last executing test programs: 9.817302882s ago: executing program 2 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e00010c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740ff8400001c00188008000240000000000800014000000000080003"], 0x90}}, 0x0) 9.447920281s ago: executing program 2 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) read$FUSE(r2, &(0x7f0000000e80)={0x2020}, 0x2020) read$dsp(r0, &(0x7f0000000580)=""/4096, 0x1000) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x7, [{0x5, 0x6}, {0xc, 0x6}, {0x3, 0x3}, {0xeb, 0x5}, {0x3, 0x2}, {0x9, 0x3}, {0xf40000, 0xfffffff9}]}}) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={0x0, 0xbe, 0x2}, 0x0, &(0x7f0000000400)="59535931774feb29a93f4f9b6974c50670adc7f89cc5017f45210d52fb75afad157fb057920c6fb9abab57873c823b82eb5030629141a3e49b98e7a119b075c4ebfe37b8c024cbca72c3f64c39a41db5fa714c2d2806167957f7985865311baaa7fdb81722186db1c00679ea7844089fc734f9214b03683682128c9b61122c1b7b5df518c13af0da960666e213c46b24728e336294614f586d7c8d8f14f1e23e5e96b09c49f41e9fc5973e2f0de37066c325c4e991f3a6475bd9850842cc", &(0x7f00000002c0)=""/2) r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000403"], 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0xf) 8.844943242s ago: executing program 4 (id=1105): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x4, 0x7, {0xffffffffffffffff}, {0x0}, 0x1, 0x4}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@updpolicy={0x2e4, 0x19, 0x100, 0x70bd27, 0x25dfdbfc, {{@in=@private=0xa010101, @in6=@remote, 0x4e21, 0x8, 0x4e22, 0xfbc, 0xa, 0xe0, 0xa0, 0x33, 0x0, r3}, {0x1000, 0x4, 0xc, 0x7fff, 0x9, 0x1000, 0x401, 0x34}, {0xfd, 0x3, 0x2000000000, 0x8}, 0x200, 0x0, 0x2, 0x0, 0x3}, [@algo_crypt={0x68, 0x2, {{'ctr-blowfish-asm\x00'}, 0x100, "e09ed4c6b2ed895450076013afa83fe67bc619b2baab9cecd528e52d27114461"}}, @algo_crypt={0xe7, 0x2, {{'ecb-serpent-avx2\x00'}, 0x4f8, "d738c6431e58a8fd58f2714455b3561095d8b63d5cc81e0c9243e04f86e33e3c010dec990ad52f9b55bfd2d587c6c5aa5d0c3370807583bab4f24274bf1739815e2863e60d7e2056fa68c1ee01a55a80930bfe0117ec5b4af3c0d454267625ed1c77ccdd4a05d2cc0d19e2e297c3859ff18aa3c73210ef8f3a1aa31d07a7147f611bf54d7b44edbe7e1034e5dd42de4d06cfbe838bfaad3fc410910969d643"}}, @algo_aead={0xdc, 0x12, {{'gcm_base(cbc-des3_ede-asm,nhpoly1305)\x00'}, 0x480, 0xa0, "9dbcb174f701f4691cc38237dfe5e022a1d60cf1db9be759103bf2791e149bed9fbf03b486751f9fd2cac358977dd50dfef429c8be0c566efd7ddaa019243ab7174ae0795a28844e74488180f74e461f7791dbabfa091085a156784e3fe2517ed405b8c73fbe849d5efb0058a31addcd1b5312e06d704dc344ded5a5dedbbe3be84eabd683b0e21a0b2fa0330dd79a84"}}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r5 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xecc, 0x1, 0x7, 0x2865, 0x2008, 0x9, 0x8001, 0x2, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x1412, 0xa00, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x44010}, 0x40000000) connect$unix(r7, 0x0, 0x0) 8.441222058s ago: executing program 0 (id=1107): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}, 0x1, 0x0, 0xff07000000000000}, 0x20000000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 8.000553239s ago: executing program 0 (id=1109): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r7, 0xc0189436, &(0x7f0000001200)) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, 0x0, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) 6.50366209s ago: executing program 1 (id=1115): socket$netlink(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x20004800) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') (rerun: 64) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) (async) syz_open_dev$video(0x0, 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) (async, rerun: 64) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x101, 0x0, &(0x7f0000000300), &(0x7f0000000200)=[0xf0, 0x2], &(0x7f0000000600)=[0x0], 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000240)="678cead6f59041d7546aaa7832491b4b791fb05e398e6f896b488035dbcfd31d39f921c21bddcec1446b9e752e87a86877bb6a724493e43dcec5eb0fd6fc", 0x3e}, {&(0x7f0000000280)="05d673a68d6ad523b11b1797a66e97b1d2bdb81cfd6b0db60ff571a59b", 0x1d}], 0x2) 6.451541425s ago: executing program 1 (id=1116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000480)="d0cee01d74ad173276601e772f1ffe0d8fe879cc7ce105066505c01ab3fa2cf831f3d20470cbb323d5320cd1c27776ea64dbcbb1c1b6ce83a618ad3038f2bdcabf497ef3783dfdc6b6a35c8d57573ab073a016994eec1fd7fb10eb301ed1af01dce01a99dc056bd3ac6e7a18247ed86b3bde183a1a747c4084687d2d6b71efd0f4c4e04e32d4653b275f43837e036c352fd247dfb6894cae1d749307f58f2abe4b5760664e5df7767b91bd49ec99a50bb74cf22ed7d97dd0f1249a9feb3b04afc1c7fdba8e3773f76865400d5aa874db4fb99d079d755189c7") r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x4, 0x9, 0x5, 0x8, 0x7}, 0x0, 0x0}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r10 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 6.063807749s ago: executing program 2 (id=1117): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xf97, 0x0, 0x0, 0x0, 0x65}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x8000, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x3ff, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r2, 0x80000}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x4000996f, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0xffffd000) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x1, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xfffffffa, 0x10000001, 0x6, 0x1}, 0x3}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000050dcebfb5e9e7b6e6000"/30], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000851e0000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.208355965s ago: executing program 2 (id=1119): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009170000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r8, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) 4.871762187s ago: executing program 0 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f00000002c0)="0fff6ed77fb94f941adffb7cf444cfcf099dfbdff24037b379d84c34d3e20a487d449c77525d1d7b2b9b2f6485e7de70ec4c0cd1ed2b4d455b400e1066368ccd0c000000000000de92545daf9779cc81", 0x50, 0x2005c010, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xe7c073ed55f9c682, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c0d8) sendmsg$nl_xfrm(r0, 0x0, 0x40000c0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x9) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES16=r9, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0600000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 4.537043055s ago: executing program 4 (id=1122): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x121540) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000280)={0x4, 0xf4240, 0x5, 0x0, 0xe}) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) close(0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$sock(r3, &(0x7f0000000200)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x3, 0x4, {0xa, 0x4e22, 0x7, @private1, 0x2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="e1db1d0137fedcd1e09dacf0d85eb4d46f5493616abebdf757226fe6d9d9bd20a5ce1c7cf44beaa66ab24fa4d083db50b31d2b3b7279c8e4587dc95ec6", 0x3d}], 0x1}}], 0x1, 0x4001) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 4.48615826s ago: executing program 3 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/16, 0x10}], 0x2, &(0x7f0000000a80)=""/87, 0x57}, 0xb}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000d40)=""/4092, 0xffc}, 0x20000002}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001d40)=""/61, 0x3d}, {&(0x7f0000001d80)=""/237, 0xed}, {&(0x7f0000001e80)=""/123, 0x7b}], 0x3, &(0x7f0000001f40)=""/174, 0xae}, 0x2}, {{&(0x7f0000002000)=@xdp, 0x80, &(0x7f0000003600)=[{&(0x7f0000000740)=""/137, 0x89}, {&(0x7f0000002140)=""/73, 0x49}, {&(0x7f00000021c0)=""/189, 0xbd}, {&(0x7f0000002280)=""/19, 0x13}, {&(0x7f00000022c0)=""/4, 0x4}, {&(0x7f0000002300)=""/199, 0xc7}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/86, 0x56}, {&(0x7f0000003580)=""/75, 0x4b}], 0xa, &(0x7f00000036c0)=""/122, 0x7a}, 0xc}], 0x4, 0x22, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x75809, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000400)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x20024000) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f000000e400)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000002400)=""/218, 0xda}, {&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000003940)=""/234, 0xea}, {&(0x7f0000003a40)=""/195, 0xc3}], 0x4, &(0x7f0000003b80)=""/235, 0xeb}, 0x4}, {{&(0x7f0000003c80)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003d00)=""/218, 0xda}, {&(0x7f0000003e00)=""/118, 0x76}, {&(0x7f0000003e80)=""/105, 0x69}], 0x3, &(0x7f0000003f40)=""/55, 0x37}, 0x7}, {{&(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004000)=""/191, 0xbf}, {&(0x7f00000040c0)=""/126, 0x7e}, {&(0x7f0000004140)=""/107, 0x6b}, {&(0x7f00000041c0)=""/34, 0x22}, {&(0x7f0000000900)=""/97, 0x61}, {&(0x7f0000004280)=""/32, 0x20}, {&(0x7f00000042c0)=""/33, 0x21}, {&(0x7f0000004300)=""/168, 0xa8}], 0x8, &(0x7f0000004440)=""/92, 0x5c}, 0x6}, {{&(0x7f00000044c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004540)=""/119, 0x77}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f0000005600)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000007740)=[{&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/14, 0xe}, {&(0x7f00000066c0)=""/33, 0x21}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/7, 0x7}], 0x5}, 0x80000001}, {{0x0, 0x0, &(0x7f0000008b40)=[{&(0x7f00000077c0)=""/128, 0x80}, {&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/236, 0xec}, {&(0x7f0000008940)=""/245, 0xf5}, {&(0x7f0000008a40)=""/117, 0x75}, {&(0x7f0000008ac0)=""/94, 0x5e}], 0x6, &(0x7f0000008bc0)=""/89, 0x59}, 0xfffffffb}, {{&(0x7f0000008c40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000008cc0)=""/160, 0xa0}, {&(0x7f0000008d80)=""/64, 0x40}, {&(0x7f0000008dc0)=""/245, 0xf5}, {&(0x7f0000008ec0)=""/126, 0x7e}, {&(0x7f0000008f40)=""/145, 0x91}, {&(0x7f0000009000)=""/182, 0xb6}, {&(0x7f00000090c0)=""/212, 0xd4}, {&(0x7f00000091c0)=""/4096, 0x1000}, {&(0x7f000000a1c0)=""/1, 0x1}, {&(0x7f000000a200)=""/200, 0xc8}], 0xa, &(0x7f000000a3c0)=""/96, 0x60}, 0x5}, {{&(0x7f000000a440)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f000000c9c0)=[{&(0x7f000000a4c0)=""/236, 0xec}, {&(0x7f000000a5c0)=""/75, 0x4b}, {&(0x7f000000a640)=""/123, 0x7b}, {&(0x7f000000a6c0)=""/26, 0x1a}, {&(0x7f000000a700)=""/142, 0x8e}, {&(0x7f000000a7c0)=""/201, 0xc9}, {&(0x7f000000a8c0)=""/239, 0xef}, {&(0x7f000000e680)=""/4096, 0x1000}, {&(0x7f000000b9c0)=""/4096, 0x1000}], 0x9}, 0x101}, {{&(0x7f000000ca80)=@ethernet={0x0, @random}, 0x80, &(0x7f000000cdc0)=[{&(0x7f000000cb00)=""/42, 0x2a}, {&(0x7f000000cb40)=""/166, 0xa6}, {&(0x7f000000cc00)=""/117, 0x75}, {&(0x7f000000cc80)=""/5, 0x5}, {&(0x7f000000ccc0)=""/206, 0xce}], 0x5, &(0x7f000000ce40)=""/251, 0xfb}, 0x8000}, {{&(0x7f000000cf40)=@hci, 0x80, &(0x7f000000e300)=[{&(0x7f000000cfc0)}, {&(0x7f0000000bc0)=""/264, 0x108}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f000000d200)=""/222, 0xde}, {&(0x7f000000a9c0)=""/4096, 0x1000}], 0x5, &(0x7f000000e380)=""/87, 0x57}, 0x8}], 0xa, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_nanosleep(0x5, 0x0, &(0x7f0000000180), 0x0) userfaultfd(0x801) 3.895852953s ago: executing program 2 (id=1124): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000009e00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.765568298s ago: executing program 0 (id=1125): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xff0f0000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x1f00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.696477191s ago: executing program 0 (id=1126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7}, '\x00', "74bc397ea8c815bf853b8d659a76d8b8", "ef0bfe30", "0010000f0000003c"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0413000037000100feffffff00000000017c000004008f8001"], 0x1304}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) syz_usb_connect(0x3, 0x8f1, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x30, 0xb7, 0xa1, 0x20, 0x12d1, 0x7959, 0xcb13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8df, 0x4, 0x4, 0xff, 0x80, 0x7, [{{0x9, 0x4, 0x41, 0xe, 0x8, 0xff, 0x4, 0x1c, 0xde, [], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x5, 0x98, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x7ef, 0x9, 0x10, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5d, 0x1400}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0xc, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7, 0xeb, 0xd7}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x6, 0xb, 0x9, [@generic={0xe4, 0xb, "c84483c5d9c220d3519dc4cef49099b916cc436c15edd5bfd91ec28cda45db9ba9bac14684715cce89dd00dee5ad91f618b5aa5b22527bada7aa4d86961ce8709447c9e23119ddf86e925d351b23f81ee25bd3b783e42182c66e3268bcc5c0d12fce6f62bdf4e32478f34ae942704887772d3433b03b01d34abd4e0b21a7c2b0570c780182d54818ae36e29ef85963ea7722611b552a72174c5a61e019d1eb5a65707f616c2011257d78f949006ffbb59132a6cee51e4a4837c628e6487232f68dce58783e8bedbcd18d878a6f88f24f3c86905d0456f5b0ee54089c24f0f934c81d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2192}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x81, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3b, 0x40, 0x1, [@generic={0x9e, 0x22, "20bcf31a96bd932fadddd23735dd0c3db3966f67b378b9f1d7411f011dc2dd9ca80a15fddba05326644720beb913d97d164d35464f1bfbffc746a1dbdb69c46592b23e3fba66242b60cb6096f531344f75ce3078293f6f88b7ebe43092dd4d475f8fd63beddcbce2a8fb39395f39489ed44dab29d233fae96de6d5c3177e3782b273fb4995f55f64b234d6d64127e43914ae7891f6a470d9dc311dde"}, @generic={0x53, 0x0, "7b17be014eea402bad8d5223c8b271eb318929612946dc79b669cd51dbf54b641f6505e0b9406043351f2e2c95c98b26a28e37eb811cab2d851eb38f5e81b59e68e38cb8e4c00d5ec920be22a75ad75158"}]}}]}}, {{0x9, 0x4, 0x6b, 0x2, 0x6, 0x23, 0xee, 0x51, 0x8, [], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x81, 0x9, 0xc6}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xfa, 0x7, 0x8}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x5, 0xc9, 0x24}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x90, 0x8, [@generic={0xe6, 0x22, "990d7c59a0a25da662caf93c0bc820c523bc82c1c3299314ed36a920fe75ef5bbb7029e8021c715bb279358df201c5cd32c4658ee0626a406a9ec5d9ac84a8cc43d68bef9ae18ab3fd8bdce6454b24f6ba5fd5f7388687257f8e7d56f5547b11fd59991c0543f95b371b42ef4017e8f03e90b71f134841c563537a0e122a437ec84a8ce5e817ded726ccc075f5ba86fb9ab380c3cdf90bdeaeb86739b5b69654f6c9962eac62d028eb84894bee5399bee14876b459e056ebf2721b621256f5c29b02d23e0731533adba72332b704c1ed102724a348da6999b2b2a0a5d6058a5f3d5adaf2"}, @generic={0x13, 0xd, "4add325155fa6b19c662df92d8d1e59f7c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x80, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5c, 0xc60f}]}}, {{0x9, 0x5, 0x8, 0x3, 0x7f7, 0x4, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd19}]}}]}}, {{0x9, 0x4, 0x14, 0x6, 0xb, 0xff, 0x5d, 0x81, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0xffff, 0x40, 'ZO'}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x400, 0x2, "a970"}]}], [{{0x9, 0x5, 0x6, 0x4, 0x400, 0xd, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x10}, @generic={0x1d, 0x22, "21725483f506f2302a6315452c79f4cb23a02728511c3147930b79"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x5, 0xa0}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x42, 0x67, 0x40, [@generic={0xad, 0xc, "f202f4c64a60472ab13b82fcaf233e8d215574c5b8f3e9b226f2a576ce1a2a89249bb3785159fe3ad2a3aea3ca62dbe3220ed0e32f1bd83ef30a38ca53237f91df063b420ecf98e2f1e46b75e05d75e2c04af0f6f1e70433dade9123dbe84a903f168fa106c5a924451aeffa7831926047c7dee4e877d9e050082f2142684eebf691a69db62a70a9c8b2efda53c76f79e22a3c394a57618091a1e2e925b578749f492b1f6d8e1986bef274"}, @generic={0xab, 0xc, "e584436b311feb0f2d36f71deaed1e03859a3dcc6b860dfd9999b2662db3044d031840df31d755e85f79635803f8f5f02ba487b7c15d25216f0da98b628978e045066d503b1b750bbdfcf132eb15643e2efd6b067caee357057e16ecd135d25f8c1ceacaeb73efe0e5fd1f7e119183cc5daaa67d4827ab1e80cb1c05e81457351bd0db2d5b7bb4afc27e04c32f8790c0122ff2273db8970836ec9e7c74084caff92c911f096bb288c6"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa4, 0xc}, @generic={0x15, 0xe, "298e0b80ce24689c24987d9e3120e6311b4d37"}]}}, {{0x9, 0x5, 0xc, 0x5, 0x40, 0x0, 0xfc, 0x8, [@generic={0x83, 0xd, "4793c4909f9254b9a2445a4b9aca30e799ace424424e1d5cf74aa72d176c5615c504abbeb9c9f996a1c602b30f6c322d913eb3a1da1928c93db4570fe3baedac6dead9dc50835e4097418c791fd1809934df11dca2a80a201cbb04ef1abfbfee3cd3a0be446f77fd13f95a73bcd045eeaf37e9d1367c634889f6ae364147b4d5a7"}, @generic={0xc8, 0x21, "b7272b20b7774affbdb3eb7144eb9d8045b32b25f3508b0b02f07798e483d68b136544c811ada2cd2d5ea0218da484d9d484bb8b8c8f2683645e0234374cfac55072795ae33223c3a2bf9ee116ec46810d0f577e812816535eb6858d1cf5ab43a2418715a96589c6bed1f290dc072662cb02ba3ab66a8e70eb9cb90eab21c30923ab8d88191721d65858b1d276e1be9f2688c67cb9b54015cfa3010f306d21e1928773999d7a53ae5eb612eb6cce4699b906e1e5e7c21a8c0aa10ca4d30f18f5e23b0ed140e0"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xe, 0xff, 0x8, [@generic={0xc9, 0x10, "5670a8cd45e9189254869b6c270d7dc2771af8d5abafaf37da69dd8b58c2f7a06deba13032d0b7a5844e33c3356960d6b9aef552e33e2663a57dbbbd3d5ce16fb0774f06b2c8f335574df63f2473d330e17badb202ddd3f40f9dd2c3d7e44b66bb032965fa40ef88604f4d01b28af2fd9f4c24bfeac41923b46bcf15f305288f94ee79cf6c70d95a49a5bce241afe2d827d63a1306561cc5b9e763ebd18d4c71c86513d65a38f8ff6725338ae55e3075b1f0d5954ff1f2732baa916e8702cda3aee43dbdc63569"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xf1, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xb5, 0x0, 0x2, [@generic={0x91, 0x31, "641f2519f267b49e519928ccc72c63b6e5dc639e442c2a2b61559422736c52320d36113edbdaed5da4ec319064baad6a0325871d4e69ef1f560fc5413ee127bea225664a334791ff1903ed5dcfd9d5c2ffa086fff00da5345072fcf0cfe0e8931e2cf0a998bf49d4af41faf59957642ac4cb3a7495bce352b42cd7dfa5e36f81b93dc28194136573443b0f793e2f44"}, @generic={0x4d, 0x6, "7f15108bbc51a32f23068ef8fcf71bf3adade11420df729e87b1590600c7eae1f66dae4c9f8b80fa92deaad85132c50ba766025d2637aedc3d6543fe06f5971b68e1dbf0158cc5d1b2650f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x3, 0x0, 0xd, [@generic={0x23, 0x23, "5447ed6c948cd2d761211b2b6f670b8ebe0a1b3b3ec08316f0465f1e3a2873104f"}]}}]}}, {{0x9, 0x4, 0x2, 0x1, 0x0, 0x3c, 0x88, 0xf2, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xda, 0x5, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x3, 0x24, 0x3, "", "8384"}]}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x7, 