total-vm:333776kB, anon-rss:1316kB, file-rss:20548kB, shmem-rss:109176kB, UID:0 pgtables:332kB oom_score_adj:1000 [ 114.628799][ T6134] syz.0.58 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 114.628822][ T6134] CPU: 1 UID: 0 PID: 6134 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 114.628833][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 114.628839][ T6134] Call Trace: [ 114.628843][ T6134] [ 114.628847][ T6134] dump_stack_lvl+0x100/0x190 [ 114.628869][ T6134] dump_header+0xfb/0x606 [ 114.628882][ T6134] oom_kill_process.cold+0xd/0x380 [ 114.628896][ T6134] out_of_memory+0x343/0x14c0 [ 114.628915][ T6134] ? __pfx_out_of_memory+0x10/0x10 [ 114.628935][ T6134] mem_cgroup_out_of_memory+0xc6/0x130 [ 114.628946][ T6134] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 114.628955][ T6134] ? find_held_lock+0x2b/0x80 [ 114.628970][ T6134] ? do_raw_spin_unlock+0x145/0x1e0 [ 114.628980][ T6134] ? _raw_spin_unlock+0x28/0x50 [ 114.628993][ T6134] try_charge_memcg+0x779/0xf30 [ 114.629010][ T6134] ? __pfx_try_charge_memcg+0x10/0x10 [ 114.629024][ T6134] ? find_held_lock+0x2b/0x80 [ 114.629034][ T6134] ? rcu_read_unlock+0x17/0x60 [ 114.629048][ T6134] ? rcu_read_unlock+0x17/0x60 [ 114.629062][ T6134] ? find_held_lock+0x2b/0x80 [ 114.629073][ T6134] ? rcu_read_unlock+0x17/0x60 [ 114.629089][ T6134] charge_memcg+0x1ae/0x210 [ 114.629104][ T6134] __mem_cgroup_charge+0x2b/0x1c0 [ 114.629121][ T6134] shmem_alloc_and_add_folio+0x451/0xd40 [ 114.629136][ T6134] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 114.629148][ T6134] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 114.629163][ T6134] shmem_get_folio_gfp+0x758/0x1af0 [ 114.629178][ T6134] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 114.629191][ T6134] ? filemap_map_pages+0x1155/0x1f10 [ 114.629209][ T6134] shmem_fault+0x1fb/0xa30 [ 114.629221][ T6134] ? __pfx_shmem_fault+0x10/0x10 [ 114.629232][ T6134] ? __pte_offset_map+0x9a/0x470 [ 114.629249][ T6134] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.629266][ T6134] ? find_held_lock+0x2b/0x80 [ 114.629278][ T6134] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.629293][ T6134] __do_fault+0x10b/0x440 [ 114.629308][ T6134] do_fault+0xb3f/0x1890 [ 114.629319][ T6134] ? __pfx_do_fault+0x10/0x10 [ 114.629328][ T6134] ? rcu_read_unlock+0x2d/0xb0 [ 114.629339][ T6134] ? rcu_read_unlock+0x2d/0xb0 [ 114.629355][ T6134] __handle_mm_fault+0x1858/0x2f40 [ 114.629370][ T6134] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.629382][ T6134] ? __pfx_follow_page_pte+0x10/0x10 [ 114.629407][ T6134] handle_mm_fault+0x363/0xa30 [ 114.629423][ T6134] __get_user_pages+0x7ca/0x1d50 [ 114.629442][ T6134] ? lock_acquire+0x1d1/0x380 [ 114.629456][ T6134] ? __pfx___get_user_pages+0x10/0x10 [ 114.629476][ T6134] get_dump_page+0x27e/0x3d0 [ 114.629491][ T6134] ? __pfx_get_dump_page+0x10/0x10 [ 114.629507][ T6134] ? dump_user_range+0x7e0/0xe90 [ 114.629522][ T6134] dump_user_range+0x19c/0xe90 [ 114.629538][ T6134] ? __pfx_dump_user_range+0x10/0x10 [ 114.629553][ T6134] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 114.629568][ T6134] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 114.629583][ T6134] ? __pfx_writenote+0x10/0x10 [ 114.629599][ T6134] elf_core_dump+0x2d97/0x3d60 [ 114.629620][ T6134] ? __pfx_elf_core_dump+0x10/0x10 [ 114.629631][ T6134] ? kasan_save_stack+0x3f/0x50 [ 114.629641][ T6134] ? kasan_save_stack+0x30/0x50 [ 114.629650][ T6134] ? kasan_save_track+0x14/0x30 [ 114.629660][ T6134] ? __kasan_kmalloc+0xaa/0xb0 [ 114.629669][ T6134] ? coredump_write+0x37b/0x1c20 [ 114.629680][ T6134] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 114.629691][ T6134] ? vfs_coredump+0x9b0/0x1180 [ 114.629702][ T6134] ? asm_exc_page_fault+0x26/0x30 [ 114.629714][ T6134] ? 0xffffffffff600000 [ 114.629744][ T6134] ? lock_acquire+0x1d1/0x380 [ 114.629757][ T6134] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 114.629774][ T6134] ? coredump_write+0xd88/0x1c20 [ 114.629785][ T6134] coredump_write+0xd88/0x1c20 [ 114.629802][ T6134] ? __pfx_coredump_write+0x10/0x10 [ 114.629818][ T6134] ? __pfx_make_vfsuid+0x10/0x10 [ 114.629834][ T6134] do_coredump.constprop.0+0x9bb/0x25e0 [ 114.629849][ T6134] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 114.629873][ T6134] ? __lock_acquire+0x5c0/0x1f40 [ 114.629889][ T6134] ? trace_kmalloc+0xeb/0x110 [ 114.629900][ T6134] ? __kasan_kmalloc+0xaa/0xb0 [ 114.629910][ T6134] ? __kmalloc_noprof+0x350/0x840 [ 114.629928][ T6134] ? lock_acquire+0x1d1/0x380 [ 114.629942][ T6134] ? do_raw_spin_lock+0x128/0x260 [ 114.629951][ T6134] ? find_held_lock+0x2b/0x80 [ 114.629962][ T6134] ? vfs_coredump+0x6f8/0x1180 [ 114.629974][ T6134] ? rcu_is_watching+0x13/0xc0 [ 114.629988][ T6134] vfs_coredump+0x9b0/0x1180 [ 114.630002][ T6134] ? __pfx_vfs_coredump+0x10/0x10 [ 114.630030][ T6134] ? rcu_is_watching+0x13/0xc0 [ 114.630043][ T6134] get_signal+0x1fba/0x22e0 [ 114.630062][ T6134] ? __pfx_get_signal+0x10/0x10 [ 114.630079][ T6134] arch_do_signal_or_restart+0x91/0x7e0 [ 114.630091][ T6134] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 114.630110][ T6134] irqentry_exit+0x542/0xab0 [ 114.630125][ T6134] asm_exc_page_fault+0x26/0x30 [ 114.630135][ T6134] RIP: 0033:0x7f008619fb21 [ 114.630145][ T6134] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 114.630154][ T6134] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 114.630163][ T6134] RAX: 0000000000000000 RBX: 00007f0086426090 RCX: 00007f008619fb19 [ 114.630169][ T6134] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 114.630175][ T6134] RBP: 00007f0086237b70 R08: 0000000000000000 R09: 0000000000000000 [ 114.630181][ T6134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.630186][ T6134] R13: 00007f0086426128 R14: 00007f0086426090 R15: 00007ffe585db428 [ 114.630200][ T6134] [ 114.630204][ T6134] memory: usage 307200kB, limit 307200kB, failcnt 39204 [ 114.630210][ T6134] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 114.630216][ T6134] kmem: usage 2392kB, limit 9007199254740988kB, failcnt 0 [ 114.630222][ T6134] Memory cgroup stats for /syz0: [ 114.630287][ T6134] cache 311984128 [ 114.630291][ T6134] rss 110592 [ 114.630295][ T6134] rss_huge 0 [ 114.630298][ T6134] shmem 311984128 [ 114.630301][ T6134] mapped_file 211755008 [ 114.630305][ T6134] dirty 0 [ 114.630308][ T6134] writeback 0 [ 114.630311][ T6134] workingset_refault_anon 6 [ 114.630315][ T6134] workingset_refault_file 54 [ 114.630318][ T6134] swap 127909888 [ 114.630321][ T6134] swapcached 24576 [ 114.630325][ T6134] pgpgin 165809 [ 114.630328][ T6134] pgpgout 89608 [ 114.630331][ T6134] pgfault 80823 [ 114.630334][ T6134] pgmajfault 3 [ 114.630338][ T6134] inactive_anon 11751424 [ 114.630341][ T6134] active_anon 300363776 [ 114.630344][ T6134] inactive_file 0 [ 114.630348][ T6134] active_file 0 [ 114.630351][ T6134] unevictable 0 [ 114.630354][ T6134] hierarchical_memory_limit 314572800 [ 114.630358][ T6134] hierarchical_memsw_limit 9223372036854771712 [ 114.630362][ T6134] total_cache 311984128 [ 114.630366][ T6134] total_rss 110592 [ 114.630369][ T6134] total_rss_huge 0 [ 114.630372][ T6134] total_shmem 311984128 [ 114.630376][ T6134] total_mapped_file 211755008 [ 114.630379][ T6134] total_dirty 0 [ 114.630383][ T6134] total_writeback 0 [ 114.630386][ T6134] total_workingset_refault_anon 6 [ 114.630390][ T6134] total_workingset_refault_file 54 [ 114.630393][ T6134] total_swap 127909888 [ 114.630397][ T6134] total_swapcached 24576 [ 114.630400][ T6134] total_pgpgin 165809 [ 114.630404][ T6134] total_pgpgout 89608 [ 114.630407][ T6134] total_pgfault 80823 [ 114.630410][ T6134] total_pgmajfault 3 [ 114.630414][ T6134] total_inactive_anon 11751424 [ 114.630417][ T6134] total_active_anon 300363776 [ 114.630421][ T6134] total_inactive_file 0 [ 114.630424][ T6134] total_active_file 0 [ 114.630428][ T6134] total_unevictable 0 [ 114.630431][ T6134] anon_cost 0 [ 114.630434][ T6134] file_cost 0 [ 114.630438][ T6134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.58,pid=6134,uid=0 [ 114.630523][ T6134] Memory cgroup out of memory: Killed process 6134 (syz.0.58) total-vm:331800kB, anon-rss:1316kB, file-rss:20548kB, shmem-rss:99632kB, UID:0 pgtables:312kB oom_score_adj:1000 [ 114.701214][ T6134] syz.0.58 (6134) used greatest stack depth: 19144 bytes left [ 114.777282][ T34] oom_reaper: reaped process 5959 (syz.0.23), now anon-rss:0kB, file-rss:20480kB, shmem-rss:100944kB [ 115.091569][ T31] audit: type=1400 audit(1794068473.358:287): avc: denied { mount } for pid=6145 comm="syz.1.64" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 115.973964][ T6149] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 116.167068][ T5764] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.313799][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 116.316118][ T5764] usb 2-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 116.353922][ T5764] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.353946][ T5764] usb 2-1: config 0 has no interface number 0 [ 116.353974][ T5764] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.353994][ T5764] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.354012][ T5764] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.354031][ T5764] usb 2-1: config 0 interface 1 has no altsetting 0 [ 116.354056][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.370100][ T5764] usb 2-1: config 0 descriptor?? [ 116.413332][ T5764] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 118.608045][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 118.791133][ T6145] ima: policy update failed [ 118.791309][ T31] audit: type=1802 audit(1794068477.058:288): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.1.64" res=0 errno=-22 [ 118.820551][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820584][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820601][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820618][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820635][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820651][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820667][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820683][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820706][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820722][ T5764] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 118.820760][ T5764] elan 0003:04F3:074D.0001: unbalanced collection at end of report description [ 118.821222][ T5764] elan 0003:04F3:074D.0001: Hid Parse failed [ 118.821291][ T5764] elan 0003:04F3:074D.0001: probe with driver elan failed with error -22 [ 118.862875][ T5764] usb 2-1: USB disconnect, device number 2 [ 119.114750][ T6166] program syz.3.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.460317][ T31] audit: type=1400 audit(1794068477.728:289): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 119.553228][ T31] audit: type=1400 audit(1794068477.818:290): avc: denied { setopt } for pid=6169 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 119.661890][ T31] audit: type=1400 audit(1794068477.928:291): avc: denied { create } for pid=6169 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.728041][ T31] audit: type=1400 audit(1794068477.988:292): avc: denied { ioctl } for pid=6169 comm="syz.1.72" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0xc00c642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.477401][ T6180] 0x0000000000ec-0x0000000000f2 : "" [ 124.067349][ T6180] ftl_cs: FTL header corrupt! [ 125.389145][ T6198] 0x0000000000ec-0x0000000000f2 : "" [ 126.055474][ T6198] ftl_cs: FTL header corrupt! [ 127.525643][ T6199] syz.2.66 (6199) used greatest stack depth: 18648 bytes left [ 128.404065][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.404111][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.054068][ T31] audit: type=1400 audit(1794068488.318:293): avc: denied { mount } for pid=6216 comm="syz.0.83" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 131.974792][ T992] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 132.124200][ T992] usb 1-1: New USB device found: idVendor=5543, idProduct=901e, bcdDevice=94.f1 [ 132.124239][ T992] usb 1-1: too many configurations: 107, using maximum allowed: 8 [ 132.152760][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 132.152785][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 132.152813][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.152836][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.893884][ T6234] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.084090][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.084115][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.084145][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.084166][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.124651][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.124672][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.124700][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.124721][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.125622][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.125637][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.125665][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.125685][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.126457][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.126472][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.126498][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.126517][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.127444][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.127458][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.127486][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.127505][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.130573][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.130590][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.130617][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.130637][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.131471][ T992] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 133.131485][ T992] usb 1-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 133.131513][ T992] usb 1-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.131533][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.133173][ T992] usb 1-1: New USB device strings: Mfr=77, Product=77, SerialNumber=75 [ 133.133191][ T992] usb 1-1: Product: syz [ 133.133203][ T992] usb 1-1: Manufacturer: syz [ 133.133215][ T992] usb 1-1: SerialNumber: syz [ 133.157936][ T992] usb 1-1: config 0 descriptor?? [ 133.180333][ T992] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.231475][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 134.364256][ T6239] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 134.399891][ T31] audit: type=1400 audit(1794068492.668:294): avc: denied { ioctl } for pid=6238 comm="syz.3.85" path="socket:[10058]" dev="sockfs" ino=10058 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.412292][ T6239] TC_ACT_REPEAT abuse ? [ 134.467206][ T5725] usb 1-1: USB disconnect, device number 2 [ 134.508392][ T31] audit: type=1400 audit(1794068492.778:295): avc: denied { create } for pid=6243 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.513072][ T31] audit: type=1400 audit(1794068492.778:296): avc: denied { bind } for pid=6243 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.594503][ T31] audit: type=1400 audit(1794068492.868:297): avc: denied { create } for pid=6243 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.595790][ T31] audit: type=1400 audit(1794068492.868:298): avc: denied { ioctl } for pid=6243 comm="syz.2.80" path="socket:[10746]" dev="sockfs" ino=10746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.555284][ T1221] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.904885][ T1221] usb 3-1: New USB device found: idVendor=9710, idProduct=7720, bcdDevice=0.00 [ 135.972841][ T1221] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.973259][ T1221] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 135.973543][ T1221] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 135.995658][ T1221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.038337][ T1221] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.059194][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.111706][ T6245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.111822][ T6245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.111925][ T6245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.115844][ T1221] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 136.389787][ T1221] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 136.396561][ T6266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.88'. [ 136.402285][ T1221] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 136.506930][ T31] audit: type=1400 audit(1794068494.778:299): avc: denied { bind } for pid=6262 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.620808][ T6245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.640758][ T31] audit: type=1400 audit(1794068494.908:300): avc: denied { accept } for pid=6243 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.656427][ T31] audit: type=1400 audit(1794068494.908:301): avc: denied { write } for pid=6243 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.328188][ T6272] 0x0000000000ec-0x0000000000f2 : "" [ 139.464609][ T6272] ftl_cs: FTL header corrupt! [ 139.992037][ T989] usb 3-1: USB disconnect, device number 4 [ 139.992045][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 141.258356][ T989] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 141.286301][ T989] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 141.300951][ T989] mos7720 3-1:1.0: device disconnected [ 141.627909][ T6284] netlink: 72 bytes leftover after parsing attributes in process `syz.2.100'. [ 141.629325][ T31] audit: type=1400 audit(1794068499.898:302): avc: denied { create } for pid=6282 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.745976][ T31] audit: type=1400 audit(1794068500.018:303): avc: denied { bind } for pid=6285 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.788079][ T31] audit: type=1400 audit(1794068500.058:304): avc: denied { ioctl } for pid=6285 comm="syz.1.101" path="socket:[10857]" dev="sockfs" ino=10857 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.529956][ T31] audit: type=1400 audit(1794068500.788:305): avc: denied { read } for pid=6289 comm="syz.0.92" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.530003][ T31] audit: type=1400 audit(1794068500.788:306): avc: denied { open } for pid=6289 comm="syz.0.92" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.530038][ T31] audit: type=1400 audit(1794068500.788:307): avc: denied { ioctl } for pid=6289 comm="syz.0.92" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 142.714609][ T6295] netlink: 'syz.2.102': attribute type 11 has an invalid length. [ 142.936513][ T31] audit: type=1400 audit(1794068501.208:308): avc: denied { write } for pid=6298 comm="syz.2.105" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.059937][ T31] audit: type=1400 audit(1794068501.328:309): avc: denied { create } for pid=6300 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.081782][ T31] audit: type=1400 audit(1794068501.338:310): avc: denied { write } for pid=6300 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.081820][ T31] audit: type=1400 audit(1794068501.338:311): avc: denied { read } for pid=6300 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.518033][ T6325] 0x0000000000ec-0x0000000000f2 : "" [ 147.646135][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 147.646151][ T31] audit: type=1400 audit(1794068505.918:319): avc: denied { write } for pid=6323 comm="syz.3.99" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.664179][ T31] audit: type=1400 audit(1794068505.928:320): avc: denied { ioctl } for pid=6323 comm="syz.3.99" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.082278][ T6325] ftl_cs: FTL header corrupt! [ 148.649891][ T6333] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.061027][ T6335] netlink: 'syz.1.113': attribute type 11 has an invalid length. [ 149.435940][ T6343] 0x0000000000ec-0x0000000000f2 : "" [ 151.171496][ T6343] ftl_cs: FTL header corrupt! [ 151.322471][ T31] audit: type=1400 audit(1794068509.588:321): avc: denied { connect } for pid=6345 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.354184][ T5764] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.355137][ T31] audit: type=1400 audit(1794068509.618:322): avc: denied { mount } for pid=6338 comm="syz.3.114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.356678][ T31] audit: type=1400 audit(1794068509.618:323): avc: denied { read } for pid=6338 comm="syz.3.114" name="dynamic_events" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 151.565734][ T31] audit: type=1400 audit(1794068509.828:324): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.635449][ T5764] usb 2-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 151.641851][ T5764] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 151.641879][ T5764] usb 2-1: config 1 has no interface number 0 [ 151.641913][ T5764] usb 2-1: config 1 interface 105 has no altsetting 0 [ 151.656293][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 151.656317][ T5764] usb 2-1: Product: syz [ 151.656329][ T5764] usb 2-1: Manufacturer: syz [ 151.656340][ T5764] usb 2-1: SerialNumber: syz [ 151.856458][ T31] audit: type=1400 audit(1794068510.128:325): avc: denied { open } for pid=6354 comm="syz.0.118" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 151.908915][ T31] audit: type=1400 audit(1794068510.178:326): avc: denied { ioctl } for pid=6354 comm="syz.0.118" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 151.987222][ T31] audit: type=1400 audit(1794068510.258:327): avc: denied { mounton } for pid=6352 comm="syz.3.117" path="/25/file0" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.154213][ T5725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.303823][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 152.304397][ T5725] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.308114][ T5725] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.308137][ T5725] usb 1-1: config 179 has no interface number 0 [ 152.308187][ T5725] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.308207][ T5725] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.308227][ T5725] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.308245][ T5725] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.308263][ T5725] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.308292][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.329313][ T6355] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.485727][ T5764] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 152.485944][ T5764] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 152.519078][ T5764] usb 2-1: USB disconnect, device number 3 [ 152.619906][ T5725] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 152.773180][ T5764] usb 1-1: USB disconnect, device number 3 [ 152.773272][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.773313][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.811009][ T31] audit: type=1400 audit(1794068511.078:328): avc: denied { mount } for pid=6354 comm="syz.0.118" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 152.826132][ T31] audit: type=1400 audit(1794068511.098:329): avc: denied { write } for pid=6354 comm="syz.0.118" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 152.906116][ T31] audit: type=1400 audit(1794068511.178:330): avc: denied { mounton } for pid=6354 comm="syz.0.118" path="/24/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 153.241387][ T31] audit: type=1400 audit(1794068511.508:331): avc: denied { create } for pid=6368 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.298615][ T31] audit: type=1400 audit(1794068511.568:332): avc: denied { setopt } for pid=6368 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.331946][ T31] audit: type=1400 audit(1794068511.598:333): avc: denied { create } for pid=6368 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.353881][ T31] audit: type=1400 audit(1794068511.628:334): avc: denied { ioctl } for pid=6368 comm="syz.4.116" path="socket:[11287]" dev="sockfs" ino=11287 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 153.945163][ T31] audit: type=1400 audit(1794068512.208:335): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 154.944366][ T31] audit: type=1400 audit(1794068513.158:336): avc: denied { write } for pid=6385 comm="syz.0.123" name="anycast6" dev="proc" ino=4026532846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 155.291743][ T6392] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.566516][ T31] audit: type=1326 audit(1794068513.838:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.2.111" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2b399fb19 code=0x0 [ 156.059040][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 157.009839][ T6408] netlink: 'syz.2.131': attribute type 11 has an invalid length. [ 157.202879][ T6412] netlink: 'syz.0.132': attribute type 11 has an invalid length. [ 158.005283][ T5725] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 158.156580][ T5725] usb 1-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.157415][ T5725] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.157437][ T5725] usb 1-1: config 1 has no interface number 0 [ 158.157459][ T5725] usb 1-1: config 1 interface 105 has no altsetting 0 [ 158.159019][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.159033][ T5725] usb 1-1: Product: syz [ 158.159041][ T5725] usb 1-1: Manufacturer: syz [ 158.159048][ T5725] usb 1-1: SerialNumber: syz [ 159.452691][ T6423] 0x0000000000ec-0x0000000000f2 : "" [ 160.374557][ T6423] ftl_cs: FTL header corrupt! [ 161.800433][ T5725] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 161.831945][ T5725] usb 1-1: USB disconnect, device number 5 [ 161.976479][ T31] kauditd_printk_skb: 152 callbacks suppressed [ 161.976496][ T31] audit: type=1400 audit(1794068520.248:490): avc: denied { listen } for pid=6444 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.977311][ T31] audit: type=1400 audit(1794068520.248:491): avc: denied { write } for pid=6444 comm="syz.0.142" lport=56841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.028497][ T31] audit: type=1400 audit(1794068520.298:492): avc: denied { accept } for pid=6444 comm="syz.0.142" lport=56841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.033356][ T31] audit: type=1400 audit(1794068520.298:493): avc: denied { append } for pid=6444 comm="syz.0.142" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.314330][ T31] audit: type=1400 audit(1794068520.578:494): avc: denied { mounton } for pid=6453 comm="syz.3.134" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 163.187809][ T31] audit: type=1400 audit(1794068520.828:495): avc: denied { create } for pid=6458 comm="syz.1.146" name="md0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.187856][ T31] audit: type=1400 audit(1794068520.838:496): avc: denied { read write } for pid=6458 comm="syz.1.146" name="md0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.187891][ T31] audit: type=1400 audit(1794068520.848:497): avc: denied { ioctl open } for pid=6458 comm="syz.1.146" path="/31/md0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.192801][ T6460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.192850][ T6460] block device autoloading is deprecated and will be removed. [ 163.255703][ T31] audit: type=1400 audit(1794068521.528:498): avc: denied { unlink } for pid=5615 comm="syz-executor" name="md0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 163.273328][ T31] audit: type=1400 audit(1794068521.528:499): avc: denied { accept } for pid=6453 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 164.981061][ T6479] 0x0000000000ec-0x0000000000f2 : "" [ 166.074286][ T6479] ftl_cs: FTL header corrupt! [ 166.916322][ T6470] 0x0000000000ec-0x0000000000f2 : "" [ 166.920320][ T6470] ftl_cs: FTL header corrupt! [ 167.137289][ T6490] FAULT_INJECTION: forcing a failure. [ 167.137289][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 167.137316][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 167.137335][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.137344][ T6490] Call Trace: [ 167.137351][ T6490] [ 167.137358][ T6490] dump_stack_lvl+0x100/0x190 [ 167.137391][ T6490] should_fail_ex.cold+0x5/0xa [ 167.137418][ T6490] should_failslab+0xc2/0x120 [ 167.137436][ T6490] __kvmalloc_node_noprof+0x113/0x9b0 [ 167.137460][ T6490] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 167.137480][ T6490] ? io_uring_setup.cold+0x1f4/0x1c7e [ 167.137503][ T6490] io_uring_setup.cold+0x1f4/0x1c7e [ 167.137524][ T6490] ? lock_acquire+0x1d1/0x380 [ 167.137546][ T6490] ? avc_has_perm_noaudit+0x56/0x470 [ 167.137568][ T6490] ? __pfx_io_uring_setup+0x10/0x10 [ 167.137588][ T6490] ? find_held_lock+0x2b/0x80 [ 167.137605][ T6490] ? avc_has_perm_noaudit+0x11e/0x470 [ 167.137626][ T6490] ? avc_has_perm_noaudit+0x11e/0x470 [ 167.137662][ T6490] ? ksys_write+0x1ac/0x250 [ 167.137680][ T6490] ? __pfx_ksys_write+0x10/0x10 [ 167.137703][ T6490] __x64_sys_io_uring_setup+0xc2/0x170 [ 167.137725][ T6490] do_syscall_64+0x123/0x790 [ 167.137749][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.137767][ T6490] RIP: 0033:0x7fb2b399fb19 [ 167.137782][ T6490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.137798][ T6490] RSP: 002b:00007fb2b48a3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 167.137816][ T6490] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fb2b399fb19 [ 167.137828][ T6490] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 167.137838][ T6490] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 167.137848][ T6490] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 167.137859][ T6490] R13: 0000200000000b10 R14: 00007fb2b48a3fd8 R15: 0000000000000000 [ 167.137881][ T6490] [ 168.393259][ T6501] 0x0000000000ec-0x0000000000f2 : "" [ 170.248016][ T6501] ftl_cs: FTL header corrupt! [ 171.576118][ T31] audit: type=1400 audit(1794068529.848:500): avc: denied { listen } for pid=6516 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.737745][ T31] audit: type=1400 audit(1794068530.008:501): avc: denied { recv } for pid=6508 comm="syz.3.156" saddr=10.128.0.169 src=30006 daddr=10.128.0.168 dest=37764 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 171.792962][ T31] audit: type=1400 audit(1794068530.058:502): avc: denied { write } for pid=6518 comm="syz.1.160" path="socket:[13779]" dev="sockfs" ino=13779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 172.152035][ T31] audit: type=1400 audit(1794068530.418:503): avc: denied { create } for pid=6527 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.154578][ T31] audit: type=1400 audit(1794068530.428:504): avc: denied { connect } for pid=6527 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 172.369001][ T31] audit: type=1400 audit(1794068530.638:505): avc: denied { ioctl } for pid=6527 comm="syz.3.163" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13805 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.594456][ T31] audit: type=1400 audit(1794068530.868:506): avc: denied { append } for pid=6527 comm="syz.3.163" name="virtual_nci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.865408][ T6542] FAULT_INJECTION: forcing a failure. [ 172.865408][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 172.865434][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT(full) [ 172.865453][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 172.865463][ T6542] Call Trace: [ 172.865469][ T6542] [ 172.865476][ T6542] dump_stack_lvl+0x100/0x190 [ 172.865510][ T6542] should_fail_ex.cold+0x5/0xa [ 172.865537][ T6542] should_failslab+0xc2/0x120 [ 172.865558][ T6542] __kmalloc_noprof+0xfc/0x840 [ 172.865584][ T6542] ? trace_kmalloc+0xeb/0x110 [ 172.865601][ T6542] ? lsm_blob_alloc+0x68/0x90 [ 172.865626][ T6542] lsm_blob_alloc+0x68/0x90 [ 172.865647][ T6542] security_sk_alloc+0x2d/0x290 [ 172.865671][ T6542] sk_prot_alloc+0x12a/0x2a0 [ 172.865699][ T6542] sk_alloc+0x36/0xe80 [ 172.865719][ T6542] bpf_prog_test_run_skb+0x4d2/0x3560 [ 172.865744][ T6542] ? lock_acquire+0x1d1/0x380 [ 172.865767][ T6542] ? __fget_files+0x34/0x3d0 [ 172.865791][ T6542] ? find_held_lock+0x2b/0x80 [ 172.865810][ T6542] ? __fget_files+0x151/0x3d0 [ 172.865838][ T6542] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.865864][ T6542] ? fput+0x7c/0x100 [ 172.865889][ T6542] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.865911][ T6542] __sys_bpf+0x1d13/0x4b60 [ 172.865935][ T6542] ? __pfx___sys_bpf+0x10/0x10 [ 172.865951][ T6542] ? find_held_lock+0x2b/0x80 [ 172.865968][ T6542] ? get_pid_task+0xfc/0x250 [ 172.865983][ T6542] ? get_pid_task+0xfc/0x250 [ 172.866007][ T6542] ? find_held_lock+0x2b/0x80 [ 172.866031][ T6542] ? rcu_read_lock_any_held+0x6a/0x90 [ 172.866052][ T6542] ? find_held_lock+0x2b/0x80 [ 172.866069][ T6542] ? ksys_write+0x190/0x250 [ 172.866085][ T6542] ? ksys_write+0x190/0x250 [ 172.866102][ T6542] ? lock_acquire+0x1d1/0x380 [ 172.866142][ T6542] ? fput+0x7c/0x100 [ 172.866169][ T6542] ? ksys_write+0x1ac/0x250 [ 172.866190][ T6542] ? __x64_sys_bpf+0xce/0x140 [ 172.866205][ T6542] __x64_sys_bpf+0xce/0x140 [ 172.866222][ T6542] ? do_syscall_64+0xae/0x790 [ 172.866244][ T6542] do_syscall_64+0x123/0x790 [ 172.866267][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.866285][ T6542] RIP: 0033:0x7f08dcd9fb19 [ 172.866300][ T6542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.866316][ T6542] RSP: 002b:00007f08ddc17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.866333][ T6542] RAX: ffffffffffffffda RBX: 00007f08dd025fa0 RCX: 00007f08dcd9fb19 [ 172.866345][ T6542] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 172.866356][ T6542] RBP: 00007f08ddc17090 R08: 0000000000000000 R09: 0000000000000000 [ 172.866366][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.866376][ T6542] R13: 00007f08dd026038 R14: 00007f08dd025fa0 R15: 00007ffe4aaad428 [ 172.866403][ T6542] [ 173.507667][ T6553] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 174.823637][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.983628][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 174.991566][ T10] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 174.992430][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.992470][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.992494][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.992513][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.992532][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.993390][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.993403][ T10] usb 4-1: Manufacturer: syz [ 175.073488][ T10] usb 4-1: config 0 descriptor?? [ 175.393630][ T10] rc_core: IR keymap rc-hauppauge not found [ 175.393646][ T10] Registered IR keymap rc-empty [ 175.393978][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.415363][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.439427][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 175.463916][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 175.496888][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.514601][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.535670][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.554509][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.574734][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.593777][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.617797][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.633700][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.655047][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.683678][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 175.708735][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.708759][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.761575][ T10] usb 4-1: USB disconnect, device number 3 [ 176.091829][ T31] audit: type=1400 audit(1794068534.358:507): avc: denied { setopt } for pid=6571 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.334015][ T31] audit: type=1400 audit(1794068534.608:508): avc: denied { map } for pid=6575 comm="syz.2.172" path="/proc/116/net/fib_trie" dev="proc" ino=4026533234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 176.693111][ T6585] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 177.092688][ T6593] X.509: Couldn't decode AuthKeyIdentifier [ 177.421652][ T6589] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 177.421687][ T6589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.489701][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 177.573658][ T31] audit: type=1400 audit(1794068535.838:509): avc: denied { firmware_load } for pid=6575 comm="syz.2.172" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 178.203428][ T6610] FAULT_INJECTION: forcing a failure. [ 178.203428][ T6610] name failslab, interval 1, probability 0, space 0, times 0 [ 178.203480][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 178.203501][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 178.203512][ T6610] Call Trace: [ 178.203518][ T6610] [ 178.203525][ T6610] dump_stack_lvl+0x100/0x190 [ 178.203558][ T6610] should_fail_ex.cold+0x5/0xa [ 178.203582][ T6610] should_failslab+0xc2/0x120 [ 178.203603][ T6610] kmem_cache_alloc_noprof+0x92/0x6a0 [ 178.203631][ T6610] ? dst_alloc+0x99/0x1a0 [ 178.203657][ T6610] dst_alloc+0x99/0x1a0 [ 178.203679][ T6610] rt_dst_alloc+0x35/0x3a0 [ 178.203701][ T6610] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 178.203733][ T6610] ip_route_output_key_hash+0x118/0x2b0 [ 178.203759][ T6610] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 178.203782][ T6610] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 178.203807][ T6610] ? preempt_schedule+0x57/0xd0 [ 178.203827][ T6610] ? preempt_schedule_thunk+0x16/0x40 [ 178.203850][ T6610] ? percpu_counter_add_batch+0xb9/0x230 [ 178.203880][ T6610] ip_route_output_flow+0x27/0x150 [ 178.203906][ T6610] tcp_v4_connect+0x932/0x1c30 [ 178.203937][ T6610] ? __pfx_tcp_v4_connect+0x10/0x10 [ 178.203959][ T6610] ? __lock_acquire+0x5c0/0x1f40 [ 178.203989][ T6610] __inet_stream_connect+0x208/0xff0 [ 178.204015][ T6610] ? lock_acquire+0x1d1/0x380 [ 178.204039][ T6610] ? __pfx___inet_stream_connect+0x10/0x10 [ 178.204061][ T6610] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 178.204084][ T6610] ? __local_bh_enable_ip+0xa5/0x120 [ 178.204109][ T6610] inet_stream_connect+0x57/0xa0 [ 178.204132][ T6610] __sys_connect_file+0x146/0x1a0 [ 178.204154][ T6610] __sys_connect+0x141/0x170 [ 178.204172][ T6610] ? __pfx___sys_connect+0x10/0x10 [ 178.204199][ T6610] ? exit_to_user_mode_loop+0x166/0x700 [ 178.204217][ T6610] ? rcu_is_watching+0x13/0xc0 [ 178.204237][ T6610] ? trace_hardirqs_off+0x70/0x170 [ 178.204263][ T6610] __x64_sys_connect+0x72/0xb0 [ 178.204281][ T6610] ? lockdep_hardirqs_on+0x7d/0x110 [ 178.204301][ T6610] do_syscall_64+0x123/0x790 [ 178.204325][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.204344][ T6610] RIP: 0033:0x7fb2b399fb19 [ 178.204359][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.204376][ T6610] RSP: 002b:00007fb2b4862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 178.204394][ T6610] RAX: ffffffffffffffda RBX: 00007fb2b3c26180 RCX: 00007fb2b399fb19 [ 178.204406][ T6610] RDX: 0000000000000010 RSI: 0000200000000840 RDI: 0000000000000006 [ 178.204416][ T6610] RBP: 00007fb2b4862090 R08: 0000000000000000 R09: 0000000000000000 [ 178.204432][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.204443][ T6610] R13: 00007fb2b3c26218 R14: 00007fb2b3c26180 R15: 00007ffc446f31c8 [ 178.204468][ T6610] [ 178.210285][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 178.213693][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 180.999148][ T31] audit: type=1400 audit(1794068539.268:510): avc: denied { sqpoll } for pid=6621 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.065714][ T6622] netlink: 27 bytes leftover after parsing attributes in process `syz.2.184'. [ 181.487014][ T6626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.972887][ T6645] netlink: 'syz.2.192': attribute type 11 has an invalid length. [ 184.086594][ T31] audit: type=1326 audit(1794068542.348:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.4.191" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac2999fb19 code=0x0 [ 184.159634][ T31] audit: type=1400 audit(1794068542.428:512): avc: denied { egress } for pid=1221 comm="kworker/1:2" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 184.159664][ T31] audit: type=1400 audit(1794068542.428:513): avc: denied { sendto } for pid=1221 comm="kworker/1:2" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 184.493027][ T6655] Cannot find add_set index 2 as target [ 186.384482][ T5757] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 187.056592][ T5757] usb 3-1: device descriptor read/all, error -71 [ 189.027730][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.027804][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.595039][ T6677] i2c i2c-0: new_device: Invalid device name [ 190.753805][ T5757] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.819150][ T31] audit: type=1400 audit(1794068549.088:514): avc: denied { execute } for pid=6681 comm="syz.4.198" name="file2" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.821843][ T6683] process 'syz.4.198' launched './file2' with NULL argv: empty string added [ 190.836336][ T31] audit: type=1400 audit(1794068549.088:515): avc: denied { execute_no_trans } for pid=6681 comm="syz.4.198" path="/37/file2" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.953621][ T5757] usb 1-1: Using ep0 maxpacket: 16 [ 190.955797][ T5757] usb 1-1: New USB device found: idVendor=28bd, idProduct=0935, bcdDevice=0.00 [ 190.960491][ T5757] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 190.960524][ T5757] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.960538][ T5757] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.960549][ T5757] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 190.960564][ T5757] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.960589][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.040809][ T5757] usb 1-1: config 0 descriptor?? [ 191.093838][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 191.093909][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 191.093957][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 191.093995][ T5627] Bluetooth: hci0: command 0x0c3a tx timeout [ 191.734432][ T5757] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0935.0002/input/input7 [ 191.808944][ T6690] fuse: Unknown parameter '017777777777777777777770x0000000000000003©X±:Q3|—£Là«Ë_±@¥ž�WÉ L’ë÷ªÏ4' [ 191.909503][ T5757] uclogic 0003:28BD:0935.0002: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0935] on usb-dummy_hcd.0-1/input0 [ 191.910985][ T6691] x_tables: duplicate underflow at hook 2 [ 191.923094][ T31] audit: type=1400 audit(1794068550.178:516): avc: denied { setopt } for pid=6674 comm="syz.0.185" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.357557][ T5757] usb 1-1: USB disconnect, device number 6 [ 192.564113][ T31] audit: type=1400 audit(1794068550.828:517): avc: denied { getopt } for pid=6698 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.660765][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 193.776079][ T6708] Cannot find add_set index 2 as target [ 194.930975][ T6724] FAULT_INJECTION: forcing a failure. [ 194.930975][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 194.931002][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.4.206 Not tainted syzkaller #0 PREEMPT(full) [ 194.931022][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 194.931032][ T6724] Call Trace: [ 194.931038][ T6724] [ 194.931045][ T6724] dump_stack_lvl+0x100/0x190 [ 194.931079][ T6724] should_fail_ex.cold+0x5/0xa [ 194.931107][ T6724] should_failslab+0xc2/0x120 [ 194.931128][ T6724] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 194.931154][ T6724] ? __alloc_skb+0x5b7/0x710 [ 194.931173][ T6724] ? __alloc_skb+0x140/0x710 [ 194.931196][ T6724] __alloc_skb+0x140/0x710 [ 194.931213][ T6724] ? __alloc_skb+0x5b7/0x710 [ 194.931232][ T6724] ? __pfx___alloc_skb+0x10/0x10 [ 194.931250][ T6724] ? find_held_lock+0x2b/0x80 [ 194.931269][ T6724] ? avc_has_perm_noaudit+0x11e/0x470 [ 194.931289][ T6724] ? avc_has_perm_noaudit+0x11e/0x470 [ 194.931314][ T6724] alloc_skb_with_frags+0xdb/0x750 [ 194.931340][ T6724] ? avc_has_perm+0x135/0x1e0 [ 194.931362][ T6724] sock_alloc_send_pskb+0x86a/0x9e0 [ 194.931392][ T6724] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 194.931410][ T6724] ? sock_has_perm+0x254/0x320 [ 194.931435][ T6724] ? __pfx_sock_has_perm+0x10/0x10 [ 194.931456][ T6724] ? __pfx_avc_has_perm+0x10/0x10 [ 194.931482][ T6724] hci_sock_sendmsg+0x1c7/0x26f0 [ 194.931507][ T6724] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 194.931529][ T6724] ? selinux_socket_sendmsg+0x198/0x2f0 [ 194.931555][ T6724] sock_write_iter+0x560/0x5d0 [ 194.931576][ T6724] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 194.931597][ T6724] ? __pfx_sock_write_iter+0x10/0x10 [ 194.931625][ T6724] ? bpf_lsm_file_permission+0x9/0x10 [ 194.931647][ T6724] ? security_file_permission+0x76/0x210 [ 194.931664][ T6724] ? rw_verify_area+0xce/0x6d0 [ 194.931690][ T6724] vfs_write+0x6af/0x1050 [ 194.931707][ T6724] ? __pfx_sock_write_iter+0x10/0x10 [ 194.931732][ T6724] ? __pfx_vfs_write+0x10/0x10 [ 194.931748][ T6724] ? find_held_lock+0x2b/0x80 [ 194.931778][ T6724] ksys_write+0x1f8/0x250 [ 194.931796][ T6724] ? __pfx_ksys_write+0x10/0x10 [ 194.931820][ T6724] do_syscall_64+0x123/0x790 [ 194.931841][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.931859][ T6724] RIP: 0033:0x7fac2999fb19 [ 194.931873][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.931890][ T6724] RSP: 002b:00007fac2a7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.931907][ T6724] RAX: ffffffffffffffda RBX: 00007fac29c25fa0 RCX: 00007fac2999fb19 [ 194.931918][ T6724] RDX: 000000000000000e RSI: 0000200000000c80 RDI: 0000000000000004 [ 194.931928][ T6724] RBP: 00007fac2a7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.931937][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.931953][ T6724] R13: 00007fac29c26038 R14: 00007fac29c25fa0 R15: 00007ffe3f43f478 [ 194.931976][ T6724] [ 195.347733][ T31] audit: type=1400 audit(1794068553.608:518): avc: denied { connect } for pid=6726 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.402812][ T31] audit: type=1400 audit(1794068553.668:519): avc: denied { wake_alarm } for pid=6726 comm="syz.1.207" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.471228][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.471827][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.514745][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.557711][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.569072][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.590875][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.686683][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.856505][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.915278][ T992] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.028744][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.141843][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.196775][ T992] usb 3-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 196.243696][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.267342][ T992] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.267376][ T992] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 196.336872][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.337015][ T992] usb 3-1: Product: syz [ 196.337397][ T992] usb 3-1: Manufacturer: syz [ 196.341485][ T992] usb 3-1: SerialNumber: syz [ 196.431651][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.522722][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.570363][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.571029][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.605481][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.629230][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.644848][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.668174][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.668966][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.673296][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.707492][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.739942][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.755656][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.773353][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.790901][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.802116][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.817555][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.836014][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.868039][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.894717][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.909096][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.912473][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.586135][ T992] usb 3-1: failed to send ARPC request 1: -110 [ 197.586728][ T992] usb 3-1: failed to execute ARPC: -110 [ 197.586794][ T992] usb 3-1: failed to set connected state for cport 0: -110 [ 197.586842][ T992] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 197.695422][ T992] usb 3-1: failed to send ARPC request 3: -32 [ 197.695567][ T992] usb 3-1: failed to execute ARPC: -32 [ 197.695582][ T992] usb 3-1: failed to clear cport 0: -32 [ 197.695597][ T992] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 197.772886][ T992] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 197.838006][ T992] usb 3-1: USB disconnect, device number 7 [ 198.251525][ T6755] netlink: 72 bytes leftover after parsing attributes in process `syz.4.214'. [ 198.460747][ T1221] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 199.145865][ T1221] usb 2-1: device descriptor read/64, error -71 [ 199.414998][ T1221] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 199.548575][ T1221] usb 2-1: device descriptor read/64, error -71 [ 199.657705][ T1221] usb usb2-port1: attempt power cycle [ 200.454062][ T1221] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 200.477357][ T1221] usb 2-1: device descriptor read/8, error -71 [ 201.297286][ T1221] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 201.316621][ T1221] usb 2-1: device descriptor read/8, error -71 [ 201.423888][ T1221] usb usb2-port1: unable to enumerate USB device [ 201.533894][ T31] audit: type=1400 audit(1794068559.808:520): avc: denied { write } for pid=6789 comm="syz.0.211" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.831240][ T31] audit: type=1400 audit(1794068560.098:521): avc: denied { write } for pid=6794 comm="syz.2.224" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.868907][ T6796] usb usb7: usbfs: process 6796 (syz.2.224) did not claim interface 0 before use [ 202.506280][ T6799] syz_tun: entered allmulticast mode [ 202.508484][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 202.515526][ T6801] netlink: 64 bytes leftover after parsing attributes in process `syz.2.224'. [ 203.080267][ T6809] netlink: 'syz.2.227': attribute type 11 has an invalid length. [ 203.166407][ T31] audit: type=1400 audit(1794068561.438:522): avc: denied { ioctl } for pid=6811 comm="syz.1.228" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.277168][ T31] audit: type=1400 audit(1794068561.548:523): avc: denied { name_bind } for pid=6811 comm="syz.1.228" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 203.646072][ T6819] 0x0000000000ec-0x0000000000f2 : "" [ 204.737417][ T6819] ftl_cs: FTL header corrupt! [ 204.772858][ T989] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 205.725634][ T989] usb 3-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 205.746553][ T989] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 205.746684][ T989] usb 3-1: config 1 has no interface number 0 [ 205.746717][ T989] usb 3-1: config 1 interface 105 has no altsetting 0 [ 205.753350][ T989] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 205.753378][ T989] usb 3-1: Product: syz [ 205.753392][ T989] usb 3-1: Manufacturer: syz [ 205.753405][ T989] usb 3-1: SerialNumber: syz [ 206.301247][ T6823] 0x0000000000ec-0x0000000000f2 : "" [ 206.310863][ T6823] ftl_cs: FTL header corrupt! [ 206.351549][ T989] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 206.366365][ T989] usb 3-1: USB disconnect, device number 8 [ 208.134387][ T6844] capability: warning: `syz.1.234' uses deprecated v2 capabilities in a way that may be insecure [ 208.519308][ T31] audit: type=1326 audit(1794068566.788:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.3.235" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b69d9fb19 code=0x0 [ 208.601570][ T6854] syz_tun (unregistering): left allmulticast mode [ 208.612449][ T6852] device-mapper: raid: Choosing default region size of 4MiB [ 208.613026][ T6852] device-mapper: table: 248:4: raid: Insufficient redundancy to activate array (-EINVAL) [ 208.613038][ T6852] device-mapper: ioctl: error adding target to table [ 208.654444][ T6858] FAULT_INJECTION: forcing a failure. [ 208.654444][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 208.654464][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(full) [ 208.654476][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 208.654483][ T6858] Call Trace: [ 208.654536][ T6858] [ 208.654540][ T6858] dump_stack_lvl+0x100/0x190 [ 208.654587][ T6858] should_fail_ex.cold+0x5/0xa [ 208.654604][ T6858] should_failslab+0xc2/0x120 [ 208.654656][ T6858] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 208.654701][ T6858] ? __alloc_skb+0x140/0x710 [ 208.654752][ T6858] __alloc_skb+0x140/0x710 [ 208.654763][ T6858] ? __alloc_skb+0x5b7/0x710 [ 208.654775][ T6858] ? __pfx___alloc_skb+0x10/0x10 [ 208.654788][ T6858] ? __ip_append_data+0x24c4/0x4430 [ 208.654824][ T6858] ? __ip_append_data+0x24c4/0x4430 [ 208.654837][ T6858] __ip_append_data+0x2c3a/0x4430 [ 208.654851][ T6858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 208.654867][ T6858] ? __pfx___ip_append_data+0x10/0x10 [ 208.654879][ T6858] ? lock_acquire+0x1d1/0x380 [ 208.654914][ T6858] ? do_raw_spin_lock+0x128/0x260 [ 208.654925][ T6858] ip_append_data+0x10f/0x1a0 [ 208.654938][ T6858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 208.654951][ T6858] udp_sendmsg+0x9e8/0x2710 [ 208.655012][ T6858] ? __pfx_udp_sendmsg+0x10/0x10 [ 208.655031][ T6858] ? __pfx_sock_has_perm+0x10/0x10 [ 208.655085][ T6858] ? __pfx_udp_sendmsg+0x10/0x10 [ 208.655097][ T6858] inet_sendmsg+0x105/0x140 [ 208.655176][ T6858] sock_sendmsg+0x352/0x420 [ 208.655228][ T6858] ? __pfx_inet_sendmsg+0x10/0x10 [ 208.655242][ T6858] ? __pfx_sock_sendmsg+0x10/0x10 [ 208.655272][ T6858] splice_to_socket+0xbd5/0x1230 [ 208.655342][ T6858] ? __pfx_splice_to_socket+0x10/0x10 [ 208.655375][ T6858] ? bpf_lsm_file_permission+0x9/0x10 [ 208.655418][ T6858] ? security_file_permission+0x76/0x210 [ 208.655442][ T6858] ? __pfx_splice_to_socket+0x10/0x10 [ 208.655458][ T6858] do_splice+0x10a2/0x2090 [ 208.655474][ T6858] ? __lock_acquire+0x5c0/0x1f40 [ 208.655490][ T6858] ? ksys_write+0x190/0x250 [ 208.655515][ T6858] ? lock_acquire+0x1d1/0x380 [ 208.655531][ T6858] ? __pfx_do_splice+0x10/0x10 [ 208.655545][ T6858] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 208.655559][ T6858] ? __fget_files+0x34/0x3d0 [ 208.655660][ T6858] ? find_held_lock+0x2b/0x80 [ 208.655677][ T6858] __do_splice+0x33b/0x370 [ 208.655694][ T6858] ? __pfx___do_splice+0x10/0x10 [ 208.655713][ T6858] __x64_sys_splice+0x187/0x250 [ 208.655730][ T6858] do_syscall_64+0x123/0x790 [ 208.655811][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.655823][ T6858] RIP: 0033:0x7fac2999fb19 [ 208.655833][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.655844][ T6858] RSP: 002b:00007fac2a7a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 208.655858][ T6858] RAX: ffffffffffffffda RBX: 00007fac29c26180 RCX: 00007fac2999fb19 [ 208.655895][ T6858] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 208.655901][ T6858] RBP: 00007fac2a7a4090 R08: 000000000000714f R09: 0000000000000000 [ 208.655908][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.655914][ T6858] R13: 00007fac29c26218 R14: 00007fac29c26180 R15: 00007ffe3f43f478 [ 208.655929][ T6858] [ 208.791435][ T6850] fuse: root generation should be zero [ 209.128456][ T6863] Bluetooth: MGMT ver 1.23 [ 209.170372][ T6863] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 209.175334][ T6863] CIFS: Attempting to mount //127.0.0.1/share [ 209.990382][ T6863] CIFS: VFS: cifs_mount failed w/return code = -112 [ 210.116481][ T31] audit: type=1400 audit(1794068568.388:525): avc: denied { create } for pid=6867 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 210.294507][ T31] audit: type=1326 audit(1794068568.568:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2b399fb19 code=0x0 [ 210.503724][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.618867][ T31] audit: type=1400 audit(1794068568.888:527): avc: denied { setopt } for pid=6869 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.920514][ T5771] usb 4-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.921309][ T5771] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 210.921325][ T5771] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 210.921341][ T5771] usb 4-1: config 220 interface 0 has no altsetting 0 [ 210.965797][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.965831][ T5771] usb 4-1: Product: syz [ 210.965846][ T5771] usb 4-1: Manufacturer: syz [ 210.965860][ T5771] usb 4-1: SerialNumber: syz [ 211.636366][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.636687][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.691982][ T31] audit: type=1400 audit(1794068569.958:528): avc: denied { mount } for pid=6872 comm="syz.3.240" name="/" dev="ramfs" ino=14758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 211.844105][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.854515][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.688520][ T31] audit: type=1400 audit(1794068570.958:529): avc: denied { execute } for pid=6872 comm="syz.3.240" path="/cgroup.freeze" dev="ramfs" ino=15420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 213.524661][ T6900] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 214.369993][ T5771] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 214.371912][ T5771] usb 4-1: USB disconnect, device number 4 [ 217.087841][ T6919] loop0: detected capacity change from 0 to 3904 [ 217.196614][ T6921] FAULT_INJECTION: forcing a failure. [ 217.196614][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 217.196641][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.0.254 Not tainted syzkaller #0 PREEMPT(full) [ 217.196660][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.196669][ T6921] Call Trace: [ 217.196713][ T6921] [ 217.196721][ T6921] dump_stack_lvl+0x100/0x190 [ 217.196768][ T6921] should_fail_ex.cold+0x5/0xa [ 217.196796][ T6921] should_failslab+0xc2/0x120 [ 217.196832][ T6921] __kvmalloc_node_noprof+0x113/0x9b0 [ 217.196860][ T6921] ? alloc_netdev_mqs+0xd7/0x1540 [ 217.196895][ T6921] ? __pfx_erspan_setup+0x10/0x10 [ 217.196919][ T6921] alloc_netdev_mqs+0xd7/0x1540 [ 217.196941][ T6921] rtnl_create_link+0xc13/0xf80 [ 217.196958][ T6921] rtnl_newlink+0x15bc/0x2620 [ 217.196978][ T6921] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.196992][ T6921] ? avc_has_perm_noaudit+0x56/0x470 [ 217.197005][ T6921] ? find_held_lock+0x2b/0x80 [ 217.197016][ T6921] ? avc_has_perm_noaudit+0x11e/0x470 [ 217.197029][ T6921] ? avc_has_perm_noaudit+0x11e/0x470 [ 217.197061][ T6921] ? lock_acquire+0x1d1/0x380 [ 217.197075][ T6921] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 217.197090][ T6921] ? find_held_lock+0x2b/0x80 [ 217.197101][ T6921] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 217.197116][ T6921] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 217.197131][ T6921] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.197147][ T6921] rtnetlink_rcv_msg+0x95e/0xe90 [ 217.197163][ T6921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.197184][ T6921] netlink_rcv_skb+0x159/0x420 [ 217.197199][ T6921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.197215][ T6921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.197228][ T6921] ? __asan_memcpy+0x3c/0x60 [ 217.197248][ T6921] ? netlink_deliver_tap+0x1ae/0xb50 [ 217.197263][ T6921] netlink_unicast+0x668/0x950 [ 217.197279][ T6921] ? __pfx_netlink_unicast+0x10/0x10 [ 217.197297][ T6921] netlink_sendmsg+0x9ac/0x10c0 [ 217.197313][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.197330][ T6921] ? selinux_socket_sendmsg+0x198/0x2f0 [ 217.197348][ T6921] ? ____sys_sendmsg+0xa99/0xc30 [ 217.197363][ T6921] ____sys_sendmsg+0xa99/0xc30 [ 217.197378][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.197393][ T6921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.197411][ T6921] ? lock_acquire+0x1d1/0x380 [ 217.197425][ T6921] ? get_pid_task+0x2a/0x250 [ 217.197436][ T6921] ___sys_sendmsg+0x190/0x1e0 [ 217.197454][ T6921] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.197470][ T6921] ? get_pid_task+0x106/0x250 [ 217.197485][ T6921] ? find_held_lock+0x2b/0x80 [ 217.197505][ T6921] __sys_sendmsg+0x160/0x210 [ 217.197534][ T6921] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.197556][ T6921] do_syscall_64+0x123/0x790 [ 217.197581][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.197593][ T6921] RIP: 0033:0x7f008619fb19 [ 217.197602][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.197612][ T6921] RSP: 002b:00007f008704c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.197623][ T6921] RAX: ffffffffffffffda RBX: 00007f0086425fa0 RCX: 00007f008619fb19 [ 217.197629][ T6921] RDX: 0000000000000000 RSI: 0000200000002880 RDI: 0000000000000003 [ 217.197635][ T6921] RBP: 00007f008704c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.197641][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.197647][ T6921] R13: 00007f0086426038 R14: 00007f0086425fa0 R15: 00007ffe585db428 [ 217.197661][ T6921] [ 218.797897][ T31] audit: type=1400 audit(1794068577.058:530): avc: denied { getopt } for pid=6934 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.793799][ T31] audit: type=1800 audit(1794068578.058:531): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.259" name="cgroup.freeze" dev="ramfs" ino=15487 res=0 errno=-4 [ 219.993617][ T992] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.145271][ T992] usb 3-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 220.151551][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 220.151576][ T992] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 220.151594][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 220.151616][ T992] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 220.211879][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.211906][ T992] usb 3-1: Product: syz [ 220.211918][ T992] usb 3-1: Manufacturer: syz [ 220.211931][ T992] usb 3-1: SerialNumber: syz [ 220.227473][ T992] usb 3-1: config 0 descriptor?? [ 220.240884][ T992] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 220.333357][ T6951] netlink: 'syz.4.248': attribute type 11 has an invalid length. [ 220.827525][ T31] audit: type=1400 audit(1794068579.098:532): avc: denied { shutdown } for pid=6948 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.852598][ T31] audit: type=1400 audit(1794068579.118:533): avc: denied { connect } for pid=6948 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.860991][ T31] audit: type=1326 audit(1794068579.128:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.3.251" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b69d9fb19 code=0x0 [ 220.900947][ T31] audit: type=1400 audit(1794068579.168:535): avc: denied { name_connect } for pid=6948 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 221.023653][ T5764] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.071673][ T992] scsi host1: usb-storage 3-1:0.0 [ 221.144535][ T992] usb 3-1: USB disconnect, device number 9 [ 221.185735][ T5764] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 221.189130][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.189163][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.230177][ T5764] usb 2-1: config 0 descriptor?? [ 221.462553][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 221.512600][ T5764] usbhid 2-1:0.0: can't add hid device: -71 [ 221.512656][ T5764] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 221.539586][ T5764] usb 2-1: USB disconnect, device number 8 [ 222.480832][ T31] audit: type=1326 audit(1794068580.748:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.266" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b69d9fb19 code=0x0 [ 222.583889][ T5764] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.786425][ T5764] usb 2-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 222.789339][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.789384][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.831545][ T5764] usb 2-1: config 0 descriptor?? [ 223.913686][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.916032][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.030855][ T6961] FAULT_INJECTION: forcing a failure. [ 224.030855][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.030888][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 224.030911][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 224.030923][ T6961] Call Trace: [ 224.030930][ T6961] [ 224.030938][ T6961] dump_stack_lvl+0x100/0x190 [ 224.030975][ T6961] should_fail_ex.cold+0x5/0xa [ 224.031009][ T6961] strncpy_from_user+0x3b/0x2d0 [ 224.031043][ T6961] do_getname+0x78/0x390 [ 224.031075][ T6961] do_sys_openat2+0xc3/0x1d0 [ 224.031100][ T6961] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.031135][ T6961] __x64_sys_openat+0x12d/0x210 [ 224.031163][ T6961] ? __pfx___x64_sys_openat+0x10/0x10 [ 224.031198][ T6961] do_syscall_64+0x123/0x790 [ 224.031222][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.031240][ T6961] RIP: 0033:0x7f08dcd6034e [ 224.031256][ T6961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.031273][ T6961] RSP: 002b:00007f08ddc16b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.031292][ T6961] RAX: ffffffffffffffda RBX: 00007f08ddc176c0 RCX: 00007f08dcd6034e [ 224.031304][ T6961] RDX: 0000000000000002 RSI: 00007f08ddc16c00 RDI: ffffffffffffff9c [ 224.031315][ T6961] RBP: 00007f08ddc16c00 R08: 0000000000000000 R09: 0000000000000000 [ 224.031327][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 224.031338][ T6961] R13: 00007f08dd026038 R14: 00007f08dd025fa0 R15: 00007ffe4aaad428 [ 224.031364][ T6961] [ 224.417773][ T31] audit: type=1400 audit(1794068582.688:537): avc: denied { ioctl } for pid=6990 comm="syz.4.271" path="socket:[15653]" dev="sockfs" ino=15653 ioctlcmd=0x40786e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.519497][ T31] audit: type=1400 audit(1794068582.788:538): avc: denied { ioctl } for pid=6990 comm="syz.4.271" path="socket:[14952]" dev="sockfs" ino=14952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.776046][ T5764] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 224.804805][ T5764] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 225.132522][ T10] usb 2-1: USB disconnect, device number 9 [ 225.132563][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 225.783034][ T31] audit: type=1326 audit(1794068584.048:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08dcd9fb19 code=0x0 [ 225.892943][ T7007] device-mapper: raid: Choosing default region size of 4MiB [ 225.893479][ T7007] device-mapper: table: 248:5: raid: Insufficient redundancy to activate array (-EINVAL) [ 225.893491][ T7007] device-mapper: ioctl: error adding target to table [ 227.142635][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.142979][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.403630][ T5764] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.407139][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 227.430870][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 227.704832][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 227.875408][ T10] usb 5-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 227.908757][ T10] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 227.911678][ T5764] usb 2-1: Using ep0 maxpacket: 16 [ 227.969600][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.969668][ T10] usb 5-1: Product: syz [ 227.969708][ T10] usb 5-1: Manufacturer: syz [ 227.969745][ T10] usb 5-1: SerialNumber: syz [ 228.048862][ T5764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.048908][ T5764] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 228.174401][ T10] usb 5-1: config 0 descriptor?? [ 228.187327][ T5764] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 228.187355][ T5764] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.187375][ T5764] usb 2-1: config 1 interface 0 has no altsetting 0 [ 228.399558][ T5764] usb 2-1: string descriptor 0 read error: -22 [ 228.399669][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.903962][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 228.917598][ T7025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.949821][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 229.081838][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.097798][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 229.097828][ T10] usb 5-1: media controller created [ 229.120460][ T5764] usb 2-1: USB disconnect, device number 10 [ 229.180336][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.344776][ T7043] netlink: 'syz.0.284': attribute type 11 has an invalid length. [ 229.360955][ T10] usb 5-1: selecting invalid altsetting 7 [ 229.360970][ T10] cxusb: set interface failed [ 229.360977][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 230.077440][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 230.077454][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 230.354389][ T10] rc_core: IR keymap rc-dvico-portable not found [ 230.354407][ T10] Registered IR keymap rc-empty [ 230.370690][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 230.384642][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9 [ 230.409344][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 230.409364][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 230.506844][ T10] usb 5-1: USB disconnect, device number 4 [ 230.943136][ T7049] 0x0000000000ec-0x0000000000f2 : "" [ 230.952597][ T7049] ftl_cs: FTL header corrupt! [ 231.292767][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 231.304428][ T31] audit: type=1326 audit(1794068589.578:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f008619fb19 code=0x0 [ 231.394647][ T7072] device-mapper: raid: Choosing default region size of 4MiB [ 231.411928][ T7072] device-mapper: table: 248:6: raid: Insufficient redundancy to activate array (-EINVAL) [ 231.411947][ T7072] device-mapper: ioctl: error adding target to table [ 231.727180][ T7081] ip6gre1: entered allmulticast mode [ 231.751256][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.074901][ T7085] bridge1: entered promiscuous mode [ 232.252929][ T31] audit: type=1400 audit(1794068590.518:541): avc: denied { create } for pid=7057 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.584056][ T31] audit: type=1400 audit(1794068592.858:542): avc: denied { append } for pid=7095 comm="syz.3.297" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 234.673736][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 234.681337][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 234.700478][ T7096] usb usb2: usbfs: process 7096 (syz.3.297) did not claim interface 0 before use [ 234.716949][ T31] audit: type=1400 audit(1794068592.988:543): avc: denied { watch watch_reads } for pid=7091 comm="syz.0.294" path="/proc/203" dev="proc" ino=15112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 234.751267][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.818298][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 234.818381][ T7096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.870337][ T7105] usb usb2: usbfs: process 7105 (syz.3.297) did not claim interface 0 before use [ 234.919932][ T7096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.954923][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 235.004397][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 235.383622][ T7094] ceph: No mds server is up or the cluster is laggy [ 235.390709][ T7100] ceph: No mds server is up or the cluster is laggy [ 235.413734][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.464604][ T5764] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 235.524294][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 235.886022][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 235.914018][ T989] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 235.946545][ T31] audit: type=1400 audit(1794068594.218:544): avc: denied { bind } for pid=7111 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.993819][ T31] audit: type=1400 audit(1794068594.268:545): avc: denied { setopt } for pid=7111 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.999921][ T7113] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 236.043616][ T989] usb 4-1: device descriptor read/64, error -71 [ 236.145263][ T31] audit: type=1400 audit(1794068594.418:546): avc: denied { write } for pid=7114 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.294024][ T989] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 236.416399][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.424899][ T989] usb 4-1: device descriptor read/64, error -71 [ 236.431577][ T7113] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 236.535922][ T989] usb usb4-port1: attempt power cycle [ 236.647370][ T31] audit: type=1400 audit(1794068594.858:547): avc: denied { setopt } for pid=7122 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 237.033717][ T989] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 237.112405][ T989] usb 4-1: device descriptor read/8, error -71 [ 237.170064][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'. [ 237.385730][ T989] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.413219][ T989] usb 4-1: device descriptor read/8, error -71 [ 237.476406][ T7138] netlink: 72 bytes leftover after parsing attributes in process `syz.4.304'. [ 237.666284][ T7131] 0x0000000000ec-0x0000000000f2 : "" [ 238.848597][ T7131] ftl_cs: FTL header corrupt! [ 239.066788][ T989] usb usb4-port1: unable to enumerate USB device [ 239.899207][ T31] audit: type=1400 audit(1794068598.168:548): avc: denied { ioctl } for pid=7137 comm="syz.4.304" path="socket:[15182]" dev="sockfs" ino=15182 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.064210][ T31] audit: type=1400 audit(1794068598.338:549): avc: denied { bind } for pid=7137 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.143848][ T31] audit: type=1400 audit(1794068598.418:550): avc: denied { listen } for pid=7137 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.141056][ T7171] netlink: 'syz.2.312': attribute type 11 has an invalid length. [ 242.155686][ T31] audit: type=1400 audit(1794068600.428:551): avc: denied { read write } for pid=7155 comm="syz.4.309" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 242.157246][ T31] audit: type=1400 audit(1794068600.428:552): avc: denied { open } for pid=7155 comm="syz.4.309" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 242.263648][ T7170] mmap: syz.3.311 (7170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.265107][ T31] audit: type=1400 audit(1794068600.538:553): avc: denied { getopt } for pid=7168 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.918563][ T31] audit: type=1400 audit(1794068601.188:554): avc: denied { mount } for pid=7174 comm="syz.3.314" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 242.948865][ T31] audit: type=1800 audit(1794068601.218:555): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.314" name="(" dev="sda1" ino=2047 res=0 errno=-22 [ 243.136831][ T7179] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 243.413679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.272422][ T7190] usb usb7: usbfs: process 7190 (syz.3.317) did not claim interface 0 before use [ 249.386319][ T5757] dummy0: entered promiscuous mode [ 249.569431][ T5764] Process accounting resumed [ 250.455251][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.455309][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.723769][ T5771] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 251.888334][ T5771] usb 1-1: Using ep0 maxpacket: 16 [ 251.889548][ T5771] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.892252][ T5771] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 251.892286][ T5771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.954814][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.954848][ T5771] usb 1-1: Product: syz [ 251.954884][ T5771] usb 1-1: Manufacturer: syz [ 251.954920][ T5771] usb 1-1: SerialNumber: syz [ 252.292148][ T5771] usb 1-1: config 0 descriptor?? [ 252.452429][ T5771] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 252.452470][ T5771] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 253.016823][ T31] audit: type=1400 audit(1794068611.278:556): avc: denied { read write } for