0x8, 0x8, 0xc0}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x5, 0x8}]}, 0x4, [{0xb1, &(0x7f0000001100)=ANY=[@ANYBLOB="b103c48ec9ed2eb48420a4a37919583eee96828e1466d673bd3b83a23ba475c19c10cf185949dbadb8ffb37830c2585aef05b4419275ee1d12e7858b2158759050ed7dfc2d0f4ccdc829eaf206302f035d53cc35cbf9a35960fdb946cf6f02d8b55604e01aef651d7c6ef53c22657424e353f8ff48233fc215273edeaa9557537ef8ae69ad271ef26c1507bdffb4ed79af81d00590c35672837d5f1f113f15e5fad3147f17a6a99eac62c4d752515baed5e8378901d149bd8819d7def0b3fdd19ee45ef4d86191538ee01213d95058c7d50ebe09b2271667f66adce3526f8dfede46166520721a0c20aabd32071fee1e91f4d80ef91d007e6b66cf57f6e231da836d41434ab327121e0938e5f7098c882891616edbac7ec3fce545733a9ffc51fe0bda6301fd80dc5724580d61ef92204b0da8f4d7fe1c14f7a965d9b0d6279b75fc157dcd5b516005ea59465bceb4ad4437cf6cf20d742fa7b87050c82549a9"]}, {0x40, &(0x7f0000000140)=@string={0x40, 0x3, "62f200e5ca39293120562ba7494b65edaadd7b37b67662b1230cf0672078fe74cdc0324c95a05c273b63a53dd54ccc53e11f2fd6bffb60d4e5a20ae5eee9"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x424}}, {0x93, &(0x7f00000002c0)=@string={0x93, 0x3, "2f54f3f957730a3670beee12602b9951f20ec3d0ff9e432c5df8571f8aff383355b86eac931ad1b779a3e041119b389c90b54abeb02c7a294e4c3fb10d7e318a433be673628d31006e18a4c53064738b3a9bf85480595447faa9058e2df10d26c61ec635a726e086692b1363c96c9f199f7c231edf33c6d9c1231062fbce46eb9443f067bac6c4541b14aab502b4b7055a"}}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/217, 0xd9}], 0x2, &(0x7f0000000580)=""/190, 0xbe}}], 0x1, 0x10000, &(0x7f0000000680)={0x0, 0x989680}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000006c0)={0x0, 0x0, r2, 0x4744}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7}, '\x00', "74bc397ea8c815bf853b8d659a76d8b8", "ef0bfe30", "0010000f0000003c"}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0413000037000100feffffff00000000017c000004008f8001"], 0x1304}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) syz_usb_connect(0x3, 0x8f1, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x30, 0xb7, 0xa1, 0x20, 0x12d1, 0x7959, 0xcb13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8df, 0x4, 0x4, 0xff, 0x80, 0x7, [{{0x9, 0x4, 0x41, 0xe, 0x8, 0xff, 0x4, 0x1c, 0xde, [], [{{0x9, 0x5, 0x4, 0x8, 0x20, 0x5, 0x98, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x7ef, 0x9, 0x10, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5d, 0x1400}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0xc, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7, 0xeb, 0xd7}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x6, 0xb, 0x9, [@generic={0xe4, 0xb, "c84483c5d9c220d3519dc4cef49099b916cc436c15edd5bfd91ec28cda45db9ba9bac14684715cce89dd00dee5ad91f618b5aa5b22527bada7aa4d86961ce8709447c9e23119ddf86e925d351b23f81ee25bd3b783e42182c66e3268bcc5c0d12fce6f62bdf4e32478f34ae942704887772d3433b03b01d34abd4e0b21a7c2b0570c780182d54818ae36e29ef85963ea7722611b552a72174c5a61e019d1eb5a65707f616c2011257d78f949006ffbb59132a6cee51e4a4837c628e6487232f68dce58783e8bedbcd18d878a6f88f24f3c86905d0456f5b0ee54089c24f0f934c81d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2192}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x81, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x3b, 0x40, 0x1, [@generic={0x9e, 0x22, "20bcf31a96bd932fadddd23735dd0c3db3966f67b378b9f1d7411f011dc2dd9ca80a15fddba05326644720beb913d97d164d35464f1bfbffc746a1dbdb69c46592b23e3fba66242b60cb6096f531344f75ce3078293f6f88b7ebe43092dd4d475f8fd63beddcbce2a8fb39395f39489ed44dab29d233fae96de6d5c3177e3782b273fb4995f55f64b234d6d64127e43914ae7891f6a470d9dc311dde"}, @generic={0x53, 0x0, "7b17be014eea402bad8d5223c8b271eb318929612946dc79b669cd51dbf54b641f6505e0b9406043351f2e2c95c98b26a28e37eb811cab2d851eb38f5e81b59e68e38cb8e4c00d5ec920be22a75ad75158"}]}}]}}, {{0x9, 0x4, 0x6b, 0x2, 0x6, 0x23, 0xee, 0x51, 0x8, [], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x81, 0x9, 0xc6}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xfa, 0x7, 0x8}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x5, 0xc9, 0x24}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0x90, 0x8, [@generic={0xe6, 0x22, "990d7c59a0a25da662caf93c0bc820c523bc82c1c3299314ed36a920fe75ef5bbb7029e8021c715bb279358df201c5cd32c4658ee0626a406a9ec5d9ac84a8cc43d68bef9ae18ab3fd8bdce6454b24f6ba5fd5f7388687257f8e7d56f5547b11fd59991c0543f95b371b42ef4017e8f03e90b71f134841c563537a0e122a437ec84a8ce5e817ded726ccc075f5ba86fb9ab380c3cdf90bdeaeb86739b5b69654f6c9962eac62d028eb84894bee5399bee14876b459e056ebf2721b621256f5c29b02d23e0731533adba72332b704c1ed102724a348da6999b2b2a0a5d6058a5f3d5adaf2"}, @generic={0x13, 0xd, "4add325155fa6b19c662df92d8d1e59f7c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x80, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5c, 0xc60f}]}}, {{0x9, 0x5, 0x8, 0x3, 0x7f7, 0x4, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd19}]}}]}}, {{0x9, 0x4, 0x14, 0x6, 0xb, 0xff, 0x5d, 0x81, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x4, 0xffff, 0x40, 'ZO'}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x400, 0x2, "a970"}]}], [{{0x9, 0x5, 0x6, 0x4, 0x400, 0xd, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x10}, @generic={0x1d, 0x22, "21725483f506f2302a6315452c79f4cb23a02728511c3147930b79"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x5, 0xa0}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x42, 0x67, 0x40, [@generic={0xad, 0xc, "f202f4c64a60472ab13b82fcaf233e8d215574c5b8f3e9b226f2a576ce1a2a89249bb3785159fe3ad2a3aea3ca62dbe3220ed0e32f1bd83ef30a38ca53237f91df063b420ecf98e2f1e46b75e05d75e2c04af0f6f1e70433dade9123dbe84a903f168fa106c5a924451aeffa7831926047c7dee4e877d9e050082f2142684eebf691a69db62a70a9c8b2efda53c76f79e22a3c394a57618091a1e2e925b578749f492b1f6d8e1986bef274"}, @generic={0xab, 0xc, "e584436b311feb0f2d36f71deaed1e03859a3dcc6b860dfd9999b2662db3044d031840df31d755e85f79635803f8f5f02ba487b7c15d25216f0da98b628978e045066d503b1b750bbdfcf132eb15643e2efd6b067caee357057e16ecd135d25f8c1ceacaeb73efe0e5fd1f7e119183cc5daaa67d4827ab1e80cb1c05e81457351bd0db2d5b7bb4afc27e04c32f8790c0122ff2273db8970836ec9e7c74084caff92c911f096bb288c6"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x5, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa4, 0xc}, @generic={0x15, 0xe, "298e0b80ce24689c24987d9e3120e6311b4d37"}]}}, {{0x9, 0x5, 0xc, 0x5, 0x40, 0x0, 0xfc, 0x8, [@generic={0x83, 0xd, "4793c4909f9254b9a2445a4b9aca30e799ace424424e1d5cf74aa72d176c5615c504abbeb9c9f996a1c602b30f6c322d913eb3a1da1928c93db4570fe3baedac6dead9dc50835e4097418c791fd1809934df11dca2a80a201cbb04ef1abfbfee3cd3a0be446f77fd13f95a73bcd045eeaf37e9d1367c634889f6ae364147b4d5a7"}, @generic={0xc8, 0x21, "b7272b20b7774affbdb3eb7144eb9d8045b32b25f3508b0b02f07798e483d68b136544c811ada2cd2d5ea0218da484d9d484bb8b8c8f2683645e0234374cfac55072795ae33223c3a2bf9ee116ec46810d0f577e812816535eb6858d1cf5ab43a2418715a96589c6bed1f290dc072662cb02ba3ab66a8e70eb9cb90eab21c30923ab8d88191721d65858b1d276e1be9f2688c67cb9b54015cfa3010f306d21e1928773999d7a53ae5eb612eb6cce4699b906e1e5e7c21a8c0aa10ca4d30f18f5e23b0ed140e0"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xe, 0xff, 0x8, [@generic={0xc9, 0x10, "5670a8cd45e9189254869b6c270d7dc2771af8d5abafaf37da69dd8b58c2f7a06deba13032d0b7a5844e33c3356960d6b9aef552e33e2663a57dbbbd3d5ce16fb0774f06b2c8f335574df63f2473d330e17badb202ddd3f40f9dd2c3d7e44b66bb032965fa40ef88604f4d01b28af2fd9f4c24bfeac41923b46bcf15f305288f94ee79cf6c70d95a49a5bce241afe2d827d63a1306561cc5b9e763ebd18d4c71c86513d65a38f8ff6725338ae55e3075b1f0d5954ff1f2732baa916e8702cda3aee43dbdc63569"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xf1, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xb5, 0x0, 0x2, [@generic={0x91, 0x31, "641f2519f267b49e519928ccc72c63b6e5dc639e442c2a2b61559422736c52320d36113edbdaed5da4ec319064baad6a0325871d4e69ef1f560fc5413ee127bea225664a334791ff1903ed5dcfd9d5c2ffa086fff00da5345072fcf0cfe0e8931e2cf0a998bf49d4af41faf59957642ac4cb3a7495bce352b42cd7dfa5e36f81b93dc28194136573443b0f793e2f44"}, @generic={0x4d, 0x6, "7f15108bbc51a32f23068ef8fcf71bf3adade11420df729e87b1590600c7eae1f66dae4c9f8b80fa92deaad85132c50ba766025d2637aedc3d6543fe06f5971b68e1dbf0158cc5d1b2650f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x3, 0x0, 0xd, [@generic={0x23, 0x23, "5447ed6c948cd2d761211b2b6f670b8ebe0a1b3b3ec08316f0465f1e3a2873104f"}]}}]}}, {{0x9, 0x4, 0x2, 0x1, 0x0, 0x3c, 0x88, 0xf2, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xda, 0x5, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x3, 0x24, 0x3, "", "8384"}]}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x7, 0x8, 0x8, 0xc0}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x5, 0x5, 0x8}]}, 0x4, [{0xb1, &(0x7f0000001100)=ANY=[@ANYBLOB="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"]}, {0x40, &(0x7f0000000140)=@string={0x40, 0x3, "62f200e5ca39293120562ba7494b65edaadd7b37b67662b1230cf0672078fe74cdc0324c95a05c273b63a53dd54ccc53e11f2fd6bffb60d4e5a20ae5eee9"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x424}}, {0x93, &(0x7f00000002c0)=@string={0x93, 0x3, "2f54f3f957730a3670beee12602b9951f20ec3d0ff9e432c5df8571f8aff383355b86eac931ad1b779a3e041119b389c90b54abeb02c7a294e4c3fb10d7e318a433be673628d31006e18a4c53064738b3a9bf85480595447faa9058e2df10d26c61ec635a726e086692b1363c96c9f199f7c231edf33c6d9c1231062fbce46eb9443f067bac6c4541b14aab502b4b7055a"}}]}) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/217, 0xd9}], 0x2, &(0x7f0000000580)=""/190, 0xbe}}], 0x1, 0x10000, &(0x7f0000000680)={0x0, 0x989680}) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000006c0)={0x0, 0x0, r2, 0x4744}) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x48) (async) 3.43367231s ago: executing program 4 (id=1127): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) 3.331890427s ago: executing program 1 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0xb]}}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setresuid(0xee00, 0xee00, 0xee00) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r7}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14852bc12e66474de900af00a4fbdf050914d1a0219d88a6b5f0ec7c1fda0de7a58c07b2d0d92c3f25c5310e95a87bf749ce16a6ede3983b3415b3f0b63d1bc0e7dadf6f96080583aebbc1e13cef20f3730fed21f2354d66ff69932d471f269599f898e581d5f98952151496ec12c979d59ca4558f048e875893459f34da21eddec122b6b3aad83403fc36e6f488a8723f39206db6654c06d392665d4d46", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='@s\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020026bd7000ffdbdf250100000008000400b40000000800030003000000050005000100000008000400020000000800020007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_newneigh={0x24, 0x1c, 0x300, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, r10, 0x10, 0x41}, [@NDA_PROTOCOL={0x5, 0xc, 0xe3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.223977543s ago: executing program 1 (id=1129): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 2.918339036s ago: executing program 4 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.83195596s ago: executing program 1 (id=1131): socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x801c581f, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0xffffff90, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 2.831056405s ago: executing program 3 (id=1132): timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$usbfs(r0, &(0x7f0000000100)=""/129, 0x81) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x89e}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x42}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4002040}, 0x40400d0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c0000000006c5ff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.418216858s ago: executing program 3 (id=1133): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x800) close(r2) tee(r0, r1, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000005000000000000000100000d000000000300000003000000010000000000000c0000000002000000000000110100000000715f6100d18b66ee5e24fbf1c7549aaca8766fed51df8cb5171e4487a6b0d465f1c6a625f3c1d8df0709af237c0373b04aaa3abd874bb75524"], 0x0, 0x49}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000012, 0xd, 0x0, &(0x7f0000000240)="63e4ed8e507646dcef90b3184eae70ef05b644bc67df33c9e9", 0x0, 0x80000000, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x2, 0x0, 0x8000000}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) 2.312957503s ago: executing program 2 (id=1134): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009180000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r8 = epoll_create1(0x0) epoll_pwait(r8, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) 2.309521507s ago: executing program 4 (id=1135): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) pipe2(0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a03f1000000bf67000000000000350602000fff07201706000020191800160600000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.815730704s ago: executing program 1 (id=1136): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x5, 0x6, 0xc5, '\x00', 0x9}, {0x94, 0x2, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfd}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x85, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x80, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0xa, 0x5, 0x4, '\x00', 0x50}, {0xf, 0x2, 0xd}, {0x8, 0x7d, 0xc1, '\x00', 0x7f}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0xe}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x17, &(0x7f0000001000)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000850000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000701005b59f3b18309919500f8ffffffb702000008000000b70300000010000085000000060000004d9a0001010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x8c, &(0x7f00000005c0)=""/140, 0x41100, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x2, 0x4}, 0x10, 0x1c4a1, r3, 0x0, &(0x7f0000000680)=[r4, r4, r4, r3, r4, r4], &(0x7f00000006c0), 0x10, 0x9}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 1.204150072s ago: executing program 3 (id=1137): set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) pread64(r1, &(0x7f00000001c0)=""/188, 0xbc, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000240)=0x4, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000000e948b6929bd7000fbdbdf250800010001000000"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x10) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) listen(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) 1.149962078s ago: executing program 4 (id=1138): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x400000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x400000000008, 0xfffffffd, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) flistxattr(r3, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = accept4$x25(r4, &(0x7f0000000000)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) recvmsg(r5, &(0x7f0000000600)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/154, 0x9a}], 0x4, &(0x7f00000005c0)=""/8, 0x8}, 0x2002) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) unshare(0x6020400) signalfd4(r6, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 483.885302ms ago: executing program 0 (id=1139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) close(r5) tee(r1, r6, 0x8f5, 0x0) write$binfmt_script(r6, 0x0, 0xd9) write(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x8008002000000, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0xa1, 0x1b1c07, 0x2, 0xfffffffd, 0x6}) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r10, &(0x7f0000001f00)=""/4111, 0x100f) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000000000)={0x7d, 0x1042, 0x800002, 0xe07, 0x22000, 0x800028a7}) 89.573736ms ago: executing program 3 (id=1140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000b0ff8500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1141): clock_settime(0x0, &(0x7f0000000040)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000001000270701e60000000000000000000a"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x84) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8d4061, &(0x7f0000000400)={[], [{@euid_gt={'euid>', r5}}]}) kernel console output (not intermixed with test programs): ext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.351900][ T24] usb 1-1: Product: syz [ 136.358609][ T24] usb 1-1: Manufacturer: syz [ 136.367525][ T24] usb 1-1: SerialNumber: syz [ 136.801739][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.089216][ T7609] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.387756][ T7626] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 137.397958][ T7626] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 137.468541][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 137.479611][ T7629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.490797][ T7629] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 137.500820][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 137.510419][ T7629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.542960][ T7629] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 137.554879][ T7629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.560938][ T7629] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 137.570067][ T7629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.576292][ T7629] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 137.586663][ T7629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.593202][ T7629] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 138.004522][ T5909] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.019347][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 138.078833][ T7641] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 138.527311][ T5909] usb 2-1: config 0 has no interface number 0 [ 138.537007][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 138.538297][ T5909] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 138.555400][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.568687][ T5909] usb 2-1: Product: syz [ 138.573028][ T5909] usb 2-1: Manufacturer: syz [ 138.577701][ T5909] usb 2-1: SerialNumber: syz [ 138.588816][ T5909] usb 2-1: config 0 descriptor?? [ 138.730200][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 138.742401][ T10] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 138.751699][ T10] usb 4-1: config 7 has no interface number 0 [ 138.757971][ T10] usb 4-1: config 7 interface 252 has no altsetting 0 [ 138.768232][ T10] usb 4-1: string descriptor 0 read error: -22 [ 138.775664][ T10] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 138.786197][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.911501][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 139.007865][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 139.032393][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.172621][ T2148] usb 1-1: USB disconnect, device number 5 [ 139.183519][ T2148] usblp0: removed [ 139.234426][ T5909] uvcvideo 2-1:0.251: probe with driver uvcvideo failed with error -22 [ 139.253657][ T5909] usb 2-1: USB disconnect, device number 13 [ 139.520182][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.538588][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.343369][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 140.380211][ T7674] bridge0: port 3(syz_tun) entered blocking state [ 140.386898][ T7674] bridge0: port 3(syz_tun) entered disabled state [ 140.393780][ T7674] syz_tun: entered allmulticast mode [ 140.400645][ T7674] syz_tun: entered promiscuous mode [ 140.406164][ T7674] bridge0: port 3(syz_tun) entered blocking state [ 140.412667][ T7674] bridge0: port 3(syz_tun) entered forwarding state [ 140.422332][ T7674] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 140.430884][ T7674] bridge0: port 3(syz_tun) entered disabled state [ 140.437405][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.444605][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.455668][ T7674] bridge0: port 3(syz_tun) entered blocking state [ 140.462126][ T7674] bridge0: port 3(syz_tun) entered forwarding state [ 140.468787][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.475851][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.483124][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.490196][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.500605][ T7674] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 140.629452][ T5856] Bluetooth: hci6: command 0xfc11 tx timeout [ 140.629496][ T5844] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 141.080305][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 141.080318][ T30] audit: type=1400 audit(1755505787.056:938): avc: denied { connect } for pid=7683 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.097748][ T7688] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 141.127327][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 141.138461][ T10] usb 4-1: USB disconnect, device number 16 [ 141.170400][ T7692] Invalid logical block size (18) [ 141.326505][ T30] audit: type=1400 audit(1755505787.296:939): avc: denied { ioctl } for pid=7684 comm="syz.4.464" path="socket:[14686]" dev="sockfs" ino=14686 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.369019][ T5923] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.518229][ T7698] syz.2.468: attempt to access beyond end of device [ 141.518229][ T7698] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 141.583914][ T5923] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 141.643992][ T5923] usb 2-1: config 0 has no interface number 0 [ 141.757960][ T30] audit: type=1400 audit(1755505787.716:940): avc: denied { read } for pid=7697 comm="syz.2.468" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.867759][ T5923] usb 2-1: config 0 interface 171 has no altsetting 0 [ 141.914376][ T5923] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 141.927452][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.967484][ T5923] usb 2-1: Product: syz [ 141.974787][ T5923] usb 2-1: Manufacturer: syz [ 141.983177][ T5923] usb 2-1: SerialNumber: syz [ 142.026021][ T5923] usb 2-1: config 0 descriptor?? [ 142.100289][ T5923] usb-storage 2-1:0.171: USB Mass Storage device detected [ 142.463820][ T30] audit: type=1400 audit(1755505788.437:941): avc: denied { watch } for pid=7712 comm="syz.0.472" path="/107" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.486952][ T30] audit: type=1400 audit(1755505788.437:942): avc: denied { watch_sb watch_reads } for pid=7712 comm="syz.0.472" path="/107" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.509935][ T5923] usb 2-1: USB disconnect, device number 14 [ 143.197895][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.221834][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 143.286218][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 143.587615][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 144.291426][ T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 144.316794][ T10] usb 3-1: config 0 has no interface number 0 [ 144.328428][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.342262][ T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 144.355188][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.389594][ T7744] netlink: 56 bytes leftover after parsing attributes in process `syz.0.482'. [ 144.398664][ T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.448232][ T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.565952][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 144.624938][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.674701][ T10] usb 3-1: Product: syz [ 144.700954][ T10] usb 3-1: Manufacturer: syz [ 144.731998][ T10] usb 3-1: SerialNumber: syz [ 144.790961][ T10] usb 3-1: config 0 descriptor?? [ 145.304224][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 145.313298][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 145.588921][ T7759] Invalid logical block size (18) [ 145.678352][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 145.919635][ T30] audit: type=1400 audit(1755505791.888:943): avc: denied { mount } for pid=7769 comm="syz.3.492" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 145.981787][ T30] audit: type=1400 audit(1755505791.888:944): avc: denied { mounton } for pid=7769 comm="syz.3.492" path="/83/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 146.033650][ T30] audit: type=1400 audit(1755505791.918:945): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 146.573857][ T10] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 146.615913][ T10] usb 3-1: USB disconnect, device number 8 [ 147.233187][ T7792] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 147.260804][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.272105][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 148.305431][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.517179][ T30] audit: type=1400 audit(1755505794.360:946): avc: denied { getopt } for pid=7784 comm="syz.2.497" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.572762][ T7809] Invalid logical block size (18) [ 148.827875][ T30] audit: type=1400 audit(1755505794.360:947): avc: denied { create } for pid=7806 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 148.982693][ T30] audit: type=1400 audit(1755505794.370:948): avc: denied { ioctl } for pid=7806 comm="syz.0.502" path="socket:[14940]" dev="sockfs" ino=14940 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 149.007157][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.080266][ T7819] sctp: [Deprecated]: syz.3.504 (pid 7819) Use of int in maxseg socket option. [ 149.080266][ T7819] Use struct sctp_assoc_value instead [ 149.181781][ T30] audit: type=1800 audit(1755505795.140:949): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.505" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 149.262082][ T30] audit: type=1400 audit(1755505795.190:950): avc: denied { lock } for pid=7821 comm="syz.0.507" path="socket:[15033]" dev="sockfs" ino=15033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.728244][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 150.973130][ T9] IPVS: starting estimator thread 0... [ 150.980338][ T7859] overlayfs: missing 'lowerdir' [ 151.016674][ T7861] Invalid logical block size (18) [ 151.074464][ T7860] IPVS: using max 128 ests per chain, 307200 per kthread [ 151.121185][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 151.130174][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 152.193414][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.443714][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 152.525051][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 152.548047][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.523'. [ 152.602598][ T10] usb 5-1: config 0 has no interface number 0 [ 152.708358][ T10] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 152.717974][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.727794][ T10] usb 5-1: Product: syz [ 152.729160][ T7895] FAULT_INJECTION: forcing a failure. [ 152.729160][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 152.736023][ T10] usb 5-1: Manufacturer: syz [ 152.760539][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.2.527 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 152.760566][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.760577][ T7895] Call Trace: [ 152.760582][ T7895] [ 152.760589][ T7895] dump_stack_lvl+0x16c/0x1f0 [ 152.760614][ T7895] should_fail_ex+0x512/0x640 [ 152.760636][ T7895] should_failslab+0xc2/0x120 [ 152.760657][ T7895] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 152.760675][ T7895] ? __mpol_dup+0x74/0x380 [ 152.760698][ T7895] __mpol_dup+0x74/0x380 [ 152.760719][ T7895] ? __pfx___mpol_dup+0x10/0x10 [ 152.760743][ T7895] mbind_range+0x2ad/0x570 [ 152.760766][ T7895] do_mbind+0x848/0xf30 [ 152.760791][ T7895] ? __pfx_do_mbind+0x10/0x10 [ 152.760813][ T7895] ? ksys_write+0x190/0x250 [ 152.760830][ T7895] ? lock_release+0x201/0x2f0 [ 152.760860][ T7895] ? __pfx_get_nodes+0x10/0x10 [ 152.760878][ T7895] ? __fget_files+0x20e/0x3c0 [ 152.760899][ T7895] kernel_mbind+0x1e3/0x1f0 [ 152.760922][ T7895] ? __pfx_kernel_mbind+0x10/0x10 [ 152.760947][ T7895] do_syscall_64+0xcd/0x4c0 [ 152.760967][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.760985][ T7895] RIP: 0033:0x7f3d0118ebe9 [ 152.760999][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.761016][ T7895] RSP: 002b:00007f3d01f75038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 152.761034][ T7895] RAX: ffffffffffffffda RBX: 00007f3d013b6180 RCX: 00007f3d0118ebe9 [ 152.761046][ T7895] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 152.761056][ T7895] RBP: 00007f3d01f75090 R08: 0000000000000008 R09: 0000000000000002 [ 152.761067][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.761076][ T7895] R13: 00007f3d013b6218 R14: 00007f3d013b6180 R15: 00007fff6d293ab8 [ 152.761093][ T7895] [ 152.951139][ T10] usb 5-1: SerialNumber: syz [ 153.140213][ T10] usb 5-1: config 0 descriptor?? [ 153.375376][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'. [ 153.384486][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'. [ 153.688381][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.522'. [ 156.011214][ T7930] Invalid logical block size (18) [ 156.881119][ T5923] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 157.058707][ T5923] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.100638][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.117772][ T10] uvcvideo 5-1:0.251: probe with driver uvcvideo failed with error -22 [ 157.133425][ T10] usb 5-1: USB disconnect, device number 15 [ 157.157362][ T5923] usb 2-1: config 0 descriptor?? [ 157.166074][ T30] audit: type=1400 audit(1755505803.144:951): avc: denied { setopt } for pid=7957 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.213052][ T5923] cp210x 2-1:0.0: cp210x converter detected [ 157.272971][ T7959] netlink: 148 bytes leftover after parsing attributes in process `syz.4.546'. [ 157.380897][ T30] audit: type=1400 audit(1755505803.144:952): avc: denied { read } for pid=7957 comm="syz.4.546" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.678305][ T30] audit: type=1400 audit(1755505803.144:953): avc: denied { open } for pid=7957 comm="syz.4.546" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.705921][ T7961] netlink: 52 bytes leftover after parsing attributes in process `syz.3.547'. [ 157.715206][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.722926][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.736052][ T5923] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 157.804410][ T30] audit: type=1400 audit(1755505803.144:954): avc: denied { ioctl } for pid=7957 comm="syz.4.546" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.858167][ T30] audit: type=1400 audit(1755505803.144:955): avc: denied { set_context_mgr } for pid=7957 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 157.946572][ T30] audit: type=1400 audit(1755505803.144:956): avc: denied { map } for pid=7957 comm="syz.4.546" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.971543][ T30] audit: type=1400 audit(1755505803.144:957): avc: denied { call } for pid=7957 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.299734][ T30] audit: type=1400 audit(1755505803.144:958): avc: denied { transfer } for pid=7957 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.321051][ T30] audit: type=1400 audit(1755505803.684:959): avc: denied { ioctl } for pid=7960 comm="syz.3.547" path="socket:[16393]" dev="sockfs" ino=16393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 158.347951][ T5923] usb 2-1: cp210x converter now attached to ttyUSB0 [ 158.489786][ T7945] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 158.512269][ T10] usb 2-1: USB disconnect, device number 15 [ 158.518883][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.535756][ T10] cp210x 2-1:0.0: device disconnected [ 158.586166][ T30] audit: type=1400 audit(1755505804.565:960): avc: denied { ioctl } for pid=7977 comm="syz.0.552" path="socket:[16417]" dev="sockfs" ino=16417 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.617781][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 158.665722][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.554'. [ 158.680552][ T5923] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 158.703175][ T7985] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 158.714527][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.723487][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.750275][ T24] usb 5-1: device descriptor read/64, error -71 [ 158.788596][ T7986] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[7986] [ 158.797582][ T7986] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 158.832525][ T5923] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 158.840819][ T5923] usb 4-1: config 0 has no interface number 0 [ 158.849493][ T5923] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 158.858634][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.867453][ T5923] usb 4-1: Product: syz [ 158.871721][ T5923] usb 4-1: Manufacturer: syz [ 158.876350][ T5923] usb 4-1: SerialNumber: syz [ 158.884238][ T5923] usb 4-1: config 0 descriptor?? [ 158.999980][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.148646][ T24] usb 5-1: device descriptor read/64, error -71 [ 159.177639][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 159.205466][ T7993] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 159.300699][ T7993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.300830][ T24] usb usb5-port1: attempt power cycle [ 159.825408][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 159.825444][ T6057] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.879628][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 159.900848][ T24] usb 5-1: device descriptor read/8, error -71 [ 159.919396][ T5923] uvcvideo 4-1:0.251: probe with driver uvcvideo failed with error -22 [ 159.932092][ T5923] usb 4-1: USB disconnect, device number 17 [ 160.011318][ T6057] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 160.020173][ T6057] usb 3-1: config 0 has no interface number 0 [ 160.021371][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 160.039533][ T10] usb 2-1: config 0 has no interface number 0 [ 160.041568][ T6057] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 160.047262][ T10] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 160.054983][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.071951][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.390326][ T10] usb 2-1: Product: syz [ 160.396532][ T10] usb 2-1: Manufacturer: syz [ 160.401166][ T10] usb 2-1: SerialNumber: syz [ 160.405788][ T6057] usb 3-1: Product: syz [ 160.411036][ T6057] usb 3-1: Manufacturer: syz [ 160.411625][ T10] usb 2-1: config 0 descriptor?? [ 160.415737][ T6057] usb 3-1: SerialNumber: syz [ 160.426595][ T6057] usb 3-1: config 0 descriptor?? [ 160.449346][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.470310][ T24] usb 5-1: device descriptor read/8, error -71 [ 160.589406][ T24] usb usb5-port1: unable to enumerate USB device [ 160.748908][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 160.762618][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 160.950353][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 161.056719][ T8024] FAULT_INJECTION: forcing a failure. [ 161.056719][ T8024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.070377][ T8021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 161.079471][ T8024] CPU: 0 UID: 0 PID: 8024 Comm: syz.4.568 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 161.079497][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.079507][ T8024] Call Trace: [ 161.079512][ T8024] [ 161.079518][ T8024] dump_stack_lvl+0x16c/0x1f0 [ 161.079539][ T8024] should_fail_ex+0x512/0x640 [ 161.079563][ T8024] _copy_from_user+0x2e/0xd0 [ 161.079584][ T8024] copy_msghdr_from_user+0x98/0x160 [ 161.079601][ T8024] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.079617][ T8024] ? __pfx_kstrtouint+0x10/0x10 [ 161.079635][ T8024] ? kstrtouint_from_user+0x13c/0x1d0 [ 161.079650][ T8024] ___sys_sendmsg+0xfe/0x1d0 [ 161.079666][ T8024] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.079686][ T8024] ? rcu_is_watching+0x12/0xc0 [ 161.079715][ T8024] __sys_sendmsg+0x16d/0x220 [ 161.079730][ T8024] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.079760][ T8024] do_syscall_64+0xcd/0x4c0 [ 161.079779][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.079796][ T8024] RIP: 0033:0x7f1b5e98ebe9 [ 161.079808][ T8024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.079824][ T8024] RSP: 002b:00007f1b5f8c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.079840][ T8024] RAX: ffffffffffffffda RBX: 00007f1b5ebb5fa0 RCX: 00007f1b5e98ebe9 [ 161.079851][ T8024] RDX: 0000000000004874 RSI: 0000200000000440 RDI: 0000000000000003 [ 161.079861][ T8024] RBP: 00007f1b5f8c4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.079871][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.079880][ T8024] R13: 00007f1b5ebb6038 R14: 00007f1b5ebb5fa0 R15: 00007fffdec19998 [ 161.079897][ T8024] [ 161.414705][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8039 comm=syz.3.569 [ 162.474426][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 162.474440][ T30] audit: type=1400 audit(1755505808.457:963): avc: denied { getopt } for pid=8049 comm="syz.4.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.564279][ T8054] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 162.564317][ T8054] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 162.571505][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 163.008290][ T5849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 163.100417][ T10] uvcvideo 2-1:0.251: probe with driver uvcvideo failed with error -22 [ 163.104397][ T10] usb 2-1: USB disconnect, device number 16 [ 163.141591][ T6057] uvcvideo 3-1:0.251: probe with driver uvcvideo failed with error -22 [ 163.147943][ T5849] usb 1-1: device descriptor read/64, error -71 [ 163.168876][ T6057] usb 3-1: USB disconnect, device number 9 [ 163.721537][ T5849] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.727861][ T30] audit: type=1400 audit(1755505809.717:964): avc: denied { relabelfrom } for pid=8062 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.728237][ T30] audit: type=1400 audit(1755505809.717:965): avc: denied { relabelto } for pid=8062 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.728269][ T30] audit: type=1400 audit(1755505809.717:966): avc: denied { attach_queue } for pid=8062 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.989654][ T5849] usb 1-1: device descriptor read/64, error -71 [ 164.100836][ T5849] usb usb1-port1: attempt power cycle [ 164.235834][ T8087] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 164.242362][ T8087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.251054][ T8087] vhci_hcd vhci_hcd.0: Device attached [ 164.437532][ T43] vhci_hcd: vhci_device speed not set [ 164.482387][ T8088] vhci_hcd: connection closed [ 164.482564][ T7310] vhci_hcd: stop threads [ 164.497374][ T5849] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.498015][ T43] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 164.517422][ T7310] vhci_hcd: release socket [ 164.537622][ T7310] vhci_hcd: disconnect device [ 164.552493][ T5849] usb 1-1: device descriptor read/8, error -71 [ 164.718702][ T30] audit: type=1400 audit(1755505810.708:967): avc: denied { getopt } for pid=8100 comm="syz.1.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.744831][ T8103] netlink: 'syz.1.590': attribute type 9 has an invalid length. [ 164.890755][ T5849] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.985120][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 164.996479][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 165.082762][ T5849] usb 1-1: device descriptor read/8, error -71 [ 165.091590][ T30] audit: type=1400 audit(1755505811.068:968): avc: denied { mount } for pid=8105 comm="syz.4.591" name="/" dev="ramfs" ino=16152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.281884][ T5849] usb usb1-port1: unable to enumerate USB device [ 165.324296][ T30] audit: type=1400 audit(1755505811.298:969): avc: denied { ioctl } for pid=8105 comm="syz.4.591" path="socket:[16164]" dev="sockfs" ino=16164 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.080712][ T30] audit: type=1400 audit(1755505812.048:970): avc: denied { read } for pid=8122 comm="syz.2.596" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 166.161013][ T8125] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 166.168770][ T30] audit: type=1400 audit(1755505812.048:971): avc: denied { open } for pid=8122 comm="syz.2.596" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 166.194788][ T30] audit: type=1400 audit(1755505812.048:972): avc: denied { map } for pid=8122 comm="syz.2.596" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 166.244309][ T8125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.506457][ T5923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.676377][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 166.731157][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 166.760241][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 166.913951][ T5923] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 166.933187][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.036641][ T5923] usb 3-1: Product: syz [ 167.046384][ T5923] usb 3-1: Manufacturer: syz [ 167.062730][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 167.071624][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.602'. [ 167.114482][ T5923] usb 3-1: SerialNumber: syz [ 167.136606][ T5923] usb 3-1: config 0 descriptor?? [ 167.147921][ T8131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.236688][ T5923] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 167.366077][ T5849] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 167.427968][ T5923] usb 3-1: USB disconnect, device number 10 [ 167.434013][ T3913] usb 3-1: Failed to submit usb control message: -71 [ 167.441837][ T3913] usb 3-1: unable to send the bmi data to the device: -71 [ 167.449405][ T3913] usb 3-1: unable to get target info from device [ 167.456149][ T3913] usb 3-1: could not get target info (-71) [ 167.462025][ T3913] usb 3-1: could not probe fw (-71) [ 167.516881][ T5849] usb 2-1: device descriptor read/64, error -71 [ 167.765619][ T5849] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.821115][ T30] audit: type=1400 audit(1755505813.799:973): avc: denied { setattr } for pid=8167 comm="syz.3.611" name="XDP" dev="sockfs" ino=16887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.925947][ T5849] usb 2-1: device descriptor read/64, error -71 [ 168.045592][ T5849] usb usb2-port1: attempt power cycle [ 168.085469][ T30] audit: type=1400 audit(1755505813.979:974): avc: denied { ioctl } for pid=8167 comm="syz.3.611" path="socket:[16887]" dev="sockfs" ino=16887 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.485346][ T5849] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 168.497878][ T8183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.614'. [ 168.541414][ T5849] usb 2-1: device descriptor read/8, error -71 [ 168.587381][ T6057] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 168.784540][ T6057] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 168.796465][ T6057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.804770][ T6057] usb 3-1: Product: syz [ 168.815856][ T6057] usb 3-1: Manufacturer: syz [ 168.820534][ T6057] usb 3-1: SerialNumber: syz [ 168.826629][ T6057] usb 3-1: config 0 descriptor?? [ 168.833619][ T6057] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 168.845700][ T6057] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 168.858755][ T6057] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 168.906316][ T5849] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 168.935965][ T5849] usb 2-1: device descriptor read/8, error -71 [ 169.036902][ T6057] usb 3-1: USB disconnect, device number 11 [ 169.045012][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 169.052780][ T5849] usb usb2-port1: unable to enumerate USB device [ 169.218380][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 169.229523][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.272389][ T10] usb 5-1: config 0 descriptor?? [ 169.369883][ T8200] hub 8-0:1.0: USB hub found [ 169.384916][ T8200] hub 8-0:1.0: 1 port detected [ 169.645029][ T43] vhci_hcd: vhci_device speed not set [ 170.189335][ T8210] netlink: 'syz.2.623': attribute type 20 has an invalid length. [ 170.232840][ T8208] ALSA: mixer_oss: invalid OSS volume '' [ 170.238572][ T8208] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 170.247525][ T8208] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 171.025883][ T8208] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 171.034657][ T8208] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 171.173816][ T30] audit: type=1400 audit(1755505817.141:975): avc: denied { append } for pid=8226 comm="syz.1.629" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.271299][ T30] audit: type=1400 audit(1755505817.181:976): avc: denied { listen } for pid=8226 comm="syz.1.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 171.291144][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.488251][ T8237] tipc: Started in network mode [ 171.494804][ T8237] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 171.507150][ T8237] tipc: Enabled bearer , priority 0 [ 171.635367][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.635'. [ 171.725699][ T8248] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 172.033002][ T8248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.334025][ T6057] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 172.348359][ T30] audit: type=1400 audit(1755505818.272:977): avc: denied { rename } for pid=8255 comm="syz.0.639" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 172.434473][ T30] audit: type=1400 audit(1755505818.412:978): avc: denied { name_bind } for pid=8255 comm="syz.0.639" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 172.455419][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.526227][ T30] audit: type=1400 audit(1755505818.512:979): avc: denied { write } for pid=8265 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 172.556115][ T6057] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 172.564586][ T6057] usb 4-1: config 0 has no interface number 0 [ 172.571311][ T6057] usb 4-1: config 0 interface 252 altsetting 207 bulk endpoint 0x2 has invalid maxpacket 16 [ 172.582957][ T6057] usb 4-1: config 0 interface 252 altsetting 207 endpoint 0x5 has an invalid bInterval 181, changing to 11 [ 172.594748][ T6057] usb 4-1: config 0 interface 252 has no altsetting 0 [ 172.601746][ T6057] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ea.ea [ 172.612032][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.630344][ T5923] tipc: Node number set to 11578026 [ 172.652279][ T6057] usb 4-1: config 0 descriptor?? [ 172.659957][ T8259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.754552][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 172.902654][ T30] audit: type=1400 audit(1755505818.882:980): avc: denied { create } for pid=8258 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.922857][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.935494][ T8259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.641'. [ 173.070923][ T30] audit: type=1400 audit(1755505818.922:981): avc: denied { write } for pid=8258 comm="syz.3.641" path="socket:[17513]" dev="sockfs" ino=17513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 173.080054][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.108039][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.125962][ T30] audit: type=1400 audit(1755505819.112:982): avc: denied { ioctl } for pid=8258 comm="syz.3.641" path="socket:[17513]" dev="sockfs" ino=17513 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 173.171421][ T8286] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 173.180801][ T6410] Bluetooth: (null): Invalid header checksum [ 173.187370][ T8285] Invalid logical block size (18) [ 173.215323][ T6057] usb 4-1: string descriptor 0 read error: -71 [ 173.224202][ T6057] kvaser_usb 4-1:0.252: error -ENODEV: Cannot get usb endpoint(s) [ 173.240136][ T30] audit: type=1400 audit(1755505819.222:983): avc: denied { read write } for pid=8284 comm="syz.0.649" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.268928][ T6057] usb 4-1: USB disconnect, device number 18 [ 173.277387][ T6410] Bluetooth: (null): Invalid header checksum [ 173.281403][ T30] audit: type=1400 audit(1755505819.222:984): avc: denied { open } for pid=8284 comm="syz.0.649" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.306612][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.383226][ T6410] Bluetooth: (null): Invalid header checksum [ 173.399206][ T30] audit: type=1400 audit(1755505819.222:985): avc: denied { read } for pid=8284 comm="syz.0.649" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 173.535580][ T6410] Bluetooth: (null): Invalid header checksum [ 173.541672][ T30] audit: type=1400 audit(1755505819.222:986): avc: denied { open } for pid=8284 comm="syz.0.649" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 173.594207][ T30] audit: type=1400 audit(1755505819.222:987): avc: denied { ioctl } for pid=8284 comm="syz.0.649" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 173.622959][ T30] audit: type=1400 audit(1755505819.222:988): avc: denied { ioctl } for pid=8284 comm="syz.0.649" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.623839][ T6410] Bluetooth: (null): Invalid header checksum [ 173.890105][ T6410] Bluetooth: (null): Invalid header checksum [ 173.916901][ T6410] Bluetooth: (null): Invalid header checksum [ 173.953769][ T30] audit: type=1400 audit(1755505819.362:989): avc: denied { create } for pid=8276 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.972984][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.266544][ T8307] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 174.343831][ T8307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.618272][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 176.628079][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 176.661720][ T8340] Invalid logical block size (18) [ 177.090978][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.305571][ T2148] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.510539][ T8389] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.522317][ T30] audit: type=1400 audit(1755505825.505:990): avc: denied { write } for pid=8383 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.558802][ T30] audit: type=1400 audit(1755505825.545:991): avc: denied { connect } for pid=8393 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.687005][ T2148] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 179.706199][ T2148] usb 3-1: config 0 has no interface number 0 [ 179.747988][ T2148] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 179.803922][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.970880][ T2148] usb 3-1: Product: syz [ 180.001056][ T2148] usb 3-1: Manufacturer: syz [ 180.027389][ T2148] usb 3-1: SerialNumber: syz [ 180.293799][ T2148] usb 3-1: config 0 descriptor?? [ 180.951716][ T8411] batadv_slave_0: left promiscuous mode [ 180.977603][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.677'. [ 181.124573][ T2148] uvcvideo 3-1:0.251: probe with driver uvcvideo failed with error -22 [ 182.194983][ T2148] usb 3-1: USB disconnect, device number 12 [ 182.243298][ T30] audit: type=1400 audit(1755505828.237:992): avc: denied { sqpoll } for pid=8393 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.274889][ T30] audit: type=1400 audit(1755505830.137:993): avc: denied { getopt } for pid=8456 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.393311][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 184.417461][ T6057] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.588904][ T6057] usb 1-1: Using ep0 maxpacket: 8 [ 184.605691][ T6057] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 184.619632][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.620765][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'. [ 184.640584][ T6057] usb 1-1: config 0 descriptor?? [ 184.688243][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 184.757092][ T2148] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.811594][ T8477] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 184.905044][ T6057] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.916424][ T6057] asix 1-1:0.0: probe with driver asix failed with error -71 [ 184.925866][ T6057] usb 1-1: USB disconnect, device number 10 [ 184.981501][ T8477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.050867][ T2148] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 185.067622][ T2148] usb 3-1: config 0 has no interface number 0 [ 185.075223][ T2148] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 185.097080][ T2148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.119466][ T2148] usb 3-1: Product: syz [ 185.220187][ T2148] usb 3-1: Manufacturer: syz [ 185.242429][ T2148] usb 3-1: SerialNumber: syz [ 185.282649][ T2148] usb 3-1: config 0 descriptor?? [ 185.727879][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'. [ 185.916416][ T2148] uvcvideo 3-1:0.251: probe with driver uvcvideo failed with error -22 [ 186.101439][ T2148] usb 3-1: USB disconnect, device number 13 [ 186.369119][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.711'. [ 186.391014][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 186.406159][ T8506] bpq0: entered promiscuous mode [ 186.430183][ T8515] Invalid logical block size (18) [ 186.472299][ T8517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.716'. [ 186.929329][ T8537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.990441][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 186.996625][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 187.135712][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 187.348577][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 187.375869][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 187.455079][ T30] audit: type=1400 audit(1755505833.379:994): avc: denied { write } for pid=8545 comm="syz.0.724" path="socket:[18112]" dev="sockfs" ino=18112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.786963][ T8537] ceph: No mds server is up or the cluster is laggy [ 187.923780][ T8563] Invalid logical block size (18) [ 187.985569][ T5923] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 188.185492][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 188.191991][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.203131][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.212925][ T5923] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 188.222133][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.305375][ T5849] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 188.491798][ T5923] usb 2-1: config 0 descriptor?? [ 188.637440][ T5849] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 188.646659][ T5849] usb 3-1: config 0 has no interface number 0 [ 188.660129][ T5849] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 188.669511][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.678852][ T5849] usb 3-1: Product: syz [ 188.683030][ T5849] usb 3-1: Manufacturer: syz [ 188.729107][ T5849] usb 3-1: SerialNumber: syz [ 188.734571][ T5849] usb 3-1: config 0 descriptor?? [ 189.247194][ T5849] uvcvideo 3-1:0.251: probe with driver uvcvideo failed with error -22 [ 189.273334][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 189.303306][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.742555][ T5849] usb 3-1: USB disconnect, device number 14 [ 189.973824][ T5923] usb 2-1: USB disconnect, device number 21 [ 190.010156][ T8599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.741'. [ 190.292394][ T8604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8604 comm=syz.0.743 [ 190.611084][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.742'. [ 190.623327][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.742'. [ 190.995510][ T8622] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 191.006010][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.013342][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.130211][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.137330][ T8622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.144639][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.151663][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.393161][ T8622] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 191.615833][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 191.631416][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 192.415304][ T8695] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 192.557829][ T8701] Invalid logical block size (18) [ 192.560515][ T8695] [U] J"—e:ÀÆ" [ 192.852058][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 192.883132][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 193.039493][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 193.530420][ T9] usb 5-1: config 0 has no interface number 0 [ 193.747090][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.753498][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.177532][ T9] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 194.195928][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.215125][ T9] usb 5-1: Product: syz [ 194.231984][ T9] usb 5-1: Manufacturer: syz [ 194.254243][ T9] usb 5-1: SerialNumber: syz [ 194.277117][ T9] usb 5-1: config 0 descriptor?? [ 195.092700][ T9] uvcvideo 5-1:0.251: probe with driver uvcvideo failed with error -22 [ 195.593408][ T30] audit: type=1400 audit(1755505841.103:995): avc: denied { append } for pid=8712 comm="syz.1.760" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 195.708054][ T9] usb 5-1: USB disconnect, device number 21 [ 195.771643][ T30] audit: type=1400 audit(1755505841.533:996): avc: denied { create } for pid=8727 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.859420][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 196.203676][ T30] audit: type=1400 audit(1755505841.643:997): avc: denied { bind } for pid=8727 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.608780][ T30] audit: type=1800 audit(1755505842.554:998): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.768" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 198.021964][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.776'. [ 198.770084][ T5909] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.704486][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.792672][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.933004][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 199.976319][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.990080][ T5909] usb 2-1: config 0 descriptor?? [ 200.107656][ T5909] usb 2-1: can't set config #0, error -71 [ 200.115344][ T5909] usb 2-1: USB disconnect, device number 22 [ 200.259442][ T6057] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.779360][ T6057] usb 5-1: Using ep0 maxpacket: 8 [ 200.789495][ T6057] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.798098][ T6057] usb 5-1: config 0 has no interface number 0 [ 200.820848][ T6057] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.833017][ T6057] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.956486][ T5909] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 201.072143][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 201.094558][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 201.103617][ T30] audit: type=1400 audit(1755505846.886:999): avc: denied { write } for pid=8835 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.132738][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.136592][ T8844] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 201.151074][ T6057] usb 5-1: config 0 descriptor?? [ 201.183910][ T6057] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 201.187416][ T8844] bond2: entered promiscuous mode [ 201.203375][ T8844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.229736][ T30] audit: type=1400 audit(1755505847.216:1000): avc: denied { bind } for pid=8843 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.330270][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.341051][ T5909] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.350983][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.366241][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.375501][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.388379][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 201.398635][ T6057] usb 5-1: USB disconnect, device number 22 [ 201.409574][ T5909] usb 2-1: Product: syz [ 201.416752][ T5909] usb 2-1: Manufacturer: syz [ 201.423337][ T5909] usb 2-1: SerialNumber: syz [ 201.437542][ T5909] hub 2-1:1.0: bad descriptor, ignoring hub [ 201.444490][ T5909] hub 2-1:1.0: probe with driver hub failed with error -5 [ 201.488816][ T2148] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 201.643145][ T5909] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 201.669816][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.682705][ T2148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.695277][ T2148] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.705317][ T2148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.716556][ T2148] usb 3-1: config 0 descriptor?? [ 201.726984][ T2148] hub 3-1:0.0: USB hub found [ 201.762354][ T30] audit: type=1400 audit(1755505847.766:1001): avc: denied { write } for pid=8856 comm="syz.3.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.039812][ T2148] hub 3-1:0.0: 2 ports detected [ 202.079834][ T30] audit: type=1400 audit(1755505848.076:1002): avc: denied { write } for pid=8853 comm="syz.0.798" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.115095][ T8863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.800'. [ 202.148695][ T30] audit: type=1400 audit(1755505848.136:1003): avc: denied { ioctl } for pid=8862 comm="syz.3.800" path="socket:[19686]" dev="sockfs" ino=19686 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.563947][ T2148] usb 3-1: USB disconnect, device number 15 [ 202.635068][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 203.338364][ T2148] usb 2-1: USB disconnect, device number 23 [ 204.258914][ T2148] usblp0: removed [ 204.432629][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 204.483344][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 204.961114][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 205.295340][ T8922] warning: `syz.2.813' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.423267][ T8916] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 205.657551][ T30] audit: type=1400 audit(1755505851.658:1004): avc: denied { setopt } for pid=8927 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 205.755005][ T30] audit: type=1400 audit(1755505851.748:1005): avc: denied { bind } for pid=8930 comm="syz.0.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.180604][ T30] audit: type=1400 audit(1755505852.168:1006): avc: denied { ioctl } for pid=8931 comm="syz.4.819" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.389705][ T30] audit: type=1400 audit(1755505852.379:1007): avc: denied { shutdown } for pid=8949 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.463998][ T8955] netlink: 'syz.4.826': attribute type 1 has an invalid length. [ 206.488289][ T30] audit: type=1400 audit(1755505852.389:1008): avc: denied { connect } for pid=8947 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.518990][ T8955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.764242][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 207.790586][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 207.811630][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 208.535958][ T9002] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 208.772485][ T9002] syz.1.840 (9002) used greatest stack depth: 17120 bytes left [ 208.939626][ T30] audit: type=1400 audit(1755505854.149:1009): avc: denied { firmware_load } for pid=8998 comm="syz.1.840" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 209.221824][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 209.460026][ T9017] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 209.478655][ T30] audit: type=1400 audit(1755505855.480:1010): avc: denied { bind } for pid=9005 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.483701][ T9017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.523956][ T9019] syz.1.842 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.684771][ T5909] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 209.896098][ T5909] usb 4-1: device descriptor read/64, error -71 [ 209.943788][ T30] audit: type=1400 audit(1755505855.940:1011): avc: denied { setopt } for pid=9027 comm="syz.0.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.064498][ T6057] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.142545][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 210.204721][ T5909] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 210.284662][ T6057] usb 5-1: Using ep0 maxpacket: 32 [ 210.320807][ T6057] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.331308][ T6057] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.342421][ T5909] usb 4-1: device descriptor read/64, error -71 [ 210.348794][ T6057] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.358818][ T6057] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.669233][ T5909] usb usb4-port1: attempt power cycle [ 210.674768][ T6057] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.681370][ T6057] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 210.691182][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.705592][ T6057] usb 5-1: config 0 descriptor?? [ 211.403864][ T5909] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 211.424356][ T5909] usb 4-1: device descriptor read/8, error -71 [ 211.556600][ T6057] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 211.557562][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.575312][ T6057] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 211.583442][ T6057] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 211.591439][ T6057] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 211.600864][ T6057] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 211.601387][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.619723][ T6057] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 211.661705][ T6057] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 211.707451][ C1] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 211.718987][ T5909] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 211.732857][ T6057] usb 5-1: USB disconnect, device number 23 [ 211.754590][ T5909] usb 4-1: device descriptor read/8, error -71 [ 211.759952][ T9053] fido_id[9053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 212.284398][ T5909] usb usb4-port1: unable to enumerate USB device [ 212.564847][ T30] audit: type=1400 audit(1755505858.562:1012): avc: denied { read } for pid=9073 comm="syz.2.863" path="socket:[20090]" dev="sockfs" ino=20090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.684651][ T9083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9083 comm=syz.4.862 [ 212.746875][ T30] audit: type=1400 audit(1755505858.752:1013): avc: denied { mount } for pid=9088 comm="syz.2.867" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.047107][ T30] audit: type=1400 audit(1755505859.042:1014): avc: denied { read } for pid=9075 comm="syz.4.862" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.047620][ T30] audit: type=1400 audit(1755505859.042:1015): avc: denied { open } for pid=9075 comm="syz.4.862" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.050212][ T30] audit: type=1400 audit(1755505859.052:1016): avc: denied { ioctl } for pid=9075 comm="syz.4.862" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.113060][ T6057] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 213.166472][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.288622][ T6057] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 213.315751][ T6057] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.352834][ T6057] usb 4-1: config 0 has no interface number 0 [ 213.369118][ T6057] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 213.422356][ T9099] tipc: Enabled bearer , priority 0 [ 213.474608][ T6057] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 213.485616][ T9100] syzkaller0: entered promiscuous mode [ 213.491088][ T9100] syzkaller0: entered allmulticast mode [ 213.496877][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.528507][ T6057] usb 4-1: config 0 descriptor?? [ 213.538048][ T9099] tipc: Resetting bearer [ 213.579595][ T9097] tipc: Resetting bearer [ 213.642938][ T6057] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 213.666454][ T9097] tipc: Disabling bearer [ 213.797011][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 213.807694][ T8658] usb 4-1: Failed to submit usb control message: -71 [ 213.807830][ T24] usb 4-1: USB disconnect, device number 23 [ 213.815351][ T8658] usb 4-1: unable to send the bmi data to the device: -71 [ 213.827579][ T8658] usb 4-1: unable to get target info from device [ 213.842531][ T8658] usb 4-1: could not get target info (-71) [ 213.848378][ T8658] usb 4-1: could not probe fw (-71) [ 213.948592][ T6057] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.113859][ T6057] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.129746][ T6057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.141431][ T6057] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.152793][ T6057] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.170621][ T6057] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.180445][ T6057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.213332][ T6057] usb 5-1: config 0 descriptor?? [ 214.747921][ T9136] overlayfs: missing 'workdir' [ 214.816083][ T9142] netlink: 44 bytes leftover after parsing attributes in process `syz.3.885'. [ 215.069716][ T9144] netlink: 144 bytes leftover after parsing attributes in process `syz.0.884'. [ 215.138020][ T9136] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 215.302536][ T30] audit: type=1400 audit(1755505861.313:1017): avc: denied { relabelto } for pid=9114 comm="syz.4.876" name="file1" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 215.329044][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.480915][ T9157] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 215.489126][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.496288][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.521227][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 215.531722][ T30] audit: type=1400 audit(1755505861.343:1018): avc: denied { associate } for pid=9114 comm="syz.4.876" name="file1" dev="tmpfs" ino=882 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 215.551852][ T9157] bridge_slave_1: left allmulticast mode [ 215.617120][ T9157] bridge_slave_1: left promiscuous mode [ 216.232346][ T6057] usbhid 5-1:0.0: can't add hid device: -71 [ 216.275347][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.312125][ T9157] bridge_slave_0: left allmulticast mode [ 216.319523][ T9157] bridge_slave_0: left promiscuous mode [ 216.341391][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.391144][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.894'. [ 216.448099][ T9157] bond0: (slave bridge0): Releasing backup interface [ 216.549226][ T6057] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.566362][ T6057] usb 5-1: USB disconnect, device number 24 [ 216.587097][ T30] audit: type=1400 audit(1755505862.594:1019): avc: denied { ioctl } for pid=9173 comm="syz.3.895" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.611555][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.634697][ T30] audit: type=1400 audit(1755505862.594:1020): avc: denied { read append } for pid=9173 comm="syz.3.895" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 216.663544][ T30] audit: type=1400 audit(1755505862.594:1021): avc: denied { open } for pid=9173 comm="syz.3.895" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 216.687422][ T2148] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.813846][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 217.166577][ T2148] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 217.185917][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.207149][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.238826][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.263747][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.346002][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.355294][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.366769][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.376923][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.384927][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.394493][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.425022][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.448201][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.460129][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.469899][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.482572][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.492499][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 217.500603][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.509939][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.528825][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.571331][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.604399][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.640781][ T10] usb 2-1: device descriptor read/64, error -71 [ 217.649413][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.665429][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.704985][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.734153][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.793197][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.802211][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.816819][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.827349][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.837391][ T2148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.865851][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.880568][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 217.910233][ T2148] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 217.942792][ T2148] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.005196][ T2148] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.014378][ T10] usb 2-1: device descriptor read/64, error -71 [ 218.022373][ T2148] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.048572][ T2148] usb 1-1: Product: syz [ 218.071939][ T2148] usb 1-1: Manufacturer: syz [ 218.094336][ T2148] usb 1-1: SerialNumber: syz [ 218.116724][ T2148] usb 1-1: config 0 descriptor?? [ 218.140675][ T10] usb usb2-port1: attempt power cycle [ 218.154682][ T2148] yurex 1-1:0.0: Could not submitting URB [ 218.186901][ T2148] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 218.500361][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 218.658425][ T10] usb 2-1: device descriptor read/8, error -71 [ 218.920201][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 219.195595][ T10] usb 2-1: device descriptor read/8, error -71 [ 219.235127][ T9219] netlink: 9 bytes leftover after parsing attributes in process `syz.2.908'. [ 219.244912][ T9219] gretap0: entered promiscuous mode [ 219.265379][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 219.265389][ T30] audit: type=1400 audit(1755505865.275:1024): avc: denied { write } for pid=9215 comm="syz.2.908" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.311093][ T9219] netlink: 5 bytes leftover after parsing attributes in process `syz.2.908'. [ 219.334580][ T10] usb usb2-port1: unable to enumerate USB device [ 219.549964][ T9219] 0ªî{X¹¦: renamed from gretap0 [ 219.556355][ T9219] 0ªî{X¹¦: left promiscuous mode [ 219.566408][ T9219] 0ªî{X¹¦: entered allmulticast mode [ 219.575120][ T30] audit: type=1400 audit(1755505865.585:1025): avc: denied { connect } for pid=9225 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.599037][ T9219] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 219.615312][ T30] audit: type=1400 audit(1755505865.585:1026): avc: denied { read } for pid=9225 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.966706][ T9240] Invalid logical block size (18) [ 220.059794][ T2148] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.589317][ T2148] usb 3-1: Using ep0 maxpacket: 8 [ 220.596796][ T2148] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.605292][ T2148] usb 3-1: config 4 interface 0 has no altsetting 0 [ 220.614285][ T2148] usb 3-1: string descriptor 0 read error: -22 [ 220.624193][ T2148] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 220.682568][ T2148] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 220.715615][ T2148] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 220.814680][ T6057] usb 1-1: USB disconnect, device number 11 [ 220.819503][ T2148] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.330292][ T30] audit: type=1400 audit(1755505867.246:1027): avc: denied { getopt } for pid=9236 comm="syz.2.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.389684][ T2148] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 221.397472][ T2148] usb 3-1: media controller created [ 221.428379][ T2148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.622466][ T9286] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.925'. [ 221.986844][ T9286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.394067][ T9294] sch_fq: defrate 0 ignored. [ 222.451014][ T30] audit: type=1400 audit(1755505868.417:1028): avc: denied { ioctl } for pid=9293 comm="syz.4.928" path="socket:[20480]" dev="sockfs" ino=20480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.482044][ T9295] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 222.499195][ T2148] zl10353_read_register: readreg error (reg=127, ret==0) [ 222.547385][ T30] audit: type=1400 audit(1755505868.497:1029): avc: denied { nlmsg_read } for pid=9293 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.644545][ T2148] usb 3-1: USB disconnect, device number 16 [ 224.179053][ T30] audit: type=1400 audit(1755505870.197:1030): avc: denied { listen } for pid=9321 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.281455][ T30] audit: type=1400 audit(1755505870.298:1031): avc: denied { bind } for pid=9326 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.365341][ T30] audit: type=1400 audit(1755505870.298:1032): avc: denied { name_bind } for pid=9326 comm="syz.4.937" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 224.419567][ T30] audit: type=1400 audit(1755505870.298:1033): avc: denied { node_bind } for pid=9326 comm="syz.4.937" saddr=fe88::5 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 224.427306][ T6057] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 224.687141][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.695808][ T6057] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.213396][ T6057] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 225.273445][ T6057] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.283033][ T6057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.297015][ T6057] usb 2-1: SerialNumber: syz [ 225.304546][ T6057] cdc_ether 2-1:1.0: skipping garbage [ 225.310445][ T6057] usb 2-1: bad CDC descriptors [ 225.359240][ T5923] usb 3-1: no configurations [ 225.363959][ T5923] usb 3-1: can't read configurations, error -22 [ 225.506777][ T5923] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 225.618437][ T5909] usb 2-1: USB disconnect, device number 28 [ 225.748806][ T5923] usb 3-1: no configurations [ 225.786908][ T5923] usb 3-1: can't read configurations, error -22 [ 225.807069][ T5923] usb usb3-port1: attempt power cycle [ 226.375023][ T9376] netlink: 'syz.1.951': attribute type 4 has an invalid length. [ 226.386061][ T30] audit: type=1400 audit(1755505872.399:1034): avc: denied { nlmsg_write } for pid=9373 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 226.464495][ T9374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.950'. [ 226.476003][ T9374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.950'. [ 226.486661][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 226.718484][ T5923] usb 3-1: no configurations [ 226.725028][ T5923] usb 3-1: can't read configurations, error -22 [ 226.856112][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.897756][ T5923] usb 3-1: no configurations [ 226.949070][ T5923] usb 3-1: can't read configurations, error -22 [ 226.955657][ T5923] usb usb3-port1: unable to enumerate USB device [ 227.302722][ T5849] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 227.466820][ T5849] usb 4-1: Using ep0 maxpacket: 8 [ 227.478414][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 227.496634][ T5849] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 227.504794][ T5849] usb 4-1: Product: syz [ 227.509434][ T5849] usb 4-1: Manufacturer: syz [ 227.514062][ T5849] usb 4-1: SerialNumber: syz [ 227.520233][ T5849] usb 4-1: config 0 descriptor?? [ 227.530696][ T5849] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 227.787704][ T30] audit: type=1400 audit(1755505873.799:1035): avc: denied { setopt } for pid=9403 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.818571][ T30] audit: type=1400 audit(1755505873.819:1036): avc: denied { write } for pid=9403 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.085727][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 228.171541][ T5849] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 228.181687][ T30] audit: type=1400 audit(1755505874.189:1037): avc: denied { read } for pid=5202 comm="acpid" name="event4" dev="devtmpfs" ino=3132 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.211387][ T30] audit: type=1400 audit(1755505874.189:1038): avc: denied { open } for pid=5202 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3132 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.239200][ T30] audit: type=1400 audit(1755505874.189:1039): avc: denied { ioctl } for pid=5202 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3132 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.242172][ T10] usb 5-1: device descriptor read/64, error -71 [ 228.391214][ T6057] usb 4-1: USB disconnect, device number 24 [ 229.004979][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 229.031136][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 229.214848][ T10] usb 5-1: device descriptor read/64, error -71 [ 229.252661][ T9419] netlink: 52 bytes leftover after parsing attributes in process `syz.1.966'. [ 229.314179][ T30] audit: type=1400 audit(1755505875.320:1040): avc: denied { read } for pid=9421 comm="syz.1.969" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 229.354887][ T10] usb usb5-port1: attempt power cycle [ 229.734888][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 229.845865][ T10] usb 5-1: device descriptor read/8, error -71 [ 230.094589][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 230.265614][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 230.324723][ T10] usb 5-1: device descriptor read/8, error -71 [ 230.364288][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.457975][ T10] usb usb5-port1: unable to enumerate USB device [ 230.544261][ T9] usb 4-1: device descriptor read/64, error -71 [ 230.856632][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.978'. [ 230.866357][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 231.261318][ T30] audit: type=1326 audit(1755505877.271:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.284845][ T9] usb 4-1: device descriptor read/64, error -71 [ 231.311997][ T30] audit: type=1326 audit(1755505877.271:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.394957][ T9] usb usb4-port1: attempt power cycle [ 231.409433][ T30] audit: type=1326 audit(1755505877.271:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.433017][ T30] audit: type=1326 audit(1755505877.271:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b5e98ec23 code=0x7ffc0000 [ 231.458945][ T30] audit: type=1326 audit(1755505877.271:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b5e98ec23 code=0x7ffc0000 [ 231.485735][ T30] audit: type=1326 audit(1755505877.271:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.509150][ T30] audit: type=1326 audit(1755505877.271:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.532877][ T30] audit: type=1326 audit(1755505877.271:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.556425][ T30] audit: type=1326 audit(1755505877.271:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9457 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b5e98ebe9 code=0x7ffc0000 [ 231.754470][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 231.773974][ T9] usb 4-1: device descriptor read/8, error -71 [ 232.013491][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 232.457828][ T9] usb 4-1: device descriptor read/8, error -71 [ 232.583384][ T9] usb usb4-port1: unable to enumerate USB device [ 234.662309][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.137151][ T30] kauditd_printk_skb: 630 callbacks suppressed [ 235.137167][ T30] audit: type=1326 audit(1755505881.153:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.234064][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'. [ 235.255307][ T30] audit: type=1326 audit(1755505881.153:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.284712][ T30] audit: type=1326 audit(1755505881.153:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.309567][ T30] audit: type=1326 audit(1755505881.153:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.335170][ T30] audit: type=1326 audit(1755505881.153:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.366846][ T30] audit: type=1326 audit(1755505881.153:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.391071][ T30] audit: type=1326 audit(1755505881.163:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.501930][ T6057] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 235.730906][ T30] audit: type=1326 audit(1755505881.163:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.755305][ T30] audit: type=1326 audit(1755505881.163:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.779540][ T30] audit: type=1326 audit(1755505881.183:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208d58ebe9 code=0x7ffc0000 [ 235.932113][ T6057] usb 1-1: Using ep0 maxpacket: 16 [ 235.943429][ T6057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.956563][ T6057] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 235.965784][ T6057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.982743][ T6057] usb 1-1: config 0 descriptor?? [ 235.991291][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.999'. [ 236.067728][ T9535] FAULT_INJECTION: forcing a failure. [ 236.067728][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 236.081041][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.3.1001 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 236.081068][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.081078][ T9535] Call Trace: [ 236.081083][ T9535] [ 236.081088][ T9535] dump_stack_lvl+0x16c/0x1f0 [ 236.081111][ T9535] should_fail_ex+0x512/0x640 [ 236.081136][ T9535] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 236.081160][ T9535] should_failslab+0xc2/0x120 [ 236.081177][ T9535] __kmalloc_noprof+0xd2/0x510 [ 236.081195][ T9535] tomoyo_realpath_from_path+0xc2/0x6e0 [ 236.081218][ T9535] ? tomoyo_profile+0x47/0x60 [ 236.081233][ T9535] tomoyo_path_number_perm+0x245/0x580 [ 236.081251][ T9535] ? tomoyo_path_number_perm+0x237/0x580 [ 236.081268][ T9535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.081291][ T9535] ? preempt_count_add+0x76/0x150 [ 236.081312][ T9535] ? rcu_is_watching+0x12/0xc0 [ 236.081332][ T9535] ? __fget_files+0x204/0x3c0 [ 236.081348][ T9535] ? hook_file_ioctl_common+0x145/0x410 [ 236.081363][ T9535] ? lock_release+0x201/0x2f0 [ 236.081387][ T9535] ? __fget_files+0x20e/0x3c0 [ 236.081405][ T9535] security_file_ioctl+0x9b/0x240 [ 236.081428][ T9535] __x64_sys_ioctl+0xb7/0x210 [ 236.081459][ T9535] do_syscall_64+0xcd/0x4c0 [ 236.081477][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.081493][ T9535] RIP: 0033:0x7f208d58ebe9 [ 236.081506][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.081522][ T9535] RSP: 002b:00007f208e474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.081538][ T9535] RAX: ffffffffffffffda RBX: 00007f208d7b5fa0 RCX: 00007f208d58ebe9 [ 236.081549][ T9535] RDX: 0000200000000a00 RSI: 0000000000005412 RDI: 0000000000000003 [ 236.081559][ T9535] RBP: 00007f208e474090 R08: 0000000000000000 R09: 0000000000000000 [ 236.081569][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.081579][ T9535] R13: 00007f208d7b6038 R14: 00007f208d7b5fa0 R15: 00007ffdb4c03108 [ 236.081595][ T9535] [ 236.354686][ T9535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.691377][ T9517] netlink: 'syz.0.995': attribute type 12 has an invalid length. [ 236.709170][ T9517] netlink: 'syz.0.995': attribute type 29 has an invalid length. [ 236.721361][ T9517] netlink: 148 bytes leftover after parsing attributes in process `syz.0.995'. [ 236.726429][ T9544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 237.028387][ T6057] usbhid 1-1:0.0: can't add hid device: -71 [ 237.034446][ T6057] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 237.069186][ T6057] usb 1-1: USB disconnect, device number 12 [ 237.110013][ T9556] tipc: Enabling of bearer rejected, failed to enable media [ 237.119925][ T9556] tipc: Enabling of bearer rejected, failed to enable media [ 237.850002][ T9563] ======================================================= [ 237.850002][ T9563] WARNING: The mand mount option has been deprecated and [ 237.850002][ T9563] and is ignored by this kernel. Remove the mand [ 237.850002][ T9563] option from the mount to silence this warning. [ 237.850002][ T9563] ======================================================= [ 238.184509][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 238.200531][ T9563] 9pnet_fd: Insufficient options for proto=fd [ 238.472380][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 238.482863][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 238.530550][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 238.738416][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 238.886125][ T8679] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.916066][ T8679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.963632][ T8679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.989189][ T8679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.994315][ T9588] Invalid logical block size (18) [ 239.793725][ T2148] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 240.000082][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 240.040572][ T2148] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 240.059528][ T2148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.075666][ T2148] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 240.236680][ T2148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.267603][ T2148] usb 5-1: config 0 descriptor?? [ 240.661757][ T9618] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1026'. [ 240.698509][ T2148] ntrig 0003:1B96:0004.0003: hidraw0: USB HID v0.06 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 240.834596][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 240.834611][ T30] audit: type=1326 audit(1755505886.856:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.2.1028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d0118ebe9 code=0x0 [ 240.954077][ T30] audit: type=1400 audit(1755505886.966:1749): avc: denied { connect } for pid=9597 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.064931][ T30] audit: type=1400 audit(1755505887.086:1750): avc: denied { create } for pid=9627 comm="syz.3.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.134680][ T30] audit: type=1400 audit(1755505887.116:1751): avc: denied { mounton } for pid=9627 comm="syz.3.1029" path="/file0" dev="ramfs" ino=22046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 242.254922][ T5909] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 242.382226][ T9653] Invalid logical block size (18) [ 242.519455][ T5909] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 242.527915][ T5909] usb 3-1: config 0 has no interface number 0 [ 242.536220][ T5909] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 242.546202][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.913174][ T5909] usb 3-1: Product: syz [ 242.917363][ T5909] usb 3-1: Manufacturer: syz [ 242.961877][ T9657] loop9: detected capacity change from 0 to 7 [ 242.984513][ T2148] usb 5-1: USB disconnect, device number 29 [ 242.997353][ T9657] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 243.009532][ T5909] usb 3-1: SerialNumber: syz [ 243.010090][ T9657] loop9: partition table partially beyond EOD, truncated [ 243.021404][ T9657] loop9: p1 size 501170297 extends beyond EOD, truncated [ 243.233525][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 243.258960][ T5909] usb 3-1: config 0 descriptor?? [ 243.348427][ T9666] FAULT_INJECTION: forcing a failure. [ 243.348427][ T9666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.372530][ T30] audit: type=1400 audit(1755505889.397:1752): avc: denied { create } for pid=9667 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 243.393115][ T9666] CPU: 1 UID: 0 PID: 9666 Comm: syz.4.1041 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 243.393140][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.393149][ T9666] Call Trace: [ 243.393154][ T9666] [ 243.393160][ T9666] dump_stack_lvl+0x16c/0x1f0 [ 243.393181][ T9666] should_fail_ex+0x512/0x640 [ 243.393204][ T9666] _copy_from_user+0x2e/0xd0 [ 243.393225][ T9666] core_sys_select+0x2c8/0xc10 [ 243.393246][ T9666] ? __pfx_core_sys_select+0x10/0x10 [ 243.393262][ T9666] ? kstrtouint_from_user+0x13c/0x1d0 [ 243.393280][ T9666] ? get_pid_task+0xfc/0x250 [ 243.393294][ T9666] ? rcu_is_watching+0x12/0xc0 [ 243.393325][ T9666] ? set_user_sigmask+0x21b/0x2b0 [ 243.393341][ T9666] ? rcu_is_watching+0x12/0xc0 [ 243.393360][ T9666] ? __pfx_set_user_sigmask+0x10/0x10 [ 243.393379][ T9666] do_pselect.constprop.0+0x19f/0x1e0 [ 243.393397][ T9666] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 243.393417][ T9666] __x64_sys_pselect6+0x182/0x240 [ 243.393434][ T9666] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 243.393450][ T9666] ? xfd_validate_state+0x61/0x180 [ 243.393477][ T9666] do_syscall_64+0xcd/0x4c0 [ 243.393492][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.393507][ T9666] RIP: 0033:0x7f1b5e98ebe9 [ 243.393520][ T9666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.393536][ T9666] RSP: 002b:00007f1b5f882038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 243.393552][ T9666] RAX: ffffffffffffffda RBX: 00007f1b5ebb6180 RCX: 00007f1b5e98ebe9 [ 243.393563][ T9666] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 243.393573][ T9666] RBP: 00007f1b5f882090 R08: 0000000000000000 R09: 0000000000000000 [ 243.393582][ T9666] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 243.393592][ T9666] R13: 00007f1b5ebb6218 R14: 00007f1b5ebb6180 R15: 00007fffdec19998 [ 243.393607][ T9666] [ 243.658990][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'. [ 243.860581][ T30] audit: type=1400 audit(1755505889.397:1753): avc: denied { bind } for pid=9667 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 243.880642][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.963915][ T30] audit: type=1400 audit(1755505889.397:1754): avc: denied { ioctl } for pid=9667 comm="syz.3.1043" path="socket:[23000]" dev="sockfs" ino=23000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 243.967708][ T5909] uvcvideo 3-1:0.251: probe with driver uvcvideo failed with error -22 [ 244.000241][ T30] audit: type=1400 audit(1755505889.397:1755): avc: denied { setattr } for pid=9667 comm="syz.3.1043" path="socket:[22997]" dev="sockfs" ino=22997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.061843][ T5909] usb 3-1: USB disconnect, device number 21 [ 244.084474][ T6658] udevd[6658]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 244.227362][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 244.377880][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 244.384576][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.402919][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 244.455242][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.607625][ T30] audit: type=1400 audit(1755505890.568:1756): avc: denied { bind } for pid=9690 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.799167][ T9] usb 2-1: config 0 descriptor?? [ 245.294426][ T30] audit: type=1400 audit(1755505891.298:1757): avc: denied { write } for pid=9703 comm="syz.0.1051" path="socket:[23046]" dev="sockfs" ino=23046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.317720][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.423490][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 245.435359][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 245.479392][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 245.494582][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 245.614161][ T9] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 245.636550][ T9] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 245.662274][ T9] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device [ 245.681009][ T9] koneplus 0003:1E7D:2D51.0004: couldn't install mouse [ 245.715776][ T9] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -71 [ 245.962331][ T9] usb 2-1: USB disconnect, device number 29 [ 245.980649][ T9710] fido_id[9710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2D51.0004/report_descriptor': No such device [ 246.154062][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1059'. [ 246.358564][ T2148] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 246.499410][ T9736] loop9: detected capacity change from 0 to 7 [ 246.526185][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 246.536019][ T9736] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 246.542022][ T9736] loop9: partition table partially beyond EOD, truncated [ 246.552027][ T9736] loop9: p1 size 501170297 extends beyond EOD, truncated [ 246.633758][ T2148] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 246.643124][ T2148] usb 4-1: config 0 has no interface number 0 [ 246.656821][ T2148] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 246.666023][ T2148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.675655][ T2148] usb 4-1: Product: syz [ 246.679858][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 246.694448][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.710154][ T2148] usb 4-1: Manufacturer: syz [ 246.721239][ T2148] usb 4-1: SerialNumber: syz [ 246.728939][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.771942][ T2148] usb 4-1: config 0 descriptor?? [ 246.786811][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.821258][ T9] usb 2-1: config 0 descriptor?? [ 246.846549][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 247.146127][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1063'. [ 247.185783][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'. [ 247.304486][ T30] audit: type=1400 audit(1755505893.309:1758): avc: denied { setopt } for pid=9746 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 247.447865][ T2148] uvcvideo 4-1:0.251: probe with driver uvcvideo failed with error -22 [ 247.745351][ T2148] usb 4-1: USB disconnect, device number 29 [ 247.841735][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 248.185479][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 248.346502][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 248.380264][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 248.407431][ T9] usb 3-1: config 0 has no interface number 0 [ 248.421756][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 248.447367][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 248.459505][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 248.487650][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 248.497432][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.510746][ T9] usb 3-1: Product: syz [ 248.515058][ T9] usb 3-1: Manufacturer: syz [ 248.520055][ T9] usb 3-1: SerialNumber: syz [ 248.532125][ T9] usb 3-1: config 0 descriptor?? [ 248.542616][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.550303][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.561193][ T9775] vlan2: entered promiscuous mode [ 248.566448][ T9775] vlan2: entered allmulticast mode [ 248.571559][ T9775] hsr_slave_1: entered allmulticast mode [ 248.616991][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 248.720011][ T9776] overlayfs: failed to resolve './file0': -2 [ 248.811058][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.852376][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.214771][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 249.386399][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.394586][ T10] usb 1-1: config 0 has no interface number 0 [ 249.400717][ T10] usb 1-1: config 0 interface 67 altsetting 16 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 249.411733][ T10] usb 1-1: config 0 interface 67 altsetting 16 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 249.422802][ T10] usb 1-1: config 0 interface 67 has no altsetting 0 [ 249.431491][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 249.440746][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=1 [ 249.449006][ T10] usb 1-1: Product: syz [ 249.453217][ T10] usb 1-1: Manufacturer: syz [ 249.457915][ T9] Error reading MAC address [ 249.462418][ T10] usb 1-1: SerialNumber: syz [ 249.468243][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.476126][ T9762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 249.483618][ T10] usb 1-1: config 0 descriptor?? [ 249.489338][ T9778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 249.498275][ T9778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 249.506721][ T10] smsc95xx v2.0.0 [ 249.712433][ T9778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 249.720896][ T9778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 249.741037][ T5909] usb 2-1: USB disconnect, device number 30 [ 251.636299][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.649307][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 251.660460][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.724608][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 251.753625][ T9] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 251.773499][ T9] usb 3-1: USB disconnect, device number 22 [ 252.064688][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 252.065691][ T5909] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 252.103855][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 252.127357][ T10] usb 1-1: USB disconnect, device number 13 [ 252.595060][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 252.728362][ T5909] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.737092][ T5909] usb 5-1: config 0 has no interface number 0 [ 252.743535][ T5909] usb 5-1: config 0 interface 184 has no altsetting 0 [ 252.792499][ T30] audit: type=1326 audit(1755505898.772:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 252.793196][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.816048][ T30] audit: type=1326 audit(1755505898.782:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 252.816087][ T30] audit: type=1326 audit(1755505898.782:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 252.816117][ T30] audit: type=1326 audit(1755505898.782:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 252.940194][ T30] audit: type=1326 audit(1755505898.782:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.008780][ T30] audit: type=1326 audit(1755505898.782:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.043284][ T30] audit: type=1326 audit(1755505898.782:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.066668][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.103055][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 253.113962][ T30] audit: type=1326 audit(1755505898.782:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.179787][ T5909] usb 5-1: Product: syz [ 253.191127][ T5909] usb 5-1: Manufacturer: syz [ 253.372853][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 253.419054][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.440560][ T5909] usb 5-1: SerialNumber: syz [ 253.440579][ T30] audit: type=1326 audit(1755505898.782:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.469047][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 253.487297][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.488209][ T5909] usb 5-1: config 0 descriptor?? [ 253.533762][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.534284][ T5909] smsc75xx v1.0.0 [ 253.572749][ T30] audit: type=1326 audit(1755505898.782:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.2.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d0118ebe9 code=0x7ffc0000 [ 253.601747][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.639471][ T9830] loop9: detected capacity change from 0 to 7 [ 253.674330][ T9830] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.686273][ T10] usb 2-1: Product: syz [ 253.690512][ T10] usb 2-1: Manufacturer: syz [ 253.695350][ T9830] loop9: partition table partially beyond EOD, truncated [ 253.702675][ T9830] loop9: p1 size 501170297 extends beyond EOD, truncated [ 253.712712][ T10] usb 2-1: SerialNumber: syz [ 253.823988][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 253.937384][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 253.977907][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 254.092416][ T5909] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 254.417099][ T5909] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 254.433811][ T5909] usb 5-1: USB disconnect, device number 30 [ 254.590397][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 255.298725][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.305317][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.692028][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 255.801137][ T10] usb 2-1: USB disconnect, device number 31 [ 256.098100][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 256.293085][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.384708][ T8679] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.423547][ T8679] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.542696][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 256.599854][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 256.687225][ T8661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.711396][ T10] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 256.729545][ T8661] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.754308][ T9898] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 256.827888][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.835453][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.049086][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.056227][ T9898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.063525][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.070544][ T9898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.078434][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 257.087648][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.097770][ T10] usb 3-1: config 0 descriptor?? [ 257.106248][ T9898] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 257.361623][ T2148] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 257.699761][ T9914] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 257.975065][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 257.985577][ T10] asix 3-1:0.0: probe with driver asix failed with error -61 [ 257.995616][ T2148] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.007187][ T2148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.027184][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 258.027200][ T30] audit: type=1400 audit(1755505904.054:1794): avc: denied { write } for pid=9915 comm="syz.1.1111" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 258.071503][ T2148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 258.097667][ T2148] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 258.120108][ T2148] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.139800][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 258.156401][ T2148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.165767][ T2148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.175618][ T2148] usb 5-1: Product: syz [ 258.179918][ T2148] usb 5-1: Manufacturer: syz [ 258.426274][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 258.440375][ T2148] usb 5-1: SerialNumber: syz [ 258.447895][ T9899] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.459820][ T2148] cdc_mbim 5-1:1.0: skipping garbage [ 258.718675][ T9898] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.005359][ T30] audit: type=1400 audit(1755505905.035:1795): avc: denied { read } for pid=9927 comm="syz.1.1115" dev="sockfs" ino=22459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.374219][ T9898] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.384036][ T5909] usb 3-1: USB disconnect, device number 23 [ 259.548167][ T30] audit: type=1400 audit(1755505905.575:1796): avc: denied { watch_sb watch_reads } for pid=9937 comm="syz.2.1117" path="/215/bus" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.669925][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'. [ 260.695946][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1119'. [ 260.821368][ T9951] syz.3.1120: attempt to access beyond end of device [ 260.821368][ T9951] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 260.834472][ T9951] SQUASHFS error: Failed to read block 0x0: -5 [ 260.841141][ T9951] unable to read squashfs_super_block [ 260.851265][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 260.961171][ T2148] cdc_mbim 5-1:1.0: bind() failure [ 260.994435][ T2148] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 261.015062][ T2148] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 261.031484][ T2148] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 261.133682][ T2148] usb 5-1: USB disconnect, device number 31 [ 262.127152][ T9979] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.159911][ T2148] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.178570][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.185902][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.318312][ T2148] usb 1-1: Using ep0 maxpacket: 32 [ 262.535322][ T2148] usb 1-1: config 4 has an invalid interface number: 65 but max is 3 [ 262.562148][ T2148] usb 1-1: config 4 has an invalid interface number: 107 but max is 3 [ 262.612140][ T2148] usb 1-1: config 4 has an invalid interface number: 20 but max is 3 [ 262.710974][ T9991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9991 comm=syz.3.1132 [ 262.723336][ T2148] usb 1-1: config 4 has an invalid descriptor of length 219, skipping remainder of the config [ 262.723360][ T2148] usb 1-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 262.723378][ T2148] usb 1-1: config 4 has no interface number 0 [ 262.723392][ T2148] usb 1-1: config 4 has no interface number 1 [ 262.723406][ T2148] usb 1-1: config 4 has no interface number 2 [ 262.723442][ T2148] usb 1-1: config 4 interface 65 altsetting 14 endpoint 0xC has invalid maxpacket 2031, setting to 1024 [ 262.723463][ T2148] usb 1-1: config 4 interface 65 altsetting 14 bulk endpoint 0xC has invalid maxpacket 1024 [ 262.723482][ T2148] usb 1-1: config 4 interface 65 altsetting 14 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 262.723504][ T2148] usb 1-1: config 4 interface 65 altsetting 14 has a duplicate endpoint with address 0xF, skipping [ 262.770360][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1536 sclass=netlink_route_socket pid=9992 comm=syz.3.1132 [ 262.772808][ T2148] usb 1-1: config 4 interface 65 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 263.097616][ T2148] usb 1-1: config 4 interface 65 altsetting 14 endpoint 0xA has an invalid bInterval 129, changing to 7 [ 263.134562][ T2148] usb 1-1: config 4 interface 65 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 263.155008][ T2148] usb 1-1: config 4 interface 107 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 263.249118][ T2148] usb 1-1: config 4 interface 107 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 263.651532][ T2148] usb 1-1: config 4 interface 107 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 263.662524][ T2148] usb 1-1: config 4 interface 107 altsetting 2 endpoint 0x8 has invalid maxpacket 2039, setting to 1024 [ 263.673836][ T2148] usb 1-1: config 4 interface 20 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 263.695645][ T2148] usb 1-1: config 4 interface 65 has no altsetting 0 [ 263.888131][ T2148] usb 1-1: config 4 interface 107 has no altsetting 0 [ 263.895054][ T2148] usb 1-1: config 4 interface 20 has no altsetting 0 [ 264.323450][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 264.333203][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'. [ 264.397031][T10012] evm: overlay not supported [ 265.204257][ T2148] usb 1-1: string descriptor 0 read error: -71 [ 265.210491][ T2148] usb 1-1: New USB device found, idVendor=12d1, idProduct=7959, bcdDevice=cb.13 [ 265.219510][ T2148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.229088][ T2148] usb 1-1: can't set config #4, error -71 [ 265.236338][ T2148] usb 1-1: USB disconnect, device number 14 [ 265.244325][ T30] audit: type=1400 audit(1755505910.658:1797): avc: denied { connect } for pid=10014 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.414809][ T30] audit: type=1400 audit(1755505910.658:1798): avc: denied { write } for pid=10014 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.475937][ T30] audit: type=1400 audit(1755505910.718:1799): avc: denied { accept } for pid=10014 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.624592][T10035] tracefs: Unknown parameter 'euid>00000000000000000000' [ 371.533592][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 371.540547][ C0] rcu: 1-...!: (1 GPs behind) idle=07ac/0/0x1 softirq=36827/36828 fqs=2 [ 371.548948][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10008/1:b..l P10018/1:b..l [ 371.558162][ C0] rcu: (detected by 0, t=10505 jiffies, g=25789, q=343 ncpus=2) [ 371.565864][ C0] Sending NMI from CPU 0 to CPUs 1: [ 371.565886][ C1] NMI backtrace for cpu 1 [ 371.565897][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 371.565913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.565921][ C1] RIP: 0010:do_raw_spin_unlock+0x40/0x230 [ 371.565940][ C1] Code: 83 c7 04 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 bd 01 00 00 81 7b 04 ad 4e ad de <0f> 85 75 01 00 00 be 04 00 00 00 48 89 df e8 3d db 89 00 48 89 da [ 371.565954][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000046 [ 371.565965][ C1] RAX: 0000000000000007 RBX: ffff888022b872e8 RCX: ffffffff89a6bc72 [ 371.565973][ C1] RDX: 0000000000000000 RSI: ffffffff8c162680 RDI: ffff888022b872ec [ 371.565981][ C1] RBP: ffff888056a9fc00 R08: 0000000000000004 R09: 0000000000000002 [ 371.565989][ C1] R10: 0000000000000002 R11: ffffffff9b0f5c80 R12: 1873511254000000 [ 371.565997][ C1] R13: 1873511254000000 R14: 0000000000000002 R15: ffff888056a9f410 [ 371.566006][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 371.566019][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.566028][ C1] CR2: 000055558f759808 CR3: 0000000033f6b000 CR4: 00000000003526f0 [ 371.566036][ C1] Call Trace: [ 371.566042][ C1] [ 371.566048][ C1] _raw_spin_unlock+0x1e/0x50 [ 371.566068][ C1] advance_sched+0x62b/0xc80 [ 371.566090][ C1] ? __pfx_advance_sched+0x10/0x10 [ 371.566105][ C1] __hrtimer_run_queues+0x202/0xad0 [ 371.566123][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 371.566137][ C1] ? read_tsc+0x9/0x20 [ 371.566156][ C1] hrtimer_interrupt+0x397/0x8e0 [ 371.566174][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 371.566189][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 371.566209][ C1] [ 371.566213][ C1] [ 371.566218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.566232][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 371.566245][ C1] Code: 7c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 92 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 371.566257][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 371.566267][ C1] RAX: 000000000154079c RBX: 0000000000000001 RCX: ffffffff8b937c29 [ 371.566275][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162680 RDI: ffffffff819133c1 [ 371.566283][ C1] RBP: ffffed1003cd8488 R08: 0000000000000000 R09: ffffed10170a6655 [ 371.566292][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 371.566300][ C1] R13: ffff88801e6c2440 R14: ffffffff90ab3b90 R15: 0000000000000000 [ 371.566310][ C1] ? ct_kernel_exit+0x139/0x190 [ 371.566323][ C1] ? do_idle+0x391/0x510 [ 371.566340][ C1] default_idle+0x13/0x20 [ 371.566354][ C1] default_idle_call+0x6d/0xb0 [ 371.566368][ C1] do_idle+0x391/0x510 [ 371.566384][ C1] ? __pfx_do_idle+0x10/0x10 [ 371.566399][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 371.566414][ C1] cpu_startup_entry+0x4f/0x60 [ 371.566429][ C1] start_secondary+0x21d/0x2b0 [ 371.566447][ C1] ? __pfx_start_secondary+0x10/0x10 [ 371.566467][ C1] common_startup_64+0x13e/0x148 [ 371.566485][ C1] [ 371.566881][ C0] task:syz.4.1138 state:R running task stack:26560 pid:10018 tgid:10014 ppid:5845 task_flags:0x40044c flags:0x00004002 [ 371.895278][ C0] Call Trace: [ 371.898556][ C0] [ 371.901476][ C0] __schedule+0x1190/0x5de0 [ 371.905987][ C0] ? __pfx___schedule+0x10/0x10 [ 371.910848][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 371.916817][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 371.921827][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.927183][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 371.932549][ C0] preempt_schedule_common+0x44/0xc0 [ 371.937819][ C0] preempt_schedule_thunk+0x16/0x30 [ 371.943012][ C0] _raw_spin_unlock+0x3e/0x50 [ 371.947679][ C0] unmap_page_range+0xf77/0x42c0 [ 371.952614][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 371.957972][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 371.962896][ C0] ? unwind_get_return_address+0x59/0xa0 [ 371.968513][ C0] ? uprobe_munmap+0x20/0x5c0 [ 371.973181][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 371.979065][ C0] unmap_vmas+0x218/0x470 [ 371.983400][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 371.988236][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.994120][ C0] exit_mmap+0x1b9/0xb90 [ 371.998361][ C0] ? uprobe_clear_state+0xfc/0x400 [ 372.003460][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 372.008227][ C0] ? lock_release+0x201/0x2f0 [ 372.012897][ C0] ? lock_release+0x201/0x2f0 [ 372.017574][ C0] __mmput+0x12a/0x410 [ 372.021631][ C0] mmput+0x62/0x70 [ 372.025339][ C0] do_exit+0x7c7/0x2bf0 [ 372.029486][ C0] ? __pfx___might_resched+0x10/0x10 [ 372.034760][ C0] ? __pfx_do_exit+0x10/0x10 [ 372.039347][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.044356][ C0] ? get_signal+0x8f5/0x26d0 [ 372.048932][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.053684][ C0] do_group_exit+0xd3/0x2a0 [ 372.058178][ C0] get_signal+0x2673/0x26d0 [ 372.062672][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 372.067595][ C0] ? __pfx_get_signal+0x10/0x10 [ 372.072435][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 372.077969][ C0] ? lock_release+0x201/0x2f0 [ 372.082634][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.088784][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 372.094321][ C0] exit_to_user_mode_loop+0x84/0x110 [ 372.099600][ C0] do_syscall_64+0x3f6/0x4c0 [ 372.104187][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.110074][ C0] RIP: 0033:0x7f1b5e98ebe9 [ 372.114485][ C0] RSP: 002b:00007f1b5f8a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.122885][ C0] RAX: 0000000000010106 RBX: 00007f1b5ebb6090 RCX: 00007f1b5e98ebe9 [ 372.130853][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 372.138809][ C0] RBP: 00007f1b5ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 372.146762][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 372.154714][ C0] R13: 00007f1b5ebb6128 R14: 00007f1b5ebb6090 R15: 00007fffdec19998 [ 372.162676][ C0] [ 372.165688][ C0] task:syz.2.1134 state:R running task stack:27624 pid:10008 tgid:9999 ppid:5841 task_flags:0x40044c flags:0x00004002 [ 372.179172][ C0] Call Trace: [ 372.182435][ C0] [ 372.185353][ C0] __schedule+0x1190/0x5de0 [ 372.189863][ C0] ? __pfx___schedule+0x10/0x10 [ 372.194706][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.199463][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 372.205437][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 372.210801][ C0] preempt_schedule_common+0x44/0xc0 [ 372.216071][ C0] preempt_schedule_thunk+0x16/0x30 [ 372.221261][ C0] _raw_spin_unlock+0x3e/0x50 [ 372.225931][ C0] unmap_page_range+0xf77/0x42c0 [ 372.230875][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 372.236235][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 372.241161][ C0] ? uprobe_munmap+0x20/0x5c0 [ 372.245832][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 372.251721][ C0] unmap_vmas+0x218/0x470 [ 372.256039][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 372.260879][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 372.266770][ C0] exit_mmap+0x1b9/0xb90 [ 372.271001][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 372.275756][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.280513][ C0] __mmput+0x12a/0x410 [ 372.284574][ C0] mmput+0x62/0x70 [ 372.288284][ C0] do_exit+0x7c7/0x2bf0 [ 372.292437][ C0] ? __pfx___might_resched+0x10/0x10 [ 372.297733][ C0] ? __pfx_do_exit+0x10/0x10 [ 372.302324][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.307346][ C0] ? get_signal+0x8f5/0x26d0 [ 372.311929][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.316684][ C0] do_group_exit+0xd3/0x2a0 [ 372.321180][ C0] get_signal+0x2673/0x26d0 [ 372.325675][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 372.330599][ C0] ? __pfx_get_signal+0x10/0x10 [ 372.335442][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 372.340978][ C0] ? lock_release+0x201/0x2f0 [ 372.345646][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.351798][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 372.357345][ C0] ? xfd_validate_state+0x61/0x180 [ 372.362476][ C0] exit_to_user_mode_loop+0x84/0x110 [ 372.367754][ C0] do_syscall_64+0x3f6/0x4c0 [ 372.372337][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.378218][ C0] RIP: 0033:0x7f3d0118ebe9 [ 372.382620][ C0] RSP: 002b:00007f3d01f96038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.391027][ C0] RAX: 0000000000010106 RBX: 00007f3d013b6090 RCX: 00007f3d0118ebe9 [ 372.399073][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 372.407032][ C0] RBP: 00007f3d01211e19 R08: 0000000000000000 R09: 0000000000000000 [ 372.414994][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 372.422952][ C0] R13: 00007f3d013b6128 R14: 00007f3d013b6090 R15: 00007fff6d293ab8 [ 372.430916][ C0] [ 372.433928][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g25789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 372.445099][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 372.455045][ C0] rcu: RCU grace-period kthread stack dump: [ 372.460915][ C0] task:rcu_preempt state:R running task stack:27888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 372.474402][ C0] Call Trace: [ 372.477674][ C0] [ 372.480596][ C0] __schedule+0x1190/0x5de0 [ 372.485101][ C0] ? __mod_timer+0x8ed/0xd30 [ 372.489676][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 372.495647][ C0] ? __pfx___schedule+0x10/0x10 [ 372.500489][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 372.506116][ C0] ? rcu_watching_snap_recheck+0xc3/0x1360 [ 372.511915][ C0] ? schedule+0x2d7/0x3a0 [ 372.516223][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.520975][ C0] ? lock_release+0x201/0x2f0 [ 372.525643][ C0] schedule+0xe7/0x3a0 [ 372.529695][ C0] schedule_timeout+0x123/0x290 [ 372.534541][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 372.539899][ C0] ? __pfx_process_timeout+0x10/0x10 [ 372.545171][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 372.550966][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 372.556416][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 372.561164][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 372.566432][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 372.571449][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 372.576284][ C0] rcu_gp_kthread+0x270/0x380 [ 372.580944][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 372.586124][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.590875][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.596056][ C0] ? __kthread_parkme+0x19e/0x250 [ 372.601072][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 372.606255][ C0] kthread+0x3c5/0x780 [ 372.610309][ C0] ? __pfx_kthread+0x10/0x10 [ 372.614883][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.619636][ C0] ? __pfx_kthread+0x10/0x10 [ 372.624210][ C0] ret_from_fork+0x5d7/0x6f0 [ 372.628784][ C0] ? __pfx_kthread+0x10/0x10 [ 372.633358][ C0] ret_from_fork_asm+0x1a/0x30 [ 372.638115][ C0] [ 372.641116][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 372.647448][ C0] CPU: 0 UID: 0 PID: 8658 Comm: kworker/u8:34 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 372.659668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.669706][ C0] Workqueue: events_unbound toggle_allocation_gate [ 372.676196][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x1600 [ 372.682860][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 05 05 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 e0 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 372.702451][ C0] RSP: 0018:ffffc9000b697888 EFLAGS: 00000293 [ 372.708500][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe80 RCX: ffffffff81af8d01 [ 372.716460][ C0] RDX: ffff88807c9ca440 RSI: ffffffff81af8cdb RDI: 0000000000000005 [ 372.724414][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 372.732451][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 372.740403][ C0] R13: ffffed10170a7fd1 R14: 0000000000000001 R15: 0000000000000001 [ 372.748357][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 372.757272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.763841][ C0] CR2: 0000001b31d03ff8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 372.771793][ C0] Call Trace: [ 372.775055][ C0] [ 372.777971][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 372.782983][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 372.789302][ C0] ? __pfx___text_poke+0x10/0x10 [ 372.794308][ C0] ? trace_contention_end+0xdd/0x130 [ 372.799582][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 372.804593][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 372.809693][ C0] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 372.816196][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 372.821905][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 372.826914][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 372.833141][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 372.839374][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 372.845344][ C0] jump_label_update+0x376/0x550 [ 372.850272][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 372.856156][ C0] static_key_enable+0x1a/0x20 [ 372.860908][ C0] toggle_allocation_gate+0xfa/0x280 [ 372.866177][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 372.872051][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.876804][ C0] ? lock_acquire+0x2cd/0x350 [ 372.881468][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.886218][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.890968][ C0] process_one_work+0x9cc/0x1b70 [ 372.895898][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 372.901348][ C0] ? __pfx_process_one_work+0x10/0x10 [ 372.906705][ C0] ? assign_work+0x1a0/0x250 [ 372.911368][ C0] worker_thread+0x6c8/0xf10 [ 372.915948][ C0] ? __kthread_parkme+0x19e/0x250 [ 372.920967][ C0] ? __pfx_worker_thread+0x10/0x10 [ 372.926322][ C0] kthread+0x3c5/0x780 [ 372.930373][ C0] ? __pfx_kthread+0x10/0x10 [ 372.934952][ C0] ? ret_from_fork+0x25/0x6f0 [ 372.939611][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.944363][ C0] ? rcu_is_watching+0x12/0xc0 [ 372.949114][ C0] ? __pfx_kthread+0x10/0x10 [ 372.953685][ C0] ret_from_fork+0x5d7/0x6f0 [ 372.958254][ C0] ? __pfx_kthread+0x10/0x10 [ 372.962826][ C0] ret_from_fork_asm+0x1a/0x30 [ 372.967598][ C0]