pid=7234 comm="syz.2.330" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.063882][ T31] audit: type=1400 audit(1794068611.328:557): avc: denied { open } for pid=7234 comm="syz.2.330" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 253.388156][ T5771] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 253.388420][ T5771] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 253.395243][ T5771] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 253.395257][ T5771] em28xx 1-1:0.0: No AC97 audio processor [ 253.429428][ T5771] usb 1-1: USB disconnect, device number 7 [ 253.430134][ T5771] em28xx 1-1:0.0: Disconnecting em28xx [ 253.568160][ T5771] em28xx: Freeing device [ 254.682723][ T31] audit: type=1400 audit(1794068612.948:558): avc: denied { bind } for pid=7242 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.682768][ T31] audit: type=1400 audit(1794068612.948:559): avc: denied { name_bind } for pid=7242 comm="syz.3.331" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 254.682799][ T31] audit: type=1400 audit(1794068612.948:560): avc: denied { node_bind } for pid=7242 comm="syz.3.331" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 254.758886][ T31] audit: type=1400 audit(1794068613.028:561): avc: denied { name_connect } for pid=7242 comm="syz.3.331" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 254.853797][ T7249] 0x0000000000ec-0x0000000000f2 : "" [ 255.944551][ T7249] ftl_cs: FTL header corrupt! [ 256.034561][ T989] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.000821][ T989] usb 5-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 257.015313][ T989] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 257.015332][ T989] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 257.032658][ T989] usb 5-1: string descriptor 0 read error: -22 [ 257.032753][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.047828][ T989] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 257.047986][ T989] etas_es58x 5-1:1.0: could not retrieve the product info string [ 257.438200][ T31] audit: type=1400 audit(1794068615.708:562): avc: denied { read } for pid=5281 comm="dhcpcd" name="n32" dev="tmpfs" ino=2285 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.438414][ T31] audit: type=1400 audit(1794068615.708:563): avc: denied { open } for pid=5281 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2285 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.438635][ T31] audit: type=1400 audit(1794068615.708:564): avc: denied { getattr } for pid=5281 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2285 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.536364][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.536713][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.574759][ T5757] usb 5-1: USB disconnect, device number 5 [ 257.584527][ T5757] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 258.155726][ T31] audit: type=1400 audit(1794068616.428:565): avc: denied { read } for pid=7266 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.155770][ T31] audit: type=1400 audit(1794068616.428:566): avc: denied { read open } for pid=7266 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.773665][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.694328][ T31] audit: type=1400 audit(1794068617.938:567): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.694467][ T31] audit: type=1400 audit(1794068617.948:568): avc: denied { create } for pid=7265 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.694545][ T31] audit: type=1400 audit(1794068617.948:569): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 259.694666][ T31] audit: type=1400 audit(1794068617.958:570): avc: denied { append } for pid=7265 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.361678][ T31] audit: type=1400 audit(1794068618.628:571): avc: denied { setattr } for pid=7292 comm="syz.2.341" name="[io_uring]" dev="anon_inodefs" ino=16530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 260.490344][ T31] audit: type=1400 audit(1794068618.758:572): avc: denied { write } for pid=7296 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.492626][ T31] audit: type=1400 audit(1794068618.758:573): avc: denied { unlink } for pid=7296 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 260.574058][ T5757] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 260.725385][ T5757] usb 5-1: Using ep0 maxpacket: 16 [ 260.725972][ T5757] usb 5-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 260.726994][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.727018][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 260.727036][ T5757] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 260.727066][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.742258][ T5757] usb 5-1: config 0 descriptor?? [ 261.320776][ T31] audit: type=1400 audit(1794068619.588:574): avc: denied { create } for pid=7307 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 261.547689][ T5757] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 263.115653][ T30] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 263.236214][ T31] audit: type=1400 audit(1794068621.508:575): avc: denied { write } for pid=7303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.284123][ T5725] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 263.285958][ T30] usb 4-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 263.288174][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 263.288205][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 263.288236][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.414034][ T5725] usb 2-1: device descriptor read/64, error -71 [ 263.615044][ T31] audit: type=1400 audit(1794068621.888:576): avc: denied { write } for pid=7334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.663632][ T5725] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 263.683658][ T6880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.793636][ T5725] usb 2-1: device descriptor read/64, error -71 [ 263.843615][ T6880] usb 1-1: Using ep0 maxpacket: 32 [ 263.844282][ T6880] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 263.845211][ T6880] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 263.845232][ T6880] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 263.845250][ T6880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 263.845269][ T6880] usb 1-1: config 1 has no interface number 0 [ 263.845291][ T6880] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.845304][ T6880] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 263.845338][ T6880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.935597][ T5725] usb usb2-port1: attempt power cycle [ 263.940284][ T6880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 263.955082][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.955558][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.014119][ T30] pegasus 4-1:1.0: probe with driver pegasus failed with error -110 [ 265.026739][ T6880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 265.033980][ T5725] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 265.059248][ T5725] usb 2-1: device descriptor read/8, error -71 [ 265.581928][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.582189][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.923183][ T5725] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 265.967468][ T7337] syz.3.345 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 265.967502][ T7337] CPU: 0 UID: 0 PID: 7337 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 265.967523][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 265.967533][ T7337] Call Trace: [ 265.967540][ T7337] [ 265.967547][ T7337] dump_stack_lvl+0x100/0x190 [ 265.967579][ T7337] dump_header+0xfb/0x606 [ 265.967607][ T7337] oom_kill_process.cold+0xd/0x380 [ 265.967631][ T7337] out_of_memory+0x343/0x14c0 [ 265.967661][ T7337] ? __pfx_out_of_memory+0x10/0x10 [ 265.967693][ T7337] mem_cgroup_out_of_memory+0xc6/0x130 [ 265.967712][ T7337] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 265.967729][ T7337] ? find_held_lock+0x2b/0x80 [ 265.967753][ T7337] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.967771][ T7337] ? _raw_spin_unlock+0x28/0x50 [ 265.967790][ T7337] try_charge_memcg+0x779/0xf30 [ 265.967819][ T7337] ? __pfx_try_charge_memcg+0x10/0x10 [ 265.967838][ T7337] ? find_held_lock+0x2b/0x80 [ 265.967852][ T7337] ? rcu_read_unlock+0x17/0x60 [ 265.967867][ T7337] ? rcu_read_unlock+0x17/0x60 [ 265.967882][ T7337] ? find_held_lock+0x2b/0x80 [ 265.967893][ T7337] ? rcu_read_unlock+0x17/0x60 [ 265.967914][ T7337] charge_memcg+0x1ae/0x210 [ 265.967937][ T7337] __mem_cgroup_charge+0x2b/0x1c0 [ 265.967963][ T7337] shmem_alloc_and_add_folio+0x451/0xd40 [ 265.967988][ T7337] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 265.968003][ T7337] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 265.968015][ T7337] ? vm_normal_page+0x1d1/0x380 [ 265.968034][ T7337] shmem_get_folio_gfp+0x758/0x1af0 [ 265.968049][ T7337] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 265.968065][ T7337] ? __pfx_follow_page_pte+0x10/0x10 [ 265.968094][ T7337] shmem_write_begin+0x1a4/0x420 [ 265.968114][ T7337] ? __pfx_shmem_write_begin+0x10/0x10 [ 265.968133][ T7337] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 265.968152][ T7337] generic_perform_write+0x292/0xa40 [ 265.968168][ T7337] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 265.968184][ T7337] ? __pfx_generic_perform_write+0x10/0x10 [ 265.968201][ T7337] ? file_update_time_flags+0x38c/0x520 [ 265.968228][ T7337] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 265.968247][ T7337] shmem_file_write_iter+0x10e/0x140 [ 265.968268][ T7337] __kernel_write_iter+0x2ac/0x930 [ 265.968288][ T7337] ? __pfx___kernel_write_iter+0x10/0x10 [ 265.968299][ T7337] ? __up_read+0x333/0x980 [ 265.968310][ T7337] ? dump_user_range+0x7e0/0xe90 [ 265.968322][ T7337] ? copy_mc_enhanced_fast_string+0x6/0xf [ 265.968341][ T7337] dump_user_range+0xa0d/0xe90 [ 265.968363][ T7337] ? __pfx_dump_user_range+0x10/0x10 [ 265.968389][ T7337] ? elf_coredump_extra_notes_write+0xbb/0x450 [ 265.968412][ T7337] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 265.968434][ T7337] ? __pfx_writenote+0x10/0x10 [ 265.968450][ T7337] elf_core_dump+0x2d97/0x3d60 [ 265.968472][ T7337] ? __pfx_elf_core_dump+0x10/0x10 [ 265.968485][ T7337] ? irqentry_exit+0x202/0xab0 [ 265.968500][ T7337] ? irqentry_exit+0x202/0xab0 [ 265.968524][ T7337] ? 0xffffffffff600000 [ 265.968570][ T7337] ? lock_acquire+0x1d1/0x380 [ 265.968591][ T7337] ? do_coredump.constprop.0+0x9bb/0x25e0 [ 265.968608][ T7337] ? coredump_write+0xd88/0x1c20 [ 265.968619][ T7337] coredump_write+0xd88/0x1c20 [ 265.968636][ T7337] ? __pfx_coredump_write+0x10/0x10 [ 265.968663][ T7337] ? __pfx_make_vfsuid+0x10/0x10 [ 265.968688][ T7337] do_coredump.constprop.0+0x9bb/0x25e0 [ 265.968712][ T7337] ? __pfx_do_coredump.constprop.0+0x10/0x10 [ 265.968741][ T7337] ? __lock_acquire+0x5c0/0x1f40 [ 265.968757][ T7337] ? trace_kmalloc+0xeb/0x110 [ 265.968768][ T7337] ? __kasan_kmalloc+0xaa/0xb0 [ 265.968779][ T7337] ? __kmalloc_noprof+0x350/0x840 [ 265.968804][ T7337] ? lock_acquire+0x1d1/0x380 [ 265.968826][ T7337] ? do_raw_spin_lock+0x128/0x260 [ 265.968841][ T7337] ? find_held_lock+0x2b/0x80 [ 265.968857][ T7337] ? vfs_coredump+0x6f8/0x1180 [ 265.968874][ T7337] ? rcu_is_watching+0x13/0xc0 [ 265.968888][ T7337] vfs_coredump+0x9b0/0x1180 [ 265.968902][ T7337] ? __pfx_vfs_coredump+0x10/0x10 [ 265.968932][ T7337] ? rcu_is_watching+0x13/0xc0 [ 265.968954][ T7337] get_signal+0x1fba/0x22e0 [ 265.968985][ T7337] ? __pfx_get_signal+0x10/0x10 [ 265.969012][ T7337] arch_do_signal_or_restart+0x91/0x7e0 [ 265.969026][ T7337] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 265.969045][ T7337] irqentry_exit+0x542/0xab0 [ 265.969059][ T7337] asm_exc_page_fault+0x26/0x30 [ 265.969069][ T7337] RIP: 0033:0x7f2b69d9fb21 [ 265.969081][ T7337] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 265.969096][ T7337] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 265.969111][ T7337] RAX: 0000000000000000 RBX: 00007f2b6a026090 RCX: 00007f2b69d9fb19 [ 265.969121][ T7337] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 265.969131][ T7337] RBP: 00007f2b69e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 265.969141][ T7337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.969150][ T7337] R13: 00007f2b6a026128 R14: 00007f2b6a026090 R15: 00007ffecfcdb978 [ 265.969170][ T7337] [ 265.969174][ T7337] memory: usage 307200kB, limit 307200kB, failcnt 127218 [ 265.969181][ T7337] memory+swap: usage 431260kB, limit 9007199254740988kB, failcnt 0 [ 265.969188][ T7337] kmem: usage 3876kB, limit 9007199254740988kB, failcnt 0 [ 265.969193][ T7337] Memory cgroup stats for /syz3: [ 265.969301][ T7337] cache 309862400 [ 265.969308][ T7337] rss 540672 [ 265.969312][ T7337] rss_huge 0 [ 265.969315][ T7337] shmem 309817344 [ 265.969319][ T7337] mapped_file 94871552 [ 265.969322][ T7337] dirty 0 [ 265.969326][ T7337] writeback 0 [ 265.969329][ T7337] workingset_refault_anon 118 [ 265.969333][ T7337] workingset_refault_file 8027 [ 265.969337][ T7337] swap 127037440 [ 265.969340][ T7337] swapcached 0 [ 265.969343][ T7337] pgpgin 701936 [ 265.969347][ T7337] pgpgout 626665 [ 265.969350][ T7337] pgfault 297647 [ 265.969366][ T7337] pgmajfault 69 [ 265.969369][ T7337] inactive_anon 192630784 [ 265.969375][ T7337] active_anon 117727232 [ 265.969381][ T7337] inactive_file 12288 [ 265.969387][ T7337] active_file 20480 [ 265.969393][ T7337] unevictable 0 [ 265.969398][ T7337] hierarchical_memory_limit 314572800 [ 265.969405][ T7337] hierarchical_memsw_limit 9223372036854771712 [ 265.969412][ T7337] total_cache 309862400 [ 265.969417][ T7337] total_rss 540672 [ 265.969423][ T7337] total_rss_huge 0 [ 265.969429][ T7337] total_shmem 309817344 [ 265.969435][ T7337] total_mapped_file 94871552 [ 265.969441][ T7337] total_dirty 0 [ 265.969446][ T7337] total_writeback 0 [ 265.969452][ T7337] total_workingset_refault_anon 118 [ 265.969457][ T7337] total_workingset_refault_file 8027 [ 265.969461][ T7337] total_swap 127037440 [ 265.969465][ T7337] total_swapcached 0 [ 265.969468][ T7337] total_pgpgin 701936 [ 265.969472][ T7337] total_pgpgout 626665 [ 265.969475][ T7337] total_pgfault 297647 [ 265.969479][ T7337] total_pgmajfault 69 [ 265.969483][ T7337] total_inactive_anon 192630784 [ 265.969486][ T7337] total_active_anon 117727232 [ 265.969490][ T7337] total_inactive_file 12288 [ 265.969494][ T7337] total_active_file 20480 [ 265.969498][ T7337] total_unevictable 0 [ 265.969501][ T7337] anon_cost 0 [ 265.969505][ T7337] file_cost 0 [ 265.969508][ T7337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.286,pid=7064,uid=0 [ 265.969657][ T7337] Memory cgroup out of memory: Killed process 7064 (syz.3.286) total-vm:333848kB, anon-rss:1272kB, file-rss:20548kB, shmem-rss:81164kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 268.054014][ T30] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 268.055501][ T5757] nintendo 0003:057E:2019.0003: Failed to set baudrate (ret=-110), continuing anyway [ 287.573701][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.733901][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.083482][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 374.709184][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5614/2:b..l.. P5757/1:b..l.. [ 374.719427][ C1] rcu: (detected by 1, t=10565 jiffies, g=25773, q=665 ncpus=2) [ 374.727139][ C1] task:kworker/0:8 state:R running task stack:21016 pid:5757 tgid:5757 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 374.740714][ C1] Workqueue: usb_hub_wq hub_event [ 374.745742][ C1] Call Trace: [ 374.749010][ C1] [ 374.751938][ C1] __schedule+0x125e/0x6990 [ 374.756460][ C1] ? __pfx___schedule+0x10/0x10 [ 374.761306][ C1] ? mark_held_locks+0x40/0x70 [ 374.766072][ C1] preempt_schedule_irq+0x4e/0x90 [ 374.771117][ C1] irqentry_exit+0x33f/0xab0 [ 374.775710][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.781682][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 374.786876][ C1] Code: 05 4f 5e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 58 81 10 0f 82 c9 02 00 00 8b 35 3e 88 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 5d d1 13 0f 85 09 03 00 00 48 83 c4 [ 374.806497][ C1] RSP: 0018:ffffc90004076110 EFLAGS: 00000206 [ 374.812555][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 374.820517][ C1] RDX: 0000000000000000 RSI: ffffffff8e601eda RDI: ffffffff8c835980 [ 374.828492][ C1] RBP: ffffffff8ffeafe0 R08: 000000007d166366 R09: 0000000000000007 [ 374.836468][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 374.844431][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.852408][ C1] ? unwind_next_frame+0x3be/0x2090 [ 374.857604][ C1] ? unwind_next_frame+0x3be/0x2090 [ 374.862806][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.868959][ C1] unwind_next_frame+0xd1/0x2090 [ 374.873887][ C1] ? unwind_next_frame+0xbd/0x2090 [ 374.878989][ C1] ? ret_from_fork+0x730/0xd60 [ 374.883753][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.889904][ C1] arch_stack_walk+0x94/0xf0 [ 374.894498][ C1] ? ret_from_fork+0x730/0xd60 [ 374.899264][ C1] stack_trace_save+0x8e/0xc0 [ 374.903937][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 374.909308][ C1] ? __pfx_vprintk_store+0x10/0x10 [ 374.914414][ C1] ? vsnprintf+0x4c5/0x1300 [ 374.918914][ C1] kasan_save_stack+0x30/0x50 [ 374.923671][ C1] ? kasan_save_stack+0x30/0x50 [ 374.928518][ C1] ? kasan_save_track+0x14/0x30 [ 374.933361][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 374.938124][ C1] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 374.944740][ C1] ? kmemdup_noprof+0x29/0x60 [ 374.949424][ C1] ? __joycon_hid_send+0x22/0xe0 [ 374.954364][ C1] ? joycon_hid_send_sync+0xdd/0x510 [ 374.959644][ C1] ? joycon_send_usb+0xef/0x1c0 [ 374.964492][ C1] ? joycon_init+0x366/0x490 [ 374.969091][ C1] ? nintendo_hid_probe+0x48b/0xe60 [ 374.974317][ C1] ? hid_device_probe+0x4fe/0x850 [ 374.979344][ C1] ? really_probe+0x241/0xa60 [ 374.984018][ C1] ? __driver_probe_device+0x210/0x460 [ 374.989477][ C1] ? driver_probe_device+0x4a/0x140 [ 374.994668][ C1] ? __device_attach_driver+0x1df/0x320 [ 375.000209][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 375.005222][ C1] ? __device_attach+0x1e4/0x4c0 [ 375.010144][ C1] ? device_initial_probe+0xaf/0xf0 [ 375.015319][ C1] ? __bus_probe_device+0x60/0x160 [ 375.020398][ C1] ? device_add+0x121d/0x1970 [ 375.025049][ C1] ? hid_add_device+0x2bf/0x440 [ 375.029889][ C1] ? usbhid_probe+0xa64/0x10b0 [ 375.034622][ C1] ? usb_probe_interface+0x386/0x980 [ 375.039893][ C1] ? really_probe+0x241/0xa60 [ 375.044555][ C1] ? __driver_probe_device+0x210/0x460 [ 375.049988][ C1] ? driver_probe_device+0x4a/0x140 [ 375.055170][ C1] ? __device_attach_driver+0x1df/0x320 [ 375.060686][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 375.065695][ C1] ? __device_attach+0x1e4/0x4c0 [ 375.070603][ C1] ? device_initial_probe+0xaf/0xf0 [ 375.075771][ C1] ? __bus_probe_device+0x60/0x160 [ 375.080851][ C1] ? device_add+0x121d/0x1970 [ 375.085516][ C1] ? usb_set_configuration+0xd97/0x1dc0 [ 375.091031][ C1] ? usb_generic_driver_probe+0xa1/0xe0 [ 375.096544][ C1] ? usb_probe_device+0xef/0x400 [ 375.101457][ C1] ? really_probe+0x241/0xa60 [ 375.106113][ C1] ? __driver_probe_device+0x210/0x460 [ 375.111553][ C1] ? driver_probe_device+0x4a/0x140 [ 375.116727][ C1] ? __device_attach_driver+0x1df/0x320 [ 375.122248][ C1] ? bus_for_each_drv+0x159/0x1e0 [ 375.127248][ C1] ? __device_attach+0x1e4/0x4c0 [ 375.132161][ C1] ? device_initial_probe+0xaf/0xf0 [ 375.137332][ C1] ? __bus_probe_device+0x60/0x160 [ 375.142423][ C1] ? device_add+0x121d/0x1970 [ 375.147075][ C1] ? usb_new_device.part.0+0xcc2/0x1686 [ 375.152675][ C1] ? hub_event.cold+0x1e3/0xe90 [ 375.157506][ C1] ? process_one_work+0xac7/0x1b10 [ 375.162598][ C1] ? worker_thread+0x5ef/0xe50 [ 375.167341][ C1] ? kthread+0x373/0x450 [ 375.171562][ C1] ? ret_from_fork+0x730/0xd60 [ 375.176400][ C1] kasan_save_track+0x14/0x30 [ 375.181066][ C1] __kasan_kmalloc+0xaa/0xb0 [ 375.185625][ C1] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 375.192019][ C1] ? __joycon_hid_send+0x22/0xe0 [ 375.196937][ C1] kmemdup_noprof+0x29/0x60 [ 375.201425][ C1] __joycon_hid_send+0x22/0xe0 [ 375.206162][ C1] joycon_hid_send_sync+0xdd/0x510 [ 375.211268][ C1] ? __pfx_joycon_hid_send_sync+0x10/0x10 [ 375.216972][ C1] ? __dev_printk+0xe9/0x100 [ 375.221532][ C1] ? _dev_warn+0xef/0x127 [ 375.225840][ C1] ? __pfx__dev_warn+0x10/0x10 [ 375.230606][ C1] joycon_send_usb+0xef/0x1c0 [ 375.235288][ C1] ? __pfx_joycon_send_usb+0x10/0x10 [ 375.240569][ C1] ? hid_sensor_capture_sample+0x580/0x780 [ 375.246378][ C1] joycon_init+0x366/0x490 [ 375.250800][ C1] ? __pfx_joycon_init+0x10/0x10 [ 375.255721][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.261511][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.266682][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 375.272460][ C1] ? up+0xe0/0x280 [ 375.276184][ C1] ? __pfx_up+0x10/0x10 [ 375.280335][ C1] nintendo_hid_probe+0x48b/0xe60 [ 375.285379][ C1] ? find_held_lock+0x2b/0x80 [ 375.290048][ C1] ? __pfx_nintendo_hid_probe+0x10/0x10 [ 375.295570][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 375.301208][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 375.307195][ C1] ? mark_held_locks+0x40/0x70 [ 375.311956][ C1] ? hid_match_id+0x258/0x2e0 [ 375.316605][ C1] ? __pfx_nintendo_hid_probe+0x10/0x10 [ 375.322126][ C1] hid_device_probe+0x4fe/0x850 [ 375.326963][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 375.332328][ C1] really_probe+0x241/0xa60 [ 375.336811][ C1] __driver_probe_device+0x210/0x460 [ 375.342158][ C1] driver_probe_device+0x4a/0x140 [ 375.347168][ C1] __device_attach_driver+0x1df/0x320 [ 375.352511][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 375.358384][ C1] bus_for_each_drv+0x159/0x1e0 [ 375.363206][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 375.368547][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.373731][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 375.379534][ C1] __device_attach+0x1e4/0x4c0 [ 375.384285][ C1] ? __pfx___device_attach+0x10/0x10 [ 375.389541][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 375.394711][ C1] device_initial_probe+0xaf/0xf0 [ 375.399709][ C1] __bus_probe_device+0x60/0x160 [ 375.404627][ C1] device_add+0x121d/0x1970 [ 375.409109][ C1] ? __pfx_device_add+0x10/0x10 [ 375.413935][ C1] ? debugfs_create_file_full+0x41/0x60 [ 375.419454][ C1] hid_add_device+0x2bf/0x440 [ 375.424111][ C1] ? mutex_init_lockdep+0xf1/0x120 [ 375.429196][ C1] usbhid_probe+0xa64/0x10b0 [ 375.433761][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.439113][ C1] ? __pfx_usbhid_probe+0x10/0x10 [ 375.444208][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 375.449550][ C1] ? mark_held_locks+0x40/0x70 [ 375.454287][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.460064][ C1] usb_probe_interface+0x386/0x980 [ 375.465162][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 375.470777][ C1] ? kernfs_put+0x3f/0x60 [ 375.475087][ C1] ? sysfs_create_link+0x68/0xc0 [ 375.480004][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 375.485619][ C1] really_probe+0x241/0xa60 [ 375.490095][ C1] __driver_probe_device+0x210/0x460 [ 375.495349][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.501129][ C1] driver_probe_device+0x4a/0x140 [ 375.506136][ C1] __device_attach_driver+0x1df/0x320 [ 375.511496][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 375.517360][ C1] bus_for_each_drv+0x159/0x1e0 [ 375.522191][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 375.527533][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.532703][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 375.538480][ C1] __device_attach+0x1e4/0x4c0 [ 375.543226][ C1] ? __pfx___device_attach+0x10/0x10 [ 375.548484][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 375.553660][ C1] device_initial_probe+0xaf/0xf0 [ 375.558660][ C1] __bus_probe_device+0x60/0x160 [ 375.563567][ C1] device_add+0x121d/0x1970 [ 375.568052][ C1] ? __pfx_device_add+0x10/0x10 [ 375.572885][ C1] ? mark_held_locks+0x40/0x70 [ 375.577622][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.583400][ C1] usb_set_configuration+0xd97/0x1dc0 [ 375.588774][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 375.594831][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 375.600184][ C1] usb_probe_device+0xef/0x400 [ 375.604943][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 375.610302][ C1] really_probe+0x241/0xa60 [ 375.614781][ C1] __driver_probe_device+0x210/0x460 [ 375.620036][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 375.625813][ C1] driver_probe_device+0x4a/0x140 [ 375.630821][ C1] __device_attach_driver+0x1df/0x320 [ 375.636177][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 375.642038][ C1] bus_for_each_drv+0x159/0x1e0 [ 375.646859][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 375.652208][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 375.657377][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 375.663154][ C1] __device_attach+0x1e4/0x4c0 [ 375.667897][ C1] ? __pfx___device_attach+0x10/0x10 [ 375.673169][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 375.678358][ C1] device_initial_probe+0xaf/0xf0 [ 375.683365][ C1] __bus_probe_device+0x60/0x160 [ 375.688272][ C1] device_add+0x121d/0x1970 [ 375.692748][ C1] ? __pfx_device_add+0x10/0x10 [ 375.697568][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 375.703261][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 375.708606][ C1] ? do_raw_spin_lock+0x128/0x260 [ 375.713599][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 375.719388][ C1] ? mark_held_locks+0x40/0x70 [ 375.724136][ C1] hub_event.cold+0x1e3/0xe90 [ 375.728806][ C1] ? __pfx_hub_event+0x10/0x10 [ 375.733571][ C1] ? lockdep_count_forward_deps+0x1c0/0x200 [ 375.739454][ C1] ? lock_acquire+0x1d1/0x380 [ 375.744123][ C1] ? process_one_work+0xa2c/0x1b10 [ 375.749241][ C1] ? process_one_work+0x906/0x1b10 [ 375.754345][ C1] ? process_one_work+0x906/0x1b10 [ 375.759433][ C1] process_one_work+0xac7/0x1b10 [ 375.764348][ C1] ? __pfx_process_one_work+0x10/0x10 [ 375.769690][ C1] ? lock_acquire+0x1d1/0x380 [ 375.774345][ C1] ? __pfx_hub_event+0x10/0x10 [ 375.779121][ C1] worker_thread+0x5ef/0xe50 [ 375.783725][ C1] ? __pfx_worker_thread+0x10/0x10 [ 375.788813][ C1] ? kthread+0x13a/0x450 [ 375.793035][ C1] ? __pfx_worker_thread+0x10/0x10 [ 375.798115][ C1] kthread+0x373/0x450 [ 375.802158][ C1] ? __pfx_kthread+0x10/0x10 [ 375.806730][ C1] ret_from_fork+0x730/0xd60 [ 375.811325][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 375.816426][ C1] ? __switch_to+0x800/0x10e0 [ 375.821083][ C1] ? __pfx_kthread+0x10/0x10 [ 375.825646][ C1] ret_from_fork_asm+0x1a/0x30 [ 375.830395][ C1] [ 375.833387][ C1] task:syz-executor state:R running task stack:21672 pid:5614 tgid:5614 ppid:5611 task_flags:0x440940 flags:0x00080000 [ 375.846822][ C1] Call Trace: [ 375.850073][ C1] [ 375.852976][ C1] __schedule+0x125e/0x6990 [ 375.857466][ C1] ? blk_mq_flush_plug_list+0x145/0x600 [ 375.862993][ C1] ? lruvec_evictable_size+0x2be/0x390 [ 375.868450][ C1] ? __pfx___schedule+0x10/0x10 [ 375.873371][ C1] ? mark_held_locks+0x40/0x70 [ 375.878154][ C1] preempt_schedule_irq+0x4e/0x90 [ 375.883176][ C1] irqentry_exit+0x33f/0xab0 [ 375.887741][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.893692][ C1] RIP: 0010:lock_acquire+0x5e/0x380 [ 375.898865][ C1] Code: 05 4f 5e d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e 58 81 10 0f 82 c9 02 00 00 8b 35 3e 88 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed 5d d1 13 0f 85 09 03 00 00 48 83 c4 [ 375.918441][ C1] RSP: 0018:ffffc90003416f48 EFLAGS: 00000206 [ 375.924486][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000200 [ 375.932512][ C1] RDX: 0000000000000000 RSI: ffffffff8e601eda RDI: ffffffff8c835980 [ 375.940477][ C1] RBP: ffffffff8ffeafe0 R08: 0000000021258080 R09: 0000000000000007 [ 375.948439][ C1] R10: 0000000000000200 R11: 0000000000000001 R12: 0000000000000002 [ 375.956395][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.964359][ C1] ? xa_load+0x149/0x2c0 [ 375.968582][ C1] xa_load+0xcd/0x2c0 [ 375.972535][ C1] ? xa_load+0xbc/0x2c0 [ 375.976664][ C1] ? __pfx_xa_load+0x10/0x10 [ 375.981241][ C1] list_lru_count_one+0x1c0/0x320 [ 375.986275][ C1] count_shadow_nodes+0x7e/0x410 [ 375.991185][ C1] do_shrink_slab+0x83/0x1200 [ 375.995843][ C1] ? find_held_lock+0x2b/0x80 [ 376.000500][ C1] ? shrink_slab+0xa4d/0x12d0 [ 376.005157][ C1] ? shrink_slab+0xa4d/0x12d0 [ 376.009815][ C1] shrink_slab+0xa78/0x12d0 [ 376.014317][ C1] ? shrink_slab+0x68b/0x12d0 [ 376.019048][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 376.024005][ C1] ? __pfx___might_resched+0x10/0x10 [ 376.029283][ C1] ? page_counter_calculate_protection+0x348/0x730 [ 376.035765][ C1] shrink_node+0x7c1/0x4410 [ 376.040244][ C1] ? __pfx_shrink_node+0x10/0x10 [ 376.045159][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 376.051031][ C1] ? rcu_is_watching+0x13/0xc0 [ 376.055776][ C1] ? trace_mm_page_alloc+0x164/0x1c0 [ 376.061045][ C1] ? __alloc_frozen_pages_noprof+0x2f1/0x31e0 [ 376.067113][ C1] ? do_try_to_free_pages+0x2da/0x1500 [ 376.072557][ C1] do_try_to_free_pages+0x2da/0x1500 [ 376.077844][ C1] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 376.083726][ C1] ? psi_group_change+0x457/0xb10 [ 376.088751][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 376.095169][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 376.100358][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.105549][ C1] ? psi_memstall_enter+0x226/0x3b0 [ 376.110725][ C1] try_charge_memcg+0x505/0xf30 [ 376.115566][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 376.120948][ C1] ? find_held_lock+0x2b/0x80 [ 376.125619][ C1] ? rcu_read_unlock+0x17/0x60 [ 376.130363][ C1] ? rcu_read_unlock+0x17/0x60 [ 376.135101][ C1] ? find_held_lock+0x2b/0x80 [ 376.139759][ C1] ? rcu_read_unlock+0x17/0x60 [ 376.144509][ C1] charge_memcg+0x1ae/0x210 [ 376.149011][ C1] __mem_cgroup_charge+0x2b/0x1c0 [ 376.154035][ C1] filemap_add_folio+0xe7/0x640 [ 376.158898][ C1] ? __pfx_filemap_add_folio+0x10/0x10 [ 376.164358][ C1] ? filemap_alloc_folio_noprof+0x66/0x80 [ 376.170066][ C1] page_cache_ra_unbounded+0x37a/0x990 [ 376.175523][ C1] do_page_cache_ra+0x10f/0x160 [ 376.180349][ C1] page_cache_ra_order+0xc05/0xed0 [ 376.185440][ C1] page_cache_async_ra+0x7fc/0xdc0 [ 376.190537][ C1] filemap_fault+0xf77/0x3150 [ 376.195205][ C1] ? __pfx_filemap_fault+0x10/0x10 [ 376.200306][ C1] ? __pte_offset_map+0x9a/0x470 [ 376.205234][ C1] ? find_held_lock+0x2b/0x80 [ 376.209883][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 376.215312][ C1] __do_fault+0x10b/0x440 [ 376.219625][ C1] do_fault+0xb3f/0x1890 [ 376.223837][ C1] ? __pfx_do_fault+0x10/0x10 [ 376.228480][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 376.233230][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 376.237985][ C1] __handle_mm_fault+0x1858/0x2f40 [ 376.243084][ C1] ? lock_vma_under_rcu+0x11d/0x590 [ 376.248252][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.253772][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 376.258999][ C1] handle_mm_fault+0x363/0xa30 [ 376.263774][ C1] do_user_addr_fault+0x59c/0x12f0 [ 376.268899][ C1] exc_page_fault+0x6f/0xd0 [ 376.273418][ C1] asm_exc_page_fault+0x26/0x30 [ 376.278259][ C1] RIP: 0033:0x7f2b69c6cd31 [ 376.282653][ C1] RSP: 002b:00007ffecfcdbce0 EFLAGS: 00010206 [ 376.288688][ C1] RAX: 0000001b33724000 RBX: 0000000000000106 RCX: 0000000000040b28 [ 376.296642][ C1] RDX: 000000000e26a900 RSI: 00007ffecfcdbd70 RDI: 00007f2b6abb4010 [ 376.304587][ C1] RBP: 00007ffecfcdbd1c R08: 0035930d73eb4b8f R09: 0000000000000001 [ 376.312532][ C1] R10: 000000000000c760 R11: 0000000000000246 R12: 0000000000001388 [ 376.320484][ C1] R13: 00000000000927c0 R14: 0000000000040e3f R15: 00007ffecfcdbd70 [ 376.328433][ C1] [ 376.331435][ C1] rcu: rcu_preempt kthread starved for 10590 jiffies! g25773 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 376.342443][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 376.352389][ C1] rcu: RCU grace-period kthread stack dump: [ 376.358258][ C1] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 376.371700][ C1] Call Trace: [ 376.374955][ C1] [ 376.377873][ C1] __schedule+0x125e/0x6990 [ 376.382350][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 376.387289][ C1] ? __pfx___schedule+0x10/0x10 [ 376.392161][ C1] ? find_held_lock+0x2b/0x80 [ 376.396842][ C1] ? schedule+0x225/0x2c0 [ 376.401170][ C1] schedule+0xdd/0x2c0 [ 376.405232][ C1] schedule_timeout+0x127/0x280 [ 376.410080][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 376.415450][ C1] ? __pfx_process_timeout+0x10/0x10 [ 376.420736][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 376.426533][ C1] ? prepare_to_swait_event+0xdf/0x4f0 [ 376.431995][ C1] rcu_gp_fqs_loop+0x1a9/0x930 [ 376.436757][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 376.442063][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 376.447019][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 376.452213][ C1] ? rcu_is_watching+0x13/0xc0 [ 376.456968][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 376.462781][ C1] rcu_gp_kthread+0x179/0x260 [ 376.467479][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.472691][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 376.478497][ C1] ? __kthread_parkme+0x18f/0x230 [ 376.483533][ C1] ? kthread+0x13a/0x450 [ 376.487793][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 376.493008][ C1] kthread+0x373/0x450 [ 376.497074][ C1] ? __pfx_kthread+0x10/0x10 [ 376.501667][ C1] ret_from_fork+0x730/0xd60 [ 376.506268][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 376.511412][ C1] ? __switch_to+0x800/0x10e0 [ 376.516106][ C1] ? __pfx_kthread+0x10/0x10 [ 376.520698][ C1] ret_from_fork_asm+0x1a/0x30 [ 376.525472][ C1] [ 376.528485][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 376.534793][ C1] Sending NMI from CPU 1 to CPUs 0: [ 376.539991][ C0] NMI backtrace for cpu 0 [ 376.540002][ C0] CPU: 0 UID: 0 PID: 7323 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 376.540017][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 376.540025][ C0] RIP: 0010:write_comp_data+0x11/0xb0 [ 376.540046][ C0] Code: fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 50 4b ac 13 49 89 f0 49 89 d1 48 89 ce <65> 48 8b 0d 2f 4b ac 13 48 63 d0 a9 00 01 00 ff 74 1e f6 c4 01 74 [ 376.540058][ C0] RSP: 0000:ffffc90004946fc8 EFLAGS: 00000246 [ 376.540070][ C0] RAX: 8000000000000000 RBX: 00000000000ebaeb RCX: ffffffff825e6088 [ 376.540080][ C0] RDX: 0000000000000000 RSI: ffffffff825e6088 RDI: 0000000000000001 [ 376.540088][ C0] RBP: ffff888020b6bf40 R08: 000000000000000c R09: 0000000000000000 [ 376.540096][ C0] R10: ffffffff926aaa5f R11: 0000000000000001 R12: dffffc0000000000 [ 376.540105][ C0] R13: 0000000000000009 R14: ffffc900049476d0 R15: 00000000000ebaeb [ 376.540114][ C0] FS: 000055558d8eb500(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 [ 376.540128][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.540137][ C0] CR2: 0000001b33cd6428 CR3: 00000000242fc000 CR4: 00000000003526f0 [ 376.540146][ C0] Call Trace: [ 376.540151][ C0] [ 376.540156][ C0] try_to_shrink_lruvec+0x2e8/0x7b0 [ 376.540177][ C0] ? mlock_folio_batch+0x3790/0x3790 [ 376.540194][ C0] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 376.540215][ C0] shrink_lruvec+0x313/0x22e0 [ 376.540235][ C0] ? __pfx___might_resched+0x10/0x10 [ 376.540251][ C0] ? mark_held_locks+0x40/0x70 [ 376.540268][ C0] ? rcu_is_watching+0x13/0xc0 [ 376.540284][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 376.540303][ C0] ? __pfx_zswap_shrinker_count+0x10/0x10 [ 376.540321][ C0] ? __mem_cgroup_flush_stats+0x262/0x320 [ 376.540342][ C0] ? lock_acquire+0x1d1/0x380 [ 376.540361][ C0] ? shrink_slab+0x68b/0x12d0 [ 376.540382][ C0] ? __pfx___might_resched+0x10/0x10 [ 376.540396][ C0] ? page_counter_calculate_protection+0x348/0x730 [ 376.540418][ C0] ? shrink_node+0x74f/0x4410 [ 376.540429][ C0] shrink_node+0x74f/0x4410 [ 376.540446][ C0] ? __pfx_shrink_node+0x10/0x10 [ 376.540460][ C0] ? queue_work_on+0x11b/0x1e0 [ 376.540475][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.540490][ C0] ? queue_work_on+0x141/0x1e0 [ 376.540506][ C0] ? do_try_to_free_pages+0x2da/0x1500 [ 376.540519][ C0] do_try_to_free_pages+0x2da/0x1500 [ 376.540537][ C0] try_to_free_mem_cgroup_pages+0x2bf/0x840 [ 376.540550][ C0] ? psi_group_change+0x457/0xb10 [ 376.540566][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 376.540584][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 376.540598][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 376.540612][ C0] ? psi_memstall_enter+0x226/0x3b0 [ 376.540627][ C0] try_charge_memcg+0x505/0xf30 [ 376.540652][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 376.540667][ C0] ? find_held_lock+0x2b/0x80 [ 376.540680][ C0] ? rcu_read_unlock+0x17/0x60 [ 376.540696][ C0] ? rcu_read_unlock+0x17/0x60 [ 376.540713][ C0] ? find_held_lock+0x2b/0x80 [ 376.540726][ C0] ? rcu_read_unlock+0x17/0x60 [ 376.540744][ C0] charge_memcg+0x1ae/0x210 [ 376.540760][ C0] __mem_cgroup_charge+0x2b/0x1c0 [ 376.540779][ C0] filemap_add_folio+0xe7/0x640 [ 376.540798][ C0] ? __pfx_filemap_add_folio+0x10/0x10 [ 376.540819][ C0] __filemap_get_folio_mpol+0x57f/0x11d0 [ 376.540840][ C0] filemap_fault+0x6cf/0x3150 [ 376.540854][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 376.540865][ C0] ? __pte_offset_map+0x9a/0x470 [ 376.540888][ C0] __do_fault+0x10b/0x440 [ 376.540905][ C0] do_fault+0x585/0x1890 [ 376.540917][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 376.540935][ C0] ? __pfx_do_fault+0x10/0x10 [ 376.540946][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 376.540960][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 376.540976][ C0] __handle_mm_fault+0x1858/0x2f40 [ 376.540992][ C0] ? lock_vma_under_rcu+0x11d/0x590 [ 376.541006][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.541022][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 376.541040][ C0] handle_mm_fault+0x363/0xa30 [ 376.541056][ C0] do_user_addr_fault+0x59c/0x12f0 [ 376.541078][ C0] exc_page_fault+0x6f/0xd0 [ 376.541091][ C0] asm_exc_page_fault+0x26/0x30 [ 376.541104][ C0] RIP: 0033:0x7f2b69c740b1 [ 376.541116][ C0] Code: 83 e6 07 0f 85 c0 00 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 a0 8b fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 6c fe ff ff 41 80 7f [ 376.541128][ C0] RSP: 002b:00007ffecfcdba10 EFLAGS: 00010206 [ 376.541138][ C0] RAX: 0000001b33cd6430 RBX: ffffffff81bc538c RCX: 0000001b33cd6428 [ 376.541146][ C0] RDX: 0000001b33724224 RSI: 0000000000000008 RDI: 00007f2b6ab55720 [ 376.541155][ C0] RBP: 0000000000000001 R08: 00007f2b6a010000 R09: 00007f2b6a012000 [ 376.541163][ C0] R10: 0000000081bc5390 R11: 0000000000000000 R12: 00007f2b6a026038 [ 376.541171][ C0] R13: 0000000000000000 R14: ffffffff81bc5ae6 R15: 00007f2b6ab55720 [ 376.541180][ C0] ? trace_page_fault_user+0x16/0x1f0 [ 376.541198][ C0] ? perf_trace_exceptions+0x30c/0x520 [ 376.541220][ C0] [ 378.803515][ T31] audit: type=1400 audit(1794068717.028:577): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=34302 daddr=10.128.0.168 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.804021][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.804078][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804866][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.804898][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.836887][ T5725] usb 2-1: device descriptor read/8, error -110 [ 379.858273][ T34] oom_reaper: reaped process 7064 (syz.3.286), now anon-rss:0kB, file-rss:20480kB, shmem-rss:81164kB [ 379.910365][ T7323] syz.3.345 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 379.910397][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 379.910416][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 379.910424][ T7323] Call Trace: [ 379.910428][ T7323] [ 379.910432][ T7323] dump_stack_lvl+0x100/0x190 [ 379.910458][ T7323] dump_header+0xfb/0x606 [ 379.910471][ T7323] oom_kill_process.cold+0xd/0x380 [ 379.910488][ T7323] out_of_memory+0x343/0x14c0 [ 379.910517][ T7323] ? __pfx_out_of_memory+0x10/0x10 [ 379.910548][ T7323] mem_cgroup_out_of_memory+0xc6/0x130 [ 379.910566][ T7323] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 379.910576][ T7323] ? find_held_lock+0x2b/0x80 [ 379.910590][ T7323] ? do_raw_spin_unlock+0x145/0x1e0 [ 379.910601][ T7323] ? _raw_spin_unlock+0x28/0x50 [ 379.910613][ T7323] try_charge_memcg+0x779/0xf30 [ 379.910633][ T7323] ? __pfx_try_charge_memcg+0x10/0x10 [ 379.910653][ T7323] ? find_held_lock+0x2b/0x80 [ 379.910669][ T7323] ? rcu_read_unlock+0x17/0x60 [ 379.910690][ T7323] ? rcu_read_unlock+0x17/0x60 [ 379.910711][ T7323] ? find_held_lock+0x2b/0x80 [ 379.910723][ T7323] ? rcu_read_unlock+0x17/0x60 [ 379.910740][ T7323] charge_memcg+0x1ae/0x210 [ 379.910755][ T7323] __mem_cgroup_charge+0x2b/0x1c0 [ 379.910771][ T7323] filemap_add_folio+0xe7/0x640 [ 379.910797][ T7323] ? __pfx_filemap_add_folio+0x10/0x10 [ 379.910829][ T7323] __filemap_get_folio_mpol+0x57f/0x11d0 [ 379.910858][ T7323] filemap_fault+0x6cf/0x3150 [ 379.910872][ T7323] ? __pfx_filemap_fault+0x10/0x10 [ 379.910880][ T7323] ? __pte_offset_map+0x9a/0x470 [ 379.910903][ T7323] __do_fault+0x10b/0x440 [ 379.910920][ T7323] do_fault+0x585/0x1890 [ 379.910934][ T7323] ? __pfx_filemap_map_pages+0x10/0x10 [ 379.910960][ T7323] ? __pfx_do_fault+0x10/0x10 [ 379.910973][ T7323] ? rcu_read_unlock+0x2d/0xb0 [ 379.910991][ T7323] ? rcu_read_unlock+0x2d/0xb0 [ 379.911010][ T7323] __handle_mm_fault+0x1858/0x2f40 [ 379.911025][ T7323] ? lock_vma_under_rcu+0x11d/0x590 [ 379.911035][ T7323] ? __pfx___handle_mm_fault+0x10/0x10 [ 379.911050][ T7323] ? lock_vma_under_rcu+0x17c/0x590 [ 379.911074][ T7323] handle_mm_fault+0x363/0xa30 [ 379.911100][ T7323] do_user_addr_fault+0x59c/0x12f0 [ 379.911132][ T7323] exc_page_fault+0x6f/0xd0 [ 379.911148][ T7323] asm_exc_page_fault+0x26/0x30 [ 379.911158][ T7323] RIP: 0033:0x7f2b69c740b1 [ 379.911168][ T7323] Code: 83 e6 07 0f 85 c0 00 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 a0 8b fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 6c fe ff ff 41 80 7f [ 379.911178][ T7323] RSP: 002b:00007ffecfcdba10 EFLAGS: 00010206 [ 379.911188][ T7323] RAX: 0000001b33cd6430 RBX: ffffffff81bc538c RCX: 0000001b33cd6428 [ 379.911194][ T7323] RDX: 0000001b33724224 RSI: 0000000000000008 RDI: 00007f2b6ab55720 [ 379.911200][ T7323] RBP: 0000000000000001 R08: 00007f2b6a010000 R09: 00007f2b6a012000 [ 379.911206][ T7323] R10: 0000000081bc5390 R11: 0000000000000000 R12: 00007f2b6a026038 [ 379.911216][ T7323] R13: 0000000000000000 R14: ffffffff81bc5ae6 R15: 00007f2b6ab55720 [ 379.911227][ T7323] ? trace_page_fault_user+0x16/0x1f0 [ 379.911251][ T7323] ? perf_trace_exceptions+0x30c/0x520 [ 379.911283][ T7323] [ 379.911289][ T7323] memory: usage 307200kB, limit 307200kB, failcnt 262431 [ 379.911296][ T7323] memory+swap: usage 431200kB, limit 9007199254740988kB, failcnt 0 [ 379.911302][ T7323] kmem: usage 3872kB, limit 9007199254740988kB, failcnt 0 [ 379.911308][ T7323] Memory cgroup stats for /syz3: [ 379.911430][ T7323] cache 309960704 [ 379.911436][ T7323] rss 540672 [ 379.911440][ T7323] rss_huge 0 [ 379.911447][ T7323] shmem 309809152 [ 379.911451][ T7323] mapped_file 94871552 [ 379.911454][ T7323] dirty 0 [ 379.911457][ T7323] writeback 0 [ 379.911461][ T7323] workingset_refault_anon 118 [ 379.911464][ T7323] workingset_refault_file 8063 [ 379.911468][ T7323] swap 126976000 [ 379.911472][ T7323] swapcached 4096 [ 379.911475][ T7323] pgpgin 702221 [ 379.911478][ T7323] pgpgout 626900 [ 379.911481][ T7323] pgfault 297663 [ 379.911485][ T7323] pgmajfault 70 [ 379.911488][ T7323] inactive_anon 279547904 [ 379.911492][ T7323] active_anon 30806016 [ 379.911495][ T7323] inactive_file 118784 [ 379.911501][ T7323] active_file 32768 [ 379.911507][ T7323] unevictable 0 [ 379.911512][ T7323] hierarchical_memory_limit 314572800 [ 379.911519][ T7323] hierarchical_memsw_limit 9223372036854771712 [ 379.911525][ T7323] total_cache 309960704 [ 379.911531][ T7323] total_rss 540672 [ 379.911537][ T7323] total_rss_huge 0 [ 379.911542][ T7323] total_shmem 309809152 [ 379.911548][ T7323] total_mapped_file 94871552 [ 379.911554][ T7323] total_dirty 0 [ 379.911559][ T7323] total_writeback 0 [ 379.911565][ T7323] total_workingset_refault_anon 118 [ 379.911571][ T7323] total_workingset_refault_file 8063 [ 379.911577][ T7323] total_swap 126976000 [ 379.911582][ T7323] total_swapcached 4096 [ 379.911585][ T7323] total_pgpgin 702221 [ 379.911589][ T7323] total_pgpgout 626900 [ 379.911592][ T7323] total_pgfault 297663 [ 379.911595][ T7323] total_pgmajfault 70 [ 379.911599][ T7323] total_inactive_anon 279547904 [ 379.911603][ T7323] total_active_anon 30806016 [ 379.911607][ T7323] total_inactive_file 118784 [ 379.911610][ T7323] total_active_file 32768 [ 379.911614][ T7323] total_unevictable 0 [ 379.911617][ T7323] anon_cost 0 [ 379.911620][ T7323] file_cost 0 [ 379.911624][ T7323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.345,pid=7337,uid=0 [ 379.911794][ T7323] Memory cgroup out of memory: Killed process 7337 (syz.3.345) total-vm:104464kB, anon-rss:1464kB, file-rss:45104kB, shmem-rss:7872kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 380.735748][ T5757] nintendo 0003:057E:2019.0003: Failed handshake; ret=-71 [ 380.735774][ T5757] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-71 [ 380.824550][ T5725] usb usb2-port1: unable to enumerate USB device [ 381.621782][ T5757] nintendo 0003:057E:2019.0003: probe - fail = -71 [ 381.635274][ T5757] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -71 [ 381.749876][ T10] usb 4-1: USB disconnect, device number 9 [ 381.812324][ T5757] usb 5-1: USB disconnect, device number 6 SYZFAIL: failed to send rpc fd=3 want=288 sent=0 n=-1 (errno 32: Broken pipe) [ 382.273679][ T5757] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 382.501121][ T5757] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 382.514965][ T5757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.542192][ T5757] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 382.542212][ T5757] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 382.542225][ T5757] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.542246][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.045490][ T5757] usb 5-1: USB disconnect, device number 7 [ 384.421756][ T5771] usb 1-1: USB disconnect, device number 8 [ 384.422518][ T5771] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected