last executing test programs: 17.679789947s ago: executing program 3 (id=1287): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 17.060074614s ago: executing program 3 (id=1292): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4da158da988456d30026b433186f53cd306a10470d50f5cb1ece9ead3459bab1cf1538be10cfb7cdf4147653c5e892962c801d4675f7bd4d24af44050960f0ded4bd0bea6f83bc0b15360c541c93fde8a5daef70cfe784e7a39e32a7bbbc09378e1ad28cdd88644cdb91ab9e76ee985a3ddd8547ed33de6485fb3a864778320f70239e5323dab72546afb1d17facfb7815cd6d", 0xb3}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40084) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 13.881822584s ago: executing program 3 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x0, 0x11, 0x69, "88245b1bee441fe9692a4e5fd31e230b4c3efdcfd9fc3e9b6f66df479b708bdfaaa7878860d0011b2b7fdefd12507addfd5bc0ee63df8c3606156ef4a8b2d78275735b30c81359e27e8fa404bf615484f8500a35ec4403ba3f143c2e35876ae5d0a75166071ec5942a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x20, 0x81, 0x1, 'H'}, 0x0, &(0x7f0000000a00)={0x20, 0x83, 0x2, "b3fa"}, 0x0, &(0x7f0000000a80)={0x20, 0x85, 0x3, "d7d67f"}}) syz_usb_control_io(r4, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000004c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) r7 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x82) fchdir(r8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="1c002c80080000000000010008af59258d779eed51bbe5e6ae39437661eb94ac4b62547f538d558fbe84e724b9"], 0x38}}, 0x40000c1) 11.482426923s ago: executing program 4 (id=1307): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@fd={0x3, 0x1, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x4, 0x0, 0x2, 0x3, 0xb2, 0x6, "c809ecaa"}, 0x1000, 0x4, {}, 0x1ff, 0xd00}) 11.446683674s ago: executing program 4 (id=1308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a7597970", 0xc) accept4(r0, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)="03d84e40c93c41f9aa166f21751eb0e38d24d22c3dcf2f12fe52ddcfaf7f83f150b11c1f6b6049a6e36126ad6b6883682b8611c0c78cfb94c6e6360f8b19221a1ca0268b3026f66ab2dba7765016cfa08f11a6369e374eab38d5756715528d3aa4ac18deaff75ca7e056dd60004395d26fc058", 0x73, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x2140403) keyctl$KEYCTL_WATCH_KEY(0x6, r1, 0xffffffffffffffff, 0x4) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x218440, 0x0) r4 = io_uring_setup(0x54e6, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r5 = socket$alg(0x26, 0x5, 0x0) io_uring_setup(0x421e9, &(0x7f00000001c0)={0x0, 0xfe5, 0x1000, 0x2, 0x211, 0x0, r4}) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xfff1, 0x9}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x80800) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r7) 10.42640998s ago: executing program 2 (id=1311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000001000)={r8}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) close(0x3) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) r13 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x7, 0x8, 0x400, {0xd, @ah_ip6_spec={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x7fff, 0x8}, {0x0, @local, 0x2, 0x7, [0xfffffffe, 0xec4]}, @ah_ip4_spec={@multicast2, @multicast2, 0x0, 0x2}, {0x0, @multicast, 0x7, 0x8, [0x8, 0x3]}, 0x80000000, 0x3fc000}}}) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x2000c410) 10.330049573s ago: executing program 1 (id=1312): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, 0x0) pipe2$9p(0x0, 0x900) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0xffffffff, 0x40001, 0x0, 0xd, "ff00f7000000000000000020af88008300"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0xf99b, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x1, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x3d}], 0x1}, 0x980) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) r6 = syz_open_pts(r2, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) r7 = syz_open_pts(r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x6, 0x1ffffffe, 0x0, 0x3, 0x17, "680ce20000000000000000000000000400"}) dup(r1) sendmsg$kcm(r0, 0x0, 0x400c850) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000001000000180000001800000003000000000000000100000500000000020000000100000000000000000000190670987d21d5ce9a117ae351e1fa8f6b043c3b1c"], 0x0, 0x33, 0x0, 0x1}, 0x28) socket$kcm(0xa, 0x922000000003, 0x11) 10.157023048s ago: executing program 2 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x7, &(0x7f0000000180)={0x8001, 0x40000006}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8080) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000040)=0x3) read$hiddev(r4, &(0x7f0000001140)=""/126, 0x7e) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000640)={0x2}, 0x0) 9.874420855s ago: executing program 3 (id=1314): mount$nfs(&(0x7f0000000040)='\x00\x00\x00\x00\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d00"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 9.424792231s ago: executing program 4 (id=1315): timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x29}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0xbfc, 0x1000}) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed661d5247238eeb738256e06a40e07", 0x29) 8.91756751s ago: executing program 1 (id=1316): set_mempolicy(0x8006, &(0x7f0000000180)=0xff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000200)={0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000001140), 0x0, 0x54) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1f1501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x4) 8.820210938s ago: executing program 4 (id=1317): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) r1 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000300)=@x86={0x81, 0x6, 0xff, 0x0, 0x18200000, 0x4, 0x6, 0x40, 0x2, 0x2, 0x4, 0x4, 0x0, 0x3, 0xd, 0x6, 0xff, 0xaa, 0xff, '\x00', 0x6, 0x40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x15, 0xa, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x8}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x3014, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)="0393", 0x2}], 0x1) 7.697013767s ago: executing program 1 (id=1319): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000012"], 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4003f7, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x1, 0x2, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 7.438209387s ago: executing program 1 (id=1320): io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0x5) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) pipe(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0xe31f4000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x2, 0x80, 0x9b, 0x1}, {0x9, 0x4, 0x9c, 0x2}, {0x8, 0x4, 0xc2}, {0x10, 0xff, 0x0, 0x4d}, {0xc57d, 0x9, 0x4, 0xba}, {0x3, 0x9, 0x6, 0x7fff}, {0x38, 0xc, 0x5, 0x9}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x6101, 0x0) 6.867996449s ago: executing program 1 (id=1322): r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x24020000) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) 6.738149146s ago: executing program 3 (id=1324): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x9d) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800480002000000feffffff", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001"], 0x50, 0x4008066}, 0x0) 5.577061455s ago: executing program 2 (id=1325): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getrlimit(0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc015) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) 5.547262648s ago: executing program 4 (id=1326): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000b69000000060a0b04000000000000000002000000200004801c0001800b00010072656a6539287d540c00028008000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x24, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000180)=0x8, &(0x7f0000000200)=0x8000000000000000) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10000, 0x5, 0x1, 0x108, 0xffffffffffffffff, 0xae9a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x6}, 0x50) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x800008, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10000, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4.053069037s ago: executing program 2 (id=1328): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x6, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d11010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.579249251s ago: executing program 0 (id=1330): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000012"], 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4003f7, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x1, 0x2, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 2.426549786s ago: executing program 4 (id=1331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x80, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x6, 0x0, 0x34}}}}}]}}]}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0x4, 0x1, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0xc, 0xa000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) landlock_restrict_self(0xffffffffffffffff, 0x4) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$dvb_dvr(&(0x7f0000000180), 0x0, 0x2a400) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x1cc, 0x7, 0x0, 0x0, {{0x8}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf2, 0x6, {0x7f, 'security\x00', 0xa, 0xf, "3a262eb13e53a536ebb531af80b786cb525bb6902f2e8a14246beb7ef53583539084e068a5843c78e4d4ff1855a7359e31e5300d93eef547603ca13c4bd18c0747a25f01d2e9e8d712cf297177bbdafccc29a768cd3a0b28f67d740b378108bcd286da9154624a88b0c70566b3b4bb27ff39fa64c60bd5331867363014933e60cf33d6c86db418f909b9ccbe62741d765f0573977d1e729382998e9402fc81d2926e83f2db12ad2c284be84f9cfa36dbbdabb66b6a7288c5be758f591f39cda27ea35235f17a18be"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5}, 0xb}], 0x2, 0x10, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x6, 0x7ec, [0x0, 0x200000000040, 0x200000000070, 0x20000000030c], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x22, 0xf6, 'netpci0\x00', 'veth0_virt_wifi\x00', 'team0\x00', 'veth0_to_team\x00', @empty, [0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10000, 'system_u:object_r:chfn_exec_t:s0\x00'}}}}, {0x5, 0x50, 0x8, 'lo\x00', 'veth1_to_batadv\x00', 'nr0\x00', 'vcan0\x00', @empty, [0xff, 0x0, 0xff], @random="b7c209d52118", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0x8906, 'syz_tun\x00', 'ip6tnl0\x00', 'syzkaller1\x00', 'virt_wifi0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x8b, {0x35d}}}}}, {0x9, 0x40, 0xf8, 'hsr0\x00', 'pimreg1\x00', 'xfrm0\x00', 'dummy0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xee, 0x13e, 0x18e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x7, {0x7}}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x80000000}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7fff, 'syz0\x00', {0x7}}}}], @common=@log={'log\x00', 0x28, {{0x8, "6a442229492afbb98ddc56dc63a6e10269b75e4ab8fef6afc072d9c95722", 0x8}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{0x5, 0x1, 0x10, 'ip6erspan0\x00', 'pimreg\x00', 'dvmrp0\x00', 'vcan0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0x7f], 0xde, 0x12e, 0x15e, [@time={{'time\x00', 0x0, 0x18}, {{0x0, 0x80000001, 0x50c5, 0x6dec, 0xffffffff, 0x6, 0x3}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x6, 0x86dd, 0x0, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x7}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}}, {0x9, 0x41, 0x9200, 'erspan0\x00', 'veth0_macvtap\x00', 'team0\x00', 'veth0_to_batadv\x00', @random="772a4feb8147", [0xff, 0xff, 0xff, 0xff, 0xff], @link_local, [0xff, 0x0, 0x0, 0xff, 0xff], 0xe6, 0xe6, 0x11e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x6, 0x2, 0x2, 0x2}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x39, 0x21, 0x0, 0x8, 0x4e22, 0x4e22, 0x4e24, 0x4e23}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}]}, 0x864) 2.342289394s ago: executing program 2 (id=1332): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000140)=0x5) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @dev}, &(0x7f00000004c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a"], 0xd4}}, 0x8818) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0xfffdffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000fc0)={0x1, 0x0, &(0x7f0000000f80)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001080)={0x2, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x3, 0x9, 0x5, 0x2e668321, 0xffffff01, 0x7, 0x6, 0x5], &(0x7f0000001000)=[0x0, r7], &(0x7f0000001040)=[0x2, 0x6625, 0x8, 0xfffffffffffffffd], 0x0, 0x9}) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x9, 0xf}, {0xa, 0xe}, {0x4, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x20014010) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2.192960668s ago: executing program 0 (id=1333): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00.'], 0x74}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7002fbdbdf250a000000080004000000000004000180795c0130163fd8a9e7b98f2f03008cdf9bb6cad0832851a221de29fce80cb6ff2b1484a4"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f00000007c0)={0x1, {&(0x7f0000000bc0)=""/174, 0x33, 0x0, 0x3, 0x2}}, 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 1.947149812s ago: executing program 3 (id=1334): mount$nfs(&(0x7f0000000040)='\x00\x00\x00\x00\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={0x0}, 0x18) syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d00"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.82613065s ago: executing program 1 (id=1335): syz_open_dev$sndctrl(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x7, &(0x7f0000000180)={0x8001, 0x40000006}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x8080) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000040)=0x3) read$hiddev(r4, &(0x7f0000001140)=""/126, 0x7e) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000640)={0x2}, 0x0) 1.810488406s ago: executing program 0 (id=1336): timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x29}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0xbfc, 0x1000}) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed661d5247238eeb738256e06a40e07", 0x29) 1.683619921s ago: executing program 0 (id=1337): set_mempolicy(0x8006, &(0x7f0000000180)=0xff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000200)={0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000001140), 0x0, 0x54) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1f1501) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x4) 1.366587374s ago: executing program 2 (id=1338): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12d90f2500402900000001090212000140000000090400000000000000"], 0x0) r1 = syz_usb_connect$uac1(0x5, 0xc4, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902b2000301bf00000904000000010100000a2401400031000201020d2408060700e24c46ca37e47b1124060602050400070003000600040001092405021e217a71a90904010000010200000904010101010200000c2402010a010d048df1e1150c240202090001000dd62fe41905010940007ea8040725010c0107000904020000010200000904020101010200000c24020107010b014b006f44072401da0604000905820940000605220725010c841000"], &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x5, 0x0, 0x20}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x5, 0x5}]}, 0x7, [{0xdf, &(0x7f0000000200)=@string={0xdf, 0x3, "75ca9790386c369c8a546a5b59964f6d3be3d950cb2b708d188b794ebcf2b2b417015cfadda8078df3b3ca111d65bc9057479a8dead5f1e68082873669608effdbcd057064965ae1e07a8273efd62904adee2649b0e8c1a635afd9b4319c435a8544a42f33851655a99cddc6daeb120a07633c6d6b8c4f51e803c261d8a9b1cfab6412853e943f2921d1314fc5c8a96e37c1875371805ea879d63155e4d83b6f1142c52dfc8b918ef2a902ad5e8644f50cb76f9d7c40a69d05dfd7d7766ad52c76500d6759512c4e25cd30a4fe4bded0f345f92860115cf708755eb193"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x843}}, {0xb4, &(0x7f0000000400)=@string={0xb4, 0x3, "e24450bfaa963cb6e36181ff4a84310d746e7a14225d72dc1b94ac712ca8b718ff7dd1199cc5126693e0d5b982ad1134467d9f1773715a9a49983e56cb992041cc862f9516e01832118b12ffc9b807e4bf5517dfa51ea21f8f4cdb42714d4b43bb8ed8f4eb74ea21409471252760d0f251d9df0509f69b6b9a64e485da2713bc50f6eca4ce516c9e93a7b87f0a681689b54c97b8df91b421585392e551d8ff197ab7098e7c2628f0923e82f5aa955d835609"}}, {0xe1, &(0x7f0000000600)=@string={0xe1, 0x3, "6d395e0e651d1c2ec71a22f7150035fdb64e9ec3261f5fa66876e4289a74677007fdf5d6737d40e332b5b3e8d755761e0f485d5002d908a7746046dcd7ed7cc15e20aec006a642b521ecccf66a0d9301b242308879195c0f40b41423d575f7923ffb91ec2b19e158076b06cbb05982e30790f42f3a3f93e83c5f0e471b0ec66292efcbbed92dd50a393dfa35343216a6aac514151d4e181a6e2b71ee289132956a6aeb1563a05f93c415c0480cd700fd5d2e7689c1a6da0186b87957182c5f46cd8170add054fe782bfb63def16a7f58b28e1d4e7be5e2d404bbc4deeaa06e"}}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0xffff, 0x4, 0xfe1a}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12d90f2500402900000001090212000140000000090400000000000000"], 0x0) (async) syz_usb_connect$uac1(0x5, 0xc4, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902b2000301bf00000904000000010100000a2401400031000201020d2408060700e24c46ca37e47b1124060602050400070003000600040001092405021e217a71a90904010000010200000904010101010200000c2402010a010d048df1e1150c240202090001000dd62fe41905010940007ea8040725010c0107000904020000010200000904020101010200000c24020107010b014b006f44072401da0604000905820940000605220725010c841000"], &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x5, 0x0, 0x20}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x5, 0x5}]}, 0x7, [{0xdf, &(0x7f0000000200)=@string={0xdf, 0x3, "75ca9790386c369c8a546a5b59964f6d3be3d950cb2b708d188b794ebcf2b2b417015cfadda8078df3b3ca111d65bc9057479a8dead5f1e68082873669608effdbcd057064965ae1e07a8273efd62904adee2649b0e8c1a635afd9b4319c435a8544a42f33851655a99cddc6daeb120a07633c6d6b8c4f51e803c261d8a9b1cfab6412853e943f2921d1314fc5c8a96e37c1875371805ea879d63155e4d83b6f1142c52dfc8b918ef2a902ad5e8644f50cb76f9d7c40a69d05dfd7d7766ad52c76500d6759512c4e25cd30a4fe4bded0f345f92860115cf708755eb193"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x843}}, {0xb4, &(0x7f0000000400)=@string={0xb4, 0x3, "e24450bfaa963cb6e36181ff4a84310d746e7a14225d72dc1b94ac712ca8b718ff7dd1199cc5126693e0d5b982ad1134467d9f1773715a9a49983e56cb992041cc862f9516e01832118b12ffc9b807e4bf5517dfa51ea21f8f4cdb42714d4b43bb8ed8f4eb74ea21409471252760d0f251d9df0509f69b6b9a64e485da2713bc50f6eca4ce516c9e93a7b87f0a681689b54c97b8df91b421585392e551d8ff197ab7098e7c2628f0923e82f5aa955d835609"}}, {0xe1, &(0x7f0000000600)=@string={0xe1, 0x3, "6d395e0e651d1c2ec71a22f7150035fdb64e9ec3261f5fa66876e4289a74677007fdf5d6737d40e332b5b3e8d755761e0f485d5002d908a7746046dcd7ed7cc15e20aec006a642b521ecccf66a0d9301b242308879195c0f40b41423d575f7923ffb91ec2b19e158076b06cbb05982e30790f42f3a3f93e83c5f0e471b0ec66292efcbbed92dd50a393dfa35343216a6aac514151d4e181a6e2b71ee289132956a6aeb1563a05f93c415c0480cd700fd5d2e7689c1a6da0186b87957182c5f46cd8170add054fe782bfb63def16a7f58b28e1d4e7be5e2d404bbc4deeaa06e"}}]}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0xffff, 0x4, 0xfe1a}) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) (async) 59.019767ms ago: executing program 0 (id=1339): timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x29}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0xbfc, 0x1000}) socket$tipc(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed661d5247238eeb738256e06a40e07", 0x29) 0s ago: executing program 0 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xfffffffc, 0x1}) (async) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0xffffffff00000001, 0x10, 0x8, 0xe9a1}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x20203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 421.882604][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 421.907284][ T806] hub 3-1:4.0: USB hub found [ 422.051497][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 422.278958][ T806] hub 3-1:4.0: 2 ports detected [ 422.281791][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.320517][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.359489][ T805] usb 4-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 422.398771][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.425140][ T9544] FAULT_INJECTION: forcing a failure. [ 422.425140][ T9544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.428957][ T805] usb 4-1: config 0 descriptor?? [ 422.481786][ T9544] CPU: 1 UID: 0 PID: 9544 Comm: syz.1.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.481818][ T9544] Tainted: [L]=SOFTLOCKUP [ 422.481823][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.481833][ T9544] Call Trace: [ 422.481838][ T9544] [ 422.481845][ T9544] dump_stack_lvl+0x100/0x190 [ 422.481874][ T9544] should_fail_ex.cold+0x5/0xa [ 422.481898][ T9544] _copy_from_user+0x2e/0xd0 [ 422.481919][ T9544] __do_sys_kcmp+0xaea/0xd70 [ 422.481948][ T9544] ? __pfx___do_sys_kcmp+0x10/0x10 [ 422.481974][ T9544] ? rcu_is_watching+0x12/0xc0 [ 422.482002][ T9544] do_syscall_64+0x115/0x870 [ 422.482023][ T9544] ? clear_bhb_loop+0x40/0x90 [ 422.482044][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.482061][ T9544] RIP: 0033:0x7f63db79ce59 [ 422.482076][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.482091][ T9544] RSP: 002b:00007f63dc6cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000138 [ 422.482108][ T9544] RAX: ffffffffffffffda RBX: 00007f63dba15fa0 RCX: 00007f63db79ce59 [ 422.482118][ T9544] RDX: 0000000000000007 RSI: 00000000000002cb RDI: 00000000000002cb [ 422.482128][ T9544] RBP: 00007f63dc6cd090 R08: 00002000000006c0 R09: 0000000000000000 [ 422.482138][ T9544] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 422.482147][ T9544] R13: 00007f63dba16038 R14: 00007f63dba15fa0 R15: 00007ffd62400788 [ 422.482170][ T9544] [ 422.487836][ T805] hub 4-1:0.0: USB hub found [ 422.664309][ T806] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 422.693401][ T805] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 422.746692][ T806] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 422.765694][ T805] usb 4-1: USB disconnect, device number 34 [ 422.843586][ T806] usb 3-1: USB disconnect, device number 50 [ 423.126010][ T9549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 423.381436][ T5734] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 423.481944][ T805] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 423.533391][ T5734] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 423.549536][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.575421][ T5734] usb 5-1: config 0 descriptor?? [ 423.653114][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 423.738772][ T805] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 423.815089][ T805] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 423.823049][ T5734] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 423.852972][ T5751] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 423.977661][ T805] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 424.325500][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 424.347738][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.378266][ T5734] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 424.385461][ T5734] [drm] Initialized udl on minor 2 [ 424.394327][ T5734] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 424.402452][ T5734] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 424.413216][ T5751] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 424.438904][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 424.453319][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.479599][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.507986][ T5751] usb 3-1: Product: syz [ 424.520690][ T5751] usb 3-1: Manufacturer: syz [ 424.550820][ T5751] usb 3-1: SerialNumber: syz [ 424.561170][ T805] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 424.598211][ T9549] netlink: 68 bytes leftover after parsing attributes in process `syz.4.967'. [ 424.619405][ T806] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.624052][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.663627][ T806] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 424.669010][ T805] usb 2-1: config 0 descriptor?? [ 424.690670][ T806] usb 5-1: USB disconnect, device number 47 [ 424.801798][ T9557] SELinux: failed to load policy [ 425.145568][ T805] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 425.203797][ T5751] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 425.212053][ T805] usb 2-1: USB disconnect, device number 41 [ 425.218911][ T5751] usb 3-1: unit 0 not found! [ 425.267300][ T805] usblp0: removed [ 425.320273][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'. [ 425.706935][ T5751] usb 3-1: USB disconnect, device number 51 [ 425.731419][ T805] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 425.768901][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.911738][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 425.925773][ T805] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 425.951723][ T805] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 425.988753][ T805] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 426.041644][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.196216][ T805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 426.270601][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 426.338121][ T805] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 426.385947][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.440399][ T805] usb 2-1: config 0 descriptor?? [ 426.460691][ T805] usb 2-1: can't set config #0, error -71 [ 426.486082][ T805] usb 2-1: USB disconnect, device number 42 [ 426.561808][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 426.753949][ T5733] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 427.601218][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 427.705243][ T5733] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 427.707745][ T30] audit: type=1400 audit(1780210539.939:1672): avc: denied { ioctl } for pid=9578 comm="syz.4.975" path="/dev/raw-gadget" dev="devtmpfs" ino=816 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 427.714954][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.752696][ T5733] usb 5-1: Product: syz [ 427.757696][ T5733] usb 5-1: Manufacturer: syz [ 427.763546][ T5733] usb 5-1: SerialNumber: syz [ 427.772111][ T30] audit: type=1400 audit(1780210539.979:1673): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.800192][ T30] audit: type=1400 audit(1780210539.989:1674): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.827377][ T30] audit: type=1400 audit(1780210539.989:1675): avc: denied { ioctl } for pid=5615 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.867580][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 427.885274][ T10] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 427.957246][ T10] usb 3-1: Product: syz [ 427.957283][ T10] usb 3-1: Manufacturer: syz [ 427.957313][ T10] usb 3-1: SerialNumber: syz [ 427.976048][ T10] usb 3-1: config 0 descriptor?? [ 427.984444][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 428.016361][ T30] audit: type=1400 audit(1780210539.999:1676): avc: denied { prog_load } for pid=9586 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 428.016455][ T30] audit: type=1400 audit(1780210540.009:1677): avc: denied { bpf } for pid=9586 comm="syz.3.978" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.016489][ T30] audit: type=1400 audit(1780210540.029:1678): avc: denied { create } for pid=9586 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 428.016524][ T30] audit: type=1400 audit(1780210540.039:1679): avc: denied { map_create } for pid=9586 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 428.016595][ T30] audit: type=1400 audit(1780210540.039:1680): avc: denied { perfmon } for pid=9586 comm="syz.3.978" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.016630][ T30] audit: type=1400 audit(1780210540.039:1681): avc: denied { map_read map_write } for pid=9586 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 429.148140][ T10] gspca_zc3xx: reg_w_i err -110 [ 429.148227][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 429.422917][ T9581] xt_TCPMSS: Only works on TCP SYN packets [ 429.556447][ T9605] CUSE: unknown device info "€" [ 429.556639][ T9605] CUSE: unknown device info "" [ 429.556709][ T9605] CUSE: unknown device info "" [ 429.556774][ T9605] CUSE: unknown device info "" [ 429.557040][ T9605] CUSE: unknown device info "+" [ 429.557069][ T9605] CUSE: unknown device info "‚" [ 429.557216][ T9605] CUSE: unknown device info "" [ 429.557327][ T9605] CUSE: zero length info key specified [ 429.971408][ T5733] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 429.971427][ T5733] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 429.988524][ T5733] usb 5-1: USB disconnect, device number 48 [ 430.567699][ T806] usb 3-1: USB disconnect, device number 52 [ 430.798080][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.984'. [ 432.435924][ T9606] SELinux: failed to load policy [ 432.760770][ T9621] tipc: New replicast peer: 172.30.0.3 [ 432.778618][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 432.778633][ T30] audit: type=1400 audit(1780210545.009:1723): avc: denied { create } for pid=9608 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 432.804472][ T5733] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 432.827506][ T9621] tipc: Enabled bearer , priority 10 [ 432.850868][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 432.904777][ T30] audit: type=1400 audit(1780210545.069:1724): avc: denied { bind } for pid=9608 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 432.945735][ T30] audit: type=1400 audit(1780210545.109:1725): avc: denied { setopt } for pid=9608 comm="syz.1.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 432.949348][ T9620] tipc: Disabling bearer [ 432.969675][ T30] audit: type=1400 audit(1780210545.179:1726): avc: denied { setopt } for pid=9624 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.994557][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 433.032709][ T5733] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 433.052413][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.091212][ T5733] usb 5-1: Product: syz [ 433.099451][ T30] audit: type=1400 audit(1780210545.179:1727): avc: denied { write } for pid=9624 comm="syz.3.988" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.126110][ T5733] usb 5-1: Manufacturer: syz [ 433.139631][ T5733] usb 5-1: SerialNumber: syz [ 433.205739][ T30] audit: type=1400 audit(1780210545.179:1728): avc: denied { connect } for pid=9624 comm="syz.3.988" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.270635][ T30] audit: type=1400 audit(1780210545.179:1729): avc: denied { name_connect } for pid=9624 comm="syz.3.988" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 433.359441][ T30] audit: type=1400 audit(1780210545.229:1730): avc: denied { execute } for pid=9608 comm="syz.1.984" path="/202/cpuacct.usage_percpu_sys" dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 433.834375][ T5733] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 433.861592][ T30] audit: type=1400 audit(1780210545.259:1731): avc: denied { create } for pid=9624 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 433.888199][ T5733] usb 5-1: unit 0 not found! [ 433.931734][ T30] audit: type=1400 audit(1780210545.329:1732): avc: denied { ioctl } for pid=9624 comm="syz.3.988" path="socket:[25189]" dev="sockfs" ino=25189 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.941451][ T4949] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 433.966470][ T5733] usb 5-1: USB disconnect, device number 49 [ 434.057658][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.102884][ T4949] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 434.113911][ T4949] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 434.136171][ T4949] usb 2-1: config 0 has no interface number 0 [ 434.143254][ T806] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 434.170710][ T4949] usb 2-1: config 0 interface 101 has no altsetting 0 [ 434.313495][ T4949] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 435.120946][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.127657][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.139110][ T4949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.147270][ T806] usb 3-1: Using ep0 maxpacket: 32 [ 435.154279][ T806] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 435.163017][ T806] usb 3-1: config 0 has no interface number 0 [ 435.183188][ T806] usb 3-1: config 0 interface 12 has no altsetting 0 [ 435.194799][ T4949] usb 2-1: config 0 descriptor?? [ 435.203423][ T806] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 435.215367][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.226517][ T4949] ftdi_sio 2-1:0.101: FTDI USB Serial Device converter detected [ 435.238555][ T806] usb 3-1: Product: syz [ 435.315766][ T806] usb 3-1: Manufacturer: syz [ 435.329760][ T4949] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 435.343676][ T806] usb 3-1: SerialNumber: syz [ 435.527939][ T806] usb 3-1: config 0 descriptor?? [ 435.760268][ T4935] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 435.771545][ T5734] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 435.810598][ T806] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 435.829846][ T806] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 435.839669][ T806] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 435.848086][ T806] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 435.896742][ T806] usb 3-1: USB disconnect, device number 53 [ 435.956982][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.972317][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.985068][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.996697][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.013037][ T5734] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.023901][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.036105][ T5734] usb 5-1: config 0 descriptor?? [ 436.501006][ T5734] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 436.767425][ T9654] random: crng reseeded on system resumption [ 437.014808][ T5734] usb 2-1: USB disconnect, device number 43 [ 437.044779][ T5734] ftdi_sio 2-1:0.101: device disconnected [ 437.294414][ T9661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 437.342724][ T806] usb 5-1: USB disconnect, device number 50 [ 437.599853][ T9669] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 437.806748][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 437.806778][ T30] audit: type=1400 audit(1780210550.039:1761): avc: denied { read } for pid=9671 comm="syz.0.1002" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 438.024725][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'. [ 438.791291][ T30] audit: type=1400 audit(1780210550.249:1762): avc: denied { create } for pid=9668 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.836543][ T30] audit: type=1400 audit(1780210550.249:1763): avc: denied { connect } for pid=9668 comm="syz.1.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.981579][ T30] audit: type=1400 audit(1780210550.269:1764): avc: denied { ioctl } for pid=9668 comm="syz.1.1001" path="socket:[24493]" dev="sockfs" ino=24493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 439.009533][ T30] audit: type=1400 audit(1780210550.269:1765): avc: denied { shutdown } for pid=9668 comm="syz.1.1001" lport=40766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 439.263560][ T30] audit: type=1400 audit(1780210550.359:1766): avc: denied { open } for pid=9671 comm="syz.0.1002" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.311502][ T30] audit: type=1400 audit(1780210551.199:1767): avc: denied { getopt } for pid=9671 comm="syz.0.1002" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.351391][ T30] audit: type=1400 audit(1780210551.469:1768): avc: denied { write } for pid=5615 comm="syz-executor" name="206" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 439.412027][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 439.429442][ T30] audit: type=1400 audit(1780210551.469:1769): avc: denied { remove_name } for pid=5615 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 439.466560][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'. [ 440.457144][ T30] audit: type=1400 audit(1780210551.469:1770): avc: denied { write } for pid=5615 comm="syz-executor" name="206" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 440.660044][ T9688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1009'. [ 440.669800][ T9688] openvswitch: netlink: EtherType 0 is less than min 600 [ 441.051281][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 441.171332][ T4949] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 441.179171][ T806] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 441.214918][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 441.241765][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.261233][ T10] usb 3-1: Product: syz [ 441.265816][ T10] usb 3-1: Manufacturer: syz [ 441.270829][ T10] usb 3-1: SerialNumber: syz [ 441.312121][ T806] usb 4-1: device descriptor read/64, error -71 [ 441.341293][ T4949] usb 2-1: Using ep0 maxpacket: 32 [ 441.348995][ T4949] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 441.371292][ T4949] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 441.391224][ T4949] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.402969][ T4949] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 441.419112][ T4949] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 441.428901][ T4949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.437892][ T4949] usb 2-1: Product: syz [ 441.445433][ T4949] usb 2-1: Manufacturer: syz [ 441.450108][ T4949] usb 2-1: SerialNumber: syz [ 441.471048][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 441.491837][ T4949] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input40 [ 441.561333][ T806] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 441.692504][ T4949] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 441.703254][ T4949] (id 0x00) [ 441.714025][ T806] usb 4-1: device descriptor read/64, error -71 [ 441.791205][ T4949] rc_core: IR keymap rc-imon-pad not found [ 441.797292][ T4949] Registered IR keymap rc-empty [ 441.803071][ T4949] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 441.813819][ T4949] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 441.831423][ T806] usb usb4-port1: attempt power cycle [ 441.884655][ T4949] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 441.900240][ T4949] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input41 [ 441.918247][ T4949] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:44> initialized [ 442.401594][ T806] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 442.435386][ T806] usb 4-1: device descriptor read/8, error -71 [ 442.742491][ T9704] random: crng reseeded on system resumption [ 442.791587][ T806] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 442.812267][ T806] usb 4-1: device descriptor read/8, error -71 [ 442.990350][ T9708] random: crng reseeded on system resumption [ 443.175761][ T806] usb usb4-port1: unable to enumerate USB device [ 444.032201][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 444.066737][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 444.081853][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 444.100376][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 444.296428][ T5741] usb 2-1: USB disconnect, device number 44 [ 445.000763][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 446.059268][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 446.124278][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 446.451373][ T10] usb 3-1: USB disconnect, device number 54 [ 446.690915][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1018'. [ 446.745929][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 446.874943][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 446.874989][ T30] audit: type=1400 audit(1780210559.109:1792): avc: denied { module_request } for pid=9737 comm="syz.2.1021" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 446.984600][ T9745] random: crng reseeded on system resumption [ 447.323798][ T30] audit: type=1400 audit(1780210559.159:1793): avc: denied { block_suspend } for pid=9737 comm="syz.2.1021" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 447.392198][ T9744] binder: Bad value for 'max' [ 447.407735][ T30] audit: type=1400 audit(1780210559.599:1794): avc: denied { sys_module } for pid=9737 comm="syz.2.1021" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 447.531282][ T30] audit: type=1400 audit(1780210559.629:1795): avc: denied { mounton } for pid=9743 comm="syz.0.1023" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.632824][ T30] audit: type=1400 audit(1780210559.799:1796): avc: denied { create } for pid=9750 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 447.721542][ T30] audit: type=1400 audit(1780210559.889:1797): avc: denied { write } for pid=9743 comm="syz.0.1023" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 447.878008][ T30] audit: type=1400 audit(1780210559.949:1798): avc: denied { ioctl } for pid=9753 comm="syz.4.1025" path="socket:[25459]" dev="sockfs" ino=25459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 447.903881][ T30] audit: type=1400 audit(1780210559.999:1799): avc: denied { create } for pid=9755 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 447.966669][ T30] audit: type=1400 audit(1780210559.999:1800): avc: denied { write } for pid=9755 comm="syz.2.1026" path="socket:[25716]" dev="sockfs" ino=25716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 448.029292][ T9761] FAULT_INJECTION: forcing a failure. [ 448.029292][ T9761] name failslab, interval 1, probability 0, space 0, times 0 [ 448.043141][ T9761] CPU: 0 UID: 0 PID: 9761 Comm: syz.4.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.043171][ T9761] Tainted: [L]=SOFTLOCKUP [ 448.043177][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.043187][ T9761] Call Trace: [ 448.043193][ T9761] [ 448.043199][ T9761] dump_stack_lvl+0x100/0x190 [ 448.043227][ T9761] should_fail_ex.cold+0x5/0xa [ 448.043251][ T9761] ? tomoyo_encode2+0xfb/0x3c0 [ 448.043278][ T9761] should_failslab+0xc2/0x120 [ 448.043298][ T9761] __kmalloc_noprof+0xe0/0x850 [ 448.043330][ T9761] tomoyo_encode2+0xfb/0x3c0 [ 448.043360][ T9761] tomoyo_encode+0x29/0x50 [ 448.043387][ T9761] tomoyo_realpath_from_path+0x18c/0x690 [ 448.043421][ T9761] tomoyo_path_number_perm+0x23c/0x580 [ 448.043445][ T9761] ? tomoyo_path_number_perm+0x22e/0x580 [ 448.043471][ T9761] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 448.043521][ T9761] ? find_held_lock+0x2b/0x80 [ 448.043537][ T9761] ? __fget_files+0x215/0x3d0 [ 448.043558][ T9761] ? hook_file_ioctl_common+0x149/0x410 [ 448.043576][ T9761] ? __fget_files+0x215/0x3d0 [ 448.043603][ T9761] ? __fget_files+0x21f/0x3d0 [ 448.043629][ T9761] security_file_ioctl+0xd3/0x230 [ 448.043657][ T9761] __x64_sys_ioctl+0xb7/0x210 [ 448.043678][ T9761] do_syscall_64+0x115/0x870 [ 448.043702][ T9761] ? clear_bhb_loop+0x40/0x90 [ 448.043723][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.043742][ T9761] RIP: 0033:0x7f465559ce59 [ 448.043758][ T9761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.043775][ T9761] RSP: 002b:00007f4656383028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.043793][ T9761] RAX: ffffffffffffffda RBX: 00007f4655816180 RCX: 00007f465559ce59 [ 448.043805][ T9761] RDX: 0000200000001440 RSI: 00000000000089ff RDI: 0000000000000006 [ 448.043820][ T9761] RBP: 00007f4656383090 R08: 0000000000000000 R09: 0000000000000000 [ 448.043830][ T9761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.043840][ T9761] R13: 00007f4655816218 R14: 00007f4655816180 R15: 00007ffc3aaf68a8 [ 448.043865][ T9761] [ 448.043883][ T9761] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.803650][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 448.971072][ T30] audit: type=1400 audit(1780210561.199:1801): avc: denied { mount } for pid=9768 comm="syz.2.1030" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 449.201373][ T6879] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 449.301751][ T806] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 449.558530][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1033'. [ 449.621932][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 449.667561][ T6879] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 449.675965][ T806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.710258][ T6879] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 449.739697][ T806] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.812316][ T6879] usb 4-1: config 220 has no interface number 2 [ 449.958484][ T806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 449.981582][ T6879] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 450.011256][ T6879] usb 4-1: config 220 interface 0 has no altsetting 0 [ 450.020711][ T806] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 450.041273][ T6879] usb 4-1: config 220 interface 76 has no altsetting 0 [ 450.048179][ T806] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.062794][ T6879] usb 4-1: config 220 interface 1 has no altsetting 0 [ 450.069691][ T806] usb 1-1: Manufacturer: syz [ 450.076849][ T6879] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 450.090283][ T806] usb 1-1: config 0 descriptor?? [ 450.105874][ T6879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.138843][ T6879] usb 4-1: Product: syz [ 450.157969][ T6879] usb 4-1: Manufacturer: syz [ 450.172350][ T6879] usb 4-1: SerialNumber: syz [ 450.283122][ T9784] random: crng reseeded on system resumption [ 450.615823][ T6879] usb 4-1: selecting invalid altsetting 0 [ 450.629144][ T6879] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 450.661725][ T6879] uvcvideo 4-1:220.0: No valid video chain found. [ 450.710689][ T6879] usb 4-1: selecting invalid altsetting 0 [ 450.749790][ T6879] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 450.797972][ T6879] usb 4-1: USB disconnect, device number 39 [ 450.961426][ T9798] syz.0.1031 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 451.529438][ T5733] usb 1-1: USB disconnect, device number 31 [ 451.747611][ T9805] FAULT_INJECTION: forcing a failure. [ 451.747611][ T9805] name failslab, interval 1, probability 0, space 0, times 0 [ 451.793721][ T9805] CPU: 0 UID: 0 PID: 9805 Comm: syz.3.1039 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.793746][ T9805] Tainted: [L]=SOFTLOCKUP [ 451.793750][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.793756][ T9805] Call Trace: [ 451.793760][ T9805] [ 451.793764][ T9805] dump_stack_lvl+0x100/0x190 [ 451.793781][ T9805] should_fail_ex.cold+0x5/0xa [ 451.793796][ T9805] ? iovec_from_user+0x8d/0x140 [ 451.793809][ T9805] should_failslab+0xc2/0x120 [ 451.793826][ T9805] __kmalloc_noprof+0xe0/0x850 [ 451.793842][ T9805] ? find_held_lock+0x2b/0x80 [ 451.793854][ T9805] iovec_from_user+0x8d/0x140 [ 451.793869][ T9805] __import_iovec+0x81/0x640 [ 451.793880][ T9805] ? __might_fault+0x60/0x140 [ 451.793895][ T9805] ? __might_fault+0xc5/0x140 [ 451.793912][ T9805] import_iovec+0x101/0x130 [ 451.793927][ T9805] copy_msghdr_from_user+0x2ed/0x4f0 [ 451.793941][ T9805] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 451.793957][ T9805] ? __pfx__kstrtoull+0x10/0x10 [ 451.793975][ T9805] ___sys_sendmsg+0x106/0x1e0 [ 451.793988][ T9805] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.794008][ T9805] ? find_held_lock+0x2b/0x80 [ 451.794025][ T9805] __sys_sendmmsg+0x205/0x430 [ 451.794044][ T9805] ? __pfx___sys_sendmmsg+0x10/0x10 [ 451.794064][ T9805] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.794084][ T9805] ? fput+0x79/0x100 [ 451.794099][ T9805] ? ksys_write+0x1ac/0x250 [ 451.794111][ T9805] ? __pfx_ksys_write+0x10/0x10 [ 451.794124][ T9805] __x64_sys_sendmmsg+0x9c/0x100 [ 451.794140][ T9805] ? lockdep_hardirqs_on+0x78/0x100 [ 451.794153][ T9805] do_syscall_64+0x115/0x870 [ 451.794166][ T9805] ? clear_bhb_loop+0x40/0x90 [ 451.794179][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.794190][ T9805] RIP: 0033:0x7fc2c2d9ce59 [ 451.794200][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.794210][ T9805] RSP: 002b:00007fc2c0fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.794221][ T9805] RAX: ffffffffffffffda RBX: 00007fc2c3016090 RCX: 00007fc2c2d9ce59 [ 451.794228][ T9805] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 451.794234][ T9805] RBP: 00007fc2c0fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 451.794240][ T9805] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 451.794246][ T9805] R13: 00007fc2c3016128 R14: 00007fc2c3016090 R15: 00007ffc101df488 [ 451.794266][ T9805] [ 452.471203][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.496329][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.335847][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 453.335866][ T30] audit: type=1400 audit(1780210565.539:1821): avc: denied { accept } for pid=9815 comm="syz.1.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 454.128943][ T9832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1047'. [ 454.148108][ T30] audit: type=1400 audit(1780210566.369:1822): avc: denied { write } for pid=9828 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 455.023978][ T9841] random: crng reseeded on system resumption [ 455.269038][ T30] audit: type=1400 audit(1780210567.499:1823): avc: denied { read } for pid=9842 comm="syz.2.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 455.956250][ T30] audit: type=1400 audit(1780210568.189:1824): avc: denied { create } for pid=9855 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.008940][ T30] audit: type=1400 audit(1780210568.209:1825): avc: denied { write } for pid=9855 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 456.066308][ T30] audit: type=1400 audit(1780210568.299:1826): avc: denied { nlmsg_read } for pid=9857 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.116293][ T30] audit: type=1400 audit(1780210568.349:1827): avc: denied { mounton } for pid=9857 comm="syz.3.1056" path="/223/file0" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 456.201266][ T6879] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 456.396804][ T6879] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.497109][ T6879] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.722011][ T6879] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 456.752087][ T6879] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 456.777887][ T6879] usb 3-1: Product: syz [ 456.786553][ T6879] usb 3-1: Manufacturer: syz [ 456.823886][ T6879] hub 3-1:4.0: USB hub found [ 457.019862][ T6879] hub 3-1:4.0: 2 ports detected [ 457.222402][ T30] audit: type=1400 audit(1780210569.459:1828): avc: denied { create } for pid=9851 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.250325][ T6879] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 457.261487][ T6879] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 457.314272][ T6879] usb 3-1: USB disconnect, device number 55 [ 457.456396][ T9881] tipc: Started in network mode [ 457.470569][ T9881] tipc: Node identity ac14140f, cluster identity 4711 [ 457.506379][ T9881] tipc: New replicast peer: 172.30.0.1 [ 457.530685][ T9881] tipc: Enabled bearer , priority 10 [ 457.552501][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 457.574971][ T9884] tipc: Disabling bearer [ 458.251875][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 458.421302][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 458.471359][ T5733] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 458.615819][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 4 [ 458.643352][ T5733] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 458.658493][ T5733] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 458.685492][ T5733] usb 1-1: config 220 has no interface number 2 [ 458.695014][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 170, changing to 4 [ 458.698775][ T5733] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 458.727970][ T30] audit: type=1400 audit(1780210570.959:1829): avc: denied { bind } for pid=9891 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.768726][ T5733] usb 1-1: config 220 interface 0 has no altsetting 0 [ 458.783874][ T5733] usb 1-1: config 220 interface 76 has no altsetting 0 [ 458.807598][ T5733] usb 1-1: config 220 interface 1 has no altsetting 0 [ 458.824944][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 458.831083][ T5733] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 458.847340][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.861192][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.865606][ T5733] usb 1-1: Product: syz [ 458.881604][ T10] usb 5-1: Product: syz [ 458.890732][ T5733] usb 1-1: Manufacturer: syz [ 458.902635][ T10] usb 5-1: Manufacturer: syz [ 458.904500][ T5733] usb 1-1: SerialNumber: syz [ 458.917555][ T30] audit: type=1400 audit(1780210571.149:1830): avc: denied { create } for pid=9901 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.921976][ T10] usb 5-1: SerialNumber: syz [ 458.991681][ T30] audit: type=1400 audit(1780210571.179:1831): avc: denied { ioctl } for pid=9901 comm="syz.3.1069" path="socket:[26762]" dev="sockfs" ino=26762 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 459.005077][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 459.050023][ T30] audit: type=1400 audit(1780210571.199:1832): avc: denied { write } for pid=9901 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 459.127880][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 459.137140][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 459.148945][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 459.157876][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1071'. [ 459.178647][ T5733] usb 1-1: selecting invalid altsetting 0 [ 459.194051][ T5733] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 459.219132][ T5733] uvcvideo 1-1:220.0: No valid video chain found. [ 459.261024][ T5733] usb 1-1: selecting invalid altsetting 0 [ 459.268242][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.278537][ T5733] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 459.299183][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 459.319620][ T5733] usb 1-1: USB disconnect, device number 32 [ 459.338047][ T30] audit: type=1400 audit(1780210571.559:1833): avc: denied { ioctl } for pid=9909 comm="syz.1.1072" path="socket:[26775]" dev="sockfs" ino=26775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.339130][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 459.392089][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 459.408199][ T10] usb 5-1: USB disconnect, device number 51 [ 460.514981][ T30] audit: type=1400 audit(1780210572.399:1834): avc: denied { append } for pid=9920 comm="syz.1.1075" name="ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.775879][ T9936] random: crng reseeded on system resumption [ 462.224908][ T9944] fuse: Unknown parameter 'roovmode' [ 462.231735][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 462.292323][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 462.383660][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1083'. [ 462.471375][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 462.480751][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 462.489638][ T10] usb 5-1: config 0 has no interface number 0 [ 462.499273][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 462.518889][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 462.529155][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.539379][ T10] usb 5-1: Product: syz [ 462.545111][ T10] usb 5-1: Manufacturer: syz [ 462.554091][ T10] usb 5-1: SerialNumber: syz [ 462.569754][ T10] usb 5-1: config 0 descriptor?? [ 463.232803][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 463.247943][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.292354][ T9954] SELinux: failed to load policy [ 463.400322][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 463.814517][ T30] audit: type=1400 audit(1780210576.049:1835): avc: denied { bind } for pid=9962 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.976971][ T30] audit: type=1400 audit(1780210576.049:1836): avc: denied { write } for pid=9962 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 464.216003][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 464.234836][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 464.247226][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 464.248217][ T30] audit: type=1400 audit(1780210576.459:1837): avc: denied { read } for pid=9971 comm="syz.0.1090" name="usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 464.258999][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 464.306274][ T9973] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 464.393156][ T9973] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 464.413309][ T9975] random: crng reseeded on system resumption [ 465.167163][ T30] audit: type=1400 audit(1780210576.459:1838): avc: denied { open } for pid=9971 comm="syz.0.1090" path="/dev/usbmon5" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 465.191400][ T30] audit: type=1400 audit(1780210576.729:1839): avc: denied { firmware_load } for pid=9971 comm="syz.0.1090" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 465.338031][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 465.347376][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 465.390270][ T9980] random: crng reseeded on system resumption [ 465.453078][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.463551][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 465.473067][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'. [ 465.507987][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.527400][ T9984] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 465.541312][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 465.550181][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.564673][ T9985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9985 comm=syz.1.1093 [ 465.642892][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.089070][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 467.128052][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.138699][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.148208][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 467.158301][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.175396][ T9] usb 4-1: config 0 descriptor?? [ 467.180233][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 467.243564][ T6879] usb 4-1: USB disconnect, device number 40 [ 467.272590][ T4949] usb 5-1: USB disconnect, device number 52 [ 467.499199][ T9994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1096'. [ 467.569975][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1097'. [ 467.957495][ T30] audit: type=1400 audit(1780210580.189:1840): avc: denied { setopt } for pid=10000 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 468.811420][T10015] random: crng reseeded on system resumption [ 468.963275][ T30] audit: type=1400 audit(1780210581.189:1841): avc: denied { bind } for pid=10017 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 469.115132][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 469.162158][ T30] audit: type=1400 audit(1780210581.219:1842): avc: denied { accept } for pid=10017 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 469.183745][ T30] audit: type=1400 audit(1780210581.219:1843): avc: denied { write } for pid=10017 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 469.226389][ T30] audit: type=1400 audit(1780210581.459:1844): avc: denied { map } for pid=10022 comm="syz.4.1106" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 469.405259][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.419223][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.431252][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 469.567501][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.781851][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.782403][T10025] FAULT_INJECTION: forcing a failure. [ 469.782403][T10025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.859480][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.893976][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.0.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.894005][T10025] Tainted: [L]=SOFTLOCKUP [ 469.894011][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.894020][T10025] Call Trace: [ 469.894026][T10025] [ 469.894033][T10025] dump_stack_lvl+0x100/0x190 [ 469.894059][T10025] should_fail_ex.cold+0x5/0xa [ 469.894083][T10025] _copy_to_user+0x32/0xd0 [ 469.894106][T10025] simple_read_from_buffer+0xcb/0x170 [ 469.894128][T10025] proc_fail_nth_read+0x1af/0x230 [ 469.894148][T10025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.894168][T10025] ? rw_verify_area+0xce/0x6d0 [ 469.894184][T10025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.894202][T10025] vfs_read+0x1e4/0xb30 [ 469.894223][T10025] ? __pfx_vfs_read+0x10/0x10 [ 469.894240][T10025] ? __fget_files+0x215/0x3d0 [ 469.894266][T10025] ? __fget_files+0x21f/0x3d0 [ 469.894293][T10025] ksys_read+0x12a/0x250 [ 469.894311][T10025] ? __pfx_ksys_read+0x10/0x10 [ 469.894331][T10025] ? rcu_is_watching+0x12/0xc0 [ 469.894358][T10025] do_syscall_64+0x115/0x870 [ 469.894380][T10025] ? clear_bhb_loop+0x40/0x90 [ 469.894401][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.894418][T10025] RIP: 0033:0x7f4e3595d68e [ 469.894433][T10025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.894448][T10025] RSP: 002b:00007f4e3678efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.894466][T10025] RAX: ffffffffffffffda RBX: 00007f4e3678f6c0 RCX: 00007f4e3595d68e [ 469.894477][T10025] RDX: 000000000000000f RSI: 00007f4e3678f0a0 RDI: 0000000000000006 [ 469.894486][T10025] RBP: 00007f4e3678f090 R08: 0000000000000000 R09: 0000000000000000 [ 469.894497][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.894506][T10025] R13: 00007f4e35c16038 R14: 00007f4e35c15fa0 R15: 00007ffc6e3db8c8 [ 469.894530][T10025] [ 470.152689][ T9] usb 2-1: config 0 descriptor?? [ 470.165793][T10027] tipc: Enabling of bearer rejected, failed to enable media [ 470.254270][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1107'. [ 470.349831][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 470.541535][ T10] psmouse serio4: Failed to reset mouse on : -5 [ 470.601212][ T4949] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 470.663467][ T9] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 470.761325][ T4949] usb 5-1: Using ep0 maxpacket: 32 [ 470.780881][ T4949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.815968][ T4949] usb 5-1: config 255 has an invalid interface number: 8 but max is 3 [ 470.844917][ T4949] usb 5-1: config 255 has an invalid interface number: 207 but max is 3 [ 470.897699][ T4949] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 470.938565][ T4949] usb 5-1: config 255 has 2 interfaces, different from the descriptor's value: 4 [ 470.972483][ T4949] usb 5-1: config 255 has no interface number 0 [ 470.994629][ T4949] usb 5-1: config 255 has no interface number 1 [ 471.016344][ T4949] usb 5-1: config 255 interface 207 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 471.059561][ T4949] usb 5-1: config 255 interface 8 has no altsetting 0 [ 471.080485][ T4949] usb 5-1: config 255 interface 207 has no altsetting 0 [ 471.116417][ T4949] usb 5-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=31.cc [ 471.154680][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.165227][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 471.186740][ T4949] usb 5-1: Product: syz [ 471.201549][ T4949] usb 5-1: Manufacturer: syz [ 471.206945][ T4949] usb 5-1: SerialNumber: syz [ 471.276972][ T30] audit: type=1400 audit(1780210583.509:1845): avc: denied { name_connect } for pid=10034 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 471.426029][T10036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.484635][ T4949] usb 5-1: USB disconnect, device number 53 [ 471.642375][T10042] xt_bpf: check failed: parse error [ 472.971546][ T5751] usb 2-1: reset high-speed USB device number 45 using dummy_hcd [ 473.150347][T10055] random: crng reseeded on system resumption [ 473.614811][T10061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1116'. [ 473.771637][ T5733] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 473.797913][ T30] audit: type=1400 audit(1780210586.029:1846): avc: denied { read } for pid=10067 comm="syz.4.1120" path="socket:[26288]" dev="sockfs" ino=26288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 473.943750][ T5733] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.956301][ T5733] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.977992][ T5733] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 473.987588][ T5733] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 473.998536][ T5733] usb 3-1: Product: syz [ 474.003276][ T5733] usb 3-1: Manufacturer: syz [ 474.042827][ T5733] hub 3-1:4.0: USB hub found [ 474.049633][T10071] tipc: New replicast peer: 172.30.0.5 [ 474.089781][T10071] tipc: Enabled bearer , priority 10 [ 474.114593][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 474.125673][T10070] tipc: Disabling bearer [ 474.150910][ T5741] usb 2-1: USB disconnect, device number 45 [ 474.236418][ T5733] hub 3-1:4.0: 2 ports detected [ 474.441722][ T5733] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 474.457783][ T5733] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 474.554891][ T5733] usb 3-1: USB disconnect, device number 56 [ 474.911274][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 475.292910][ T5733] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 475.355249][T10093] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.671273][ T5733] usb 4-1: device descriptor read/64, error -71 [ 476.304654][ T10] input: PS/2 Generic Mouse as /devices/serio4/input/input44 [ 476.694603][ T5733] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.696560][ T10] psmouse serio4: Failed to enable mouse on [ 476.846639][ T5751] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 476.862742][T10100] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1131'. [ 476.901318][ T5733] usb 4-1: device descriptor read/64, error -71 [ 476.953844][T10106] random: crng reseeded on system resumption [ 478.205029][ T5733] usb usb4-port1: attempt power cycle [ 478.207607][ T5751] usb 2-1: Using ep0 maxpacket: 32 [ 478.269685][ T4949] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 478.339572][ T5751] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 478.407339][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.455279][ T5751] usb 2-1: Product: syz [ 478.457467][ T4949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.498555][ T5751] usb 2-1: Manufacturer: syz [ 478.514155][ T4949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.544793][ T5751] usb 2-1: SerialNumber: syz [ 478.571707][ T4949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.635852][ T4949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.688614][ T4949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.714191][ T4949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.745416][ T4949] usb 3-1: config 0 descriptor?? [ 478.901482][ T5751] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 478.942362][ T30] audit: type=1400 audit(1780210591.149:1847): avc: denied { read } for pid=10097 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 478.972143][ T5751] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 479.007664][ T5751] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 479.037438][ T5751] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 479.235702][ T6879] usb 2-1: USB disconnect, device number 46 [ 479.285573][ T6879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 479.308397][ T4949] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 479.383346][ T6879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 479.444516][ T6879] visor 2-1:1.0: device disconnected [ 480.481264][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 480.744421][ T30] audit: type=1400 audit(1780210592.979:1848): avc: denied { ioctl } for pid=10127 comm="syz.4.1134" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 481.038297][ T30] audit: type=1400 audit(1780210593.269:1849): avc: denied { create } for pid=10130 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 481.334391][ T5726] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 481.918799][ T30] audit: type=1400 audit(1780210594.099:1850): avc: denied { create } for pid=10144 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.741407][ T6879] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 482.788451][ T30] audit: type=1400 audit(1780210595.019:1851): avc: denied { bind } for pid=10149 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 482.901529][ T6879] usb 2-1: Using ep0 maxpacket: 32 [ 483.048031][ T6879] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 483.077490][ T6879] usb 2-1: config 0 has no interface number 0 [ 483.435631][ T6879] usb 2-1: config 0 interface 184 has no altsetting 0 [ 483.503713][ T6879] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 483.623233][ T5751] usb 3-1: USB disconnect, device number 57 [ 483.651749][ T6879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.659879][ T6879] usb 2-1: Product: syz [ 483.664191][ T6879] usb 2-1: Manufacturer: syz [ 483.668866][ T6879] usb 2-1: SerialNumber: syz [ 484.408125][ T6879] usb 2-1: config 0 descriptor?? [ 484.432867][T10170] FAULT_INJECTION: forcing a failure. [ 484.432867][T10170] name failslab, interval 1, probability 0, space 0, times 0 [ 484.452242][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.0.1151 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.452270][T10170] Tainted: [L]=SOFTLOCKUP [ 484.452276][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.452285][T10170] Call Trace: [ 484.452291][T10170] [ 484.452298][T10170] dump_stack_lvl+0x100/0x190 [ 484.452323][T10170] should_fail_ex.cold+0x5/0xa [ 484.452347][T10170] should_failslab+0xc2/0x120 [ 484.452365][T10170] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 484.452390][T10170] ? __alloc_skb+0x140/0x710 [ 484.452418][T10170] __alloc_skb+0x140/0x710 [ 484.452438][T10170] ? __alloc_skb+0x5b7/0x710 [ 484.452459][T10170] ? __pfx___alloc_skb+0x10/0x10 [ 484.452485][T10170] _sctp_make_chunk+0x51/0x270 [ 484.452508][T10170] sctp_make_control+0x2f/0x2d0 [ 484.452530][T10170] sctp_make_init+0x6d0/0xda0 [ 484.452566][T10170] ? __pfx_sctp_make_init+0x10/0x10 [ 484.452592][T10170] ? kernel_text_address+0x8d/0x100 [ 484.452616][T10170] ? unwind_get_return_address+0x59/0xa0 [ 484.452641][T10170] ? arch_stack_walk+0xa6/0xf0 [ 484.452667][T10170] ? sctp_sm_lookup_event+0x10e/0x520 [ 484.452692][T10170] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 484.452719][T10170] sctp_sf_do_prm_asoc+0xbf/0x360 [ 484.452739][T10170] ? __pfx_sctp_pname+0x10/0x10 [ 484.452762][T10170] sctp_do_sm+0x17a/0x5be0 [ 484.452789][T10170] ? kasan_save_stack+0x3f/0x50 [ 484.452805][T10170] ? kasan_save_stack+0x30/0x50 [ 484.452819][T10170] ? kasan_save_track+0x14/0x30 [ 484.452836][T10170] ? __pfx_sctp_do_sm+0x10/0x10 [ 484.452856][T10170] ? sctp_sendmsg+0x1144/0x22e0 [ 484.452875][T10170] ? __sys_sendto+0x446/0x4b0 [ 484.452898][T10170] ? __x64_sys_sendto+0xe0/0x1c0 [ 484.452920][T10170] ? do_syscall_64+0x115/0x870 [ 484.452943][T10170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.452988][T10170] ? __sk_mem_raise_allocated+0x789/0x1580 [ 484.453023][T10170] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 484.453047][T10170] sctp_sendmsg_to_asoc+0xa6a/0x1c50 [ 484.453064][T10170] ? __pfx___asan_memcpy+0x10/0x10 [ 484.453090][T10170] ? sctp_assoc_set_primary+0x276/0x310 [ 484.453110][T10170] ? sctp_assoc_add_peer+0x252/0x14f0 [ 484.453134][T10170] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 484.453152][T10170] ? sctp_connect_new_asoc+0x41e/0x770 [ 484.453173][T10170] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 484.453195][T10170] ? selinux_sctp_bind_connect+0x112/0x2a0 [ 484.453229][T10170] sctp_sendmsg+0x1144/0x22e0 [ 484.453257][T10170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.453283][T10170] ? __pfx_sock_has_perm+0x10/0x10 [ 484.453318][T10170] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.453340][T10170] inet_sendmsg+0x11c/0x140 [ 484.453366][T10170] __sys_sendto+0x446/0x4b0 [ 484.453389][T10170] ? __pfx_inet_sendmsg+0x10/0x10 [ 484.453414][T10170] ? __pfx___sys_sendto+0x10/0x10 [ 484.453459][T10170] ? ksys_write+0x1ac/0x250 [ 484.453480][T10170] ? __pfx_ksys_write+0x10/0x10 [ 484.453502][T10170] __x64_sys_sendto+0xe0/0x1c0 [ 484.453525][T10170] ? do_syscall_64+0x90/0x870 [ 484.453552][T10170] ? lockdep_hardirqs_on+0x78/0x100 [ 484.453574][T10170] do_syscall_64+0x115/0x870 [ 484.453595][T10170] ? clear_bhb_loop+0x40/0x90 [ 484.453617][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.453634][T10170] RIP: 0033:0x7f4e3599ce59 [ 484.453649][T10170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.453665][T10170] RSP: 002b:00007f4e3678f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.453683][T10170] RAX: ffffffffffffffda RBX: 00007f4e35c15fa0 RCX: 00007f4e3599ce59 [ 484.453694][T10170] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 484.453704][T10170] RBP: 00007f4e3678f090 R08: 0000200000000100 R09: 000000000000001c [ 484.453714][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.453724][T10170] R13: 00007f4e35c16038 R14: 00007f4e35c15fa0 R15: 00007ffc6e3db8c8 [ 484.453749][T10170] [ 484.462782][ T30] audit: type=1400 audit(1780210596.699:1852): avc: denied { watch watch_reads } for pid=10171 comm="syz.3.1152" path="/249" dev="tmpfs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 484.899990][ T6879] usb 2-1: can't set config #0, error -71 [ 484.934962][T10173] comedi comedi4: bad chanlist[1]=0x000003ff chan=1023 range length=2 [ 484.959406][T10173] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1150'. [ 484.968336][T10173] 0·: renamed from hsr0 (while UP) [ 485.004901][ T30] audit: type=1400 audit(1780210597.189:1853): avc: denied { bind } for pid=10175 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.027076][ T6879] usb 2-1: USB disconnect, device number 47 [ 485.035120][ T30] audit: type=1400 audit(1780210597.189:1854): avc: denied { connect } for pid=10175 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.139932][T10173] 0·: entered allmulticast mode [ 485.170058][ T30] audit: type=1400 audit(1780210597.189:1855): avc: denied { read } for pid=10175 comm="syz.1.1154" path="socket:[27492]" dev="sockfs" ino=27492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.216020][T10173] hsr_slave_0: entered allmulticast mode [ 485.253275][T10173] hsr_slave_1: entered allmulticast mode [ 485.399363][T10173] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 485.421408][ T5733] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 485.576076][T10189] random: crng reseeded on system resumption [ 486.101323][ T5741] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 486.176448][T10196] netlink: 'syz.0.1157': attribute type 4 has an invalid length. [ 486.184283][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'. [ 486.467963][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 486.485205][ T5733] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 486.491273][ T5741] usb 5-1: Using ep0 maxpacket: 32 [ 486.515129][ T5733] usb 4-1: can't read configurations, error -71 [ 486.516708][ T5741] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 486.574520][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.600106][ T5741] usb 5-1: Product: syz [ 486.613280][ T5741] usb 5-1: Manufacturer: syz [ 486.626359][ T5741] usb 5-1: SerialNumber: syz [ 486.781166][ T4949] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 486.957219][ T5741] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 486.958018][ T4949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.031051][ T5741] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 487.039724][ T4949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.098967][ T5741] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 487.133610][ T4949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 487.173938][ T4949] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.179989][ T5741] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 487.199888][ T4949] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.222585][ T4949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.232553][ T5741] usb 5-1: USB disconnect, device number 54 [ 487.241748][ T4949] usb 1-1: config 0 descriptor?? [ 487.273394][ T5741] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 487.391633][ T5741] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 487.427113][ T5741] visor 5-1:1.0: device disconnected [ 487.690607][ T4949] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 488.920068][ T30] audit: type=1400 audit(1780210601.119:1856): avc: denied { create } for pid=10221 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 489.634086][ T30] audit: type=1400 audit(1780210601.119:1857): avc: denied { write } for pid=10221 comm="syz.1.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 489.681211][ T5734] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 489.831169][ T4949] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 489.861170][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 489.886209][ T5734] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 489.897136][ T5734] usb 5-1: config 0 has no interface number 0 [ 489.904592][ T5734] usb 5-1: config 0 interface 184 has no altsetting 0 [ 489.916398][ T5734] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.926036][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.934338][ T5734] usb 5-1: Product: syz [ 489.938729][ T5734] usb 5-1: Manufacturer: syz [ 489.943867][ T5734] usb 5-1: SerialNumber: syz [ 489.963692][ T5734] usb 5-1: config 0 descriptor?? [ 490.041225][ T806] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 490.291177][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 490.304944][ T806] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 490.314481][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.323429][ T806] usb 2-1: Product: syz [ 490.327730][ T806] usb 2-1: Manufacturer: syz [ 490.332515][ T806] usb 2-1: SerialNumber: syz [ 490.592655][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 490.627930][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.658589][ T806] usb 2-1: palm_os_4_probe - error -110 getting connection info [ 490.681705][ T806] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 490.694415][ T806] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 490.733757][ T806] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 490.771847][ T806] usb 2-1: USB disconnect, device number 48 [ 490.813804][ T806] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 490.860363][ T806] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 490.901303][ T806] visor 2-1:1.0: device disconnected [ 491.426053][T10244] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1169'. [ 491.550450][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 491.577169][T10248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 491.603974][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 491.647031][ T5734] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 491.968581][ T5733] usb 1-1: USB disconnect, device number 33 [ 492.035468][ T5734] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 492.239058][T10257] tmpfs: Unknown parameter 'h' [ 492.391545][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 493.289457][ T5734] usb 5-1: USB disconnect, device number 55 [ 493.456462][ T30] audit: type=1400 audit(1780210605.689:1858): avc: denied { getopt } for pid=10265 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 494.221227][ T5741] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 494.399759][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.510999][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.641191][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.660889][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.675915][ T30] audit: type=1400 audit(1780210606.909:1859): avc: denied { append } for pid=10290 comm="syz.1.1182" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 494.719301][ T5741] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.782918][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.840393][ T5741] usb 4-1: config 0 descriptor?? [ 495.316399][ T5741] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 495.571331][ T5733] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 495.732891][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 495.750737][ T5733] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.780763][ T5733] usb 1-1: config 0 has no interface number 0 [ 495.806873][ T5733] usb 1-1: config 0 interface 184 has no altsetting 0 [ 495.844303][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.852687][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.874642][ T5733] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 496.183447][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.191821][ T5733] usb 1-1: Product: syz [ 496.270028][ T5733] usb 1-1: Manufacturer: syz [ 496.274730][ T5733] usb 1-1: SerialNumber: syz [ 496.282205][ T5733] usb 1-1: config 0 descriptor?? [ 496.350911][T10311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 496.368850][ T5623] Bluetooth: hci0: unexpected event for opcode 0x200a [ 496.945185][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.972751][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 497.281560][ T4949] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 497.391220][ T5741] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 497.441290][ T4949] usb 5-1: Using ep0 maxpacket: 8 [ 497.450685][ T4949] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 497.460056][ T4949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.468484][ T4949] usb 5-1: Product: syz [ 497.472771][ T4949] usb 5-1: Manufacturer: syz [ 497.477538][ T4949] usb 5-1: SerialNumber: syz [ 497.485351][ T4949] usb 5-1: config 0 descriptor?? [ 497.494292][ T4949] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 497.503520][ T4949] dvb-usb: bulk message failed: -22 (2/0) [ 497.515133][ T4949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.528441][ T4949] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 497.537389][ T4949] usb 5-1: media controller created [ 497.553670][ T4949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.703173][ T4949] dvb-usb: bulk message failed: -22 (1/0) [ 497.796845][ T4949] DVB: Unable to find symbol mt352_attach() [ 497.803843][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 497.815327][ T4949] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 497.827733][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 497.851277][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 497.873763][ T5733] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 497.978458][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.020198][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.051340][ T4949] rc_core: IR keymap rc-dvico-portable not found [ 498.077077][ T4949] Registered IR keymap rc-empty [ 498.243349][ T4949] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 498.278186][ T4949] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input49 [ 498.355199][ T4949] dvb-usb: schedule remote query interval to 100 msecs. [ 498.373205][ T4949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 498.485355][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 498.669878][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 498.862337][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 498.888617][ T30] audit: type=1400 audit(1780210611.109:1860): avc: denied { mounton } for pid=10335 comm="syz.3.1195" path="/syzcgroup/unified/syz3" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 498.982576][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 499.118947][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 499.268204][ T5741] usb 4-1: device descriptor read/64, error -71 [ 499.346597][ T6879] usb 1-1: USB disconnect, device number 34 [ 499.370760][ T4949] dvb-usb: bulk message failed: -22 (1/0) [ 499.494782][ T4949] dvb-usb: bulk message failed: -22 (1/0) [ 499.511456][ T5741] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 499.623420][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 499.661274][ T5741] usb 4-1: device descriptor read/64, error -71 [ 499.741150][ T6879] dvb-usb: bulk message failed: -22 (1/0) [ 499.838498][T10331] SELinux: failed to load policy [ 499.911224][ T5741] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 499.926758][ T4949] dvb-usb: bulk message failed: -22 (1/0) [ 499.984106][ T5741] usb 4-1: device descriptor read/8, error -71 [ 500.041821][ T4949] dvb-usb: bulk message failed: -22 (1/0) [ 500.138111][ T4949] usb 5-1: USB disconnect, device number 56 [ 500.241734][ T5741] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 500.242735][ T4949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 500.312289][ T5741] usb 4-1: device descriptor read/8, error -71 [ 500.422722][ T5726] usb 4-1: USB disconnect, device number 46 [ 500.592111][ T5726] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 500.738143][T10357] tipc: Enabled bearer , priority 0 [ 500.746456][ T30] audit: type=1326 audit(1780210612.979:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.2.1201" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f939ce59 code=0x7ffe0000 [ 500.790535][ T5726] usb 4-1: device descriptor read/64, error -71 [ 500.843028][ T30] audit: type=1400 audit(1780210613.079:1862): avc: denied { mounton } for pid=10358 comm="syz.4.1202" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 501.151335][ T5726] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 501.315293][ T5726] usb 4-1: device descriptor read/64, error -71 [ 501.431784][ T5726] usb usb4-port1: attempt power cycle [ 501.684726][T10364] random: crng reseeded on system resumption [ 501.694940][T10357] tipc: Disabling bearer [ 501.793442][ T5726] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 501.822451][ T5726] usb 4-1: device descriptor read/8, error -71 [ 503.102148][ T5751] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 503.172206][ T5726] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 503.206150][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.228833][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.243414][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 503.264443][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.278272][ T5726] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.287747][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 503.293357][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.366268][ T5751] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 503.378044][ T5726] usb 4-1: config 0 descriptor?? [ 503.440512][ T5741] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 503.473551][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.648737][ T5751] usb 3-1: Product: syz [ 503.655078][ T5751] usb 3-1: Manufacturer: syz [ 503.660008][ T5751] usb 3-1: SerialNumber: syz [ 503.781375][ T5741] usb 1-1: device descriptor read/64, error -71 [ 503.956519][ T5726] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 503.986533][ T5751] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 503.997692][ T5751] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 504.031208][ T5741] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 504.039563][ T5751] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 504.111001][ T5751] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 504.140617][ T5751] usb 3-1: USB disconnect, device number 58 [ 504.177720][ T5751] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 504.191453][ T5741] usb 1-1: device descriptor read/64, error -71 [ 504.388258][ T5751] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 504.407395][ T5751] visor 3-1:1.0: device disconnected [ 504.461825][ T5741] usb usb1-port1: attempt power cycle [ 504.821364][ T5741] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 504.894183][ T5741] usb 1-1: device descriptor read/8, error -71 [ 505.603292][ T5741] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 505.634395][ T5741] usb 1-1: device descriptor read/8, error -71 [ 505.641897][ T30] audit: type=1400 audit(1780210617.879:1863): avc: denied { execute } for pid=10396 comm="syz.2.1212" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 505.701876][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 505.733473][ T30] audit: type=1400 audit(1780210617.929:1864): avc: denied { setopt } for pid=10400 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.754040][ T5733] usb 4-1: reset high-speed USB device number 50 using dummy_hcd [ 505.846684][ T5741] usb usb1-port1: unable to enumerate USB device [ 506.295476][ T30] audit: type=1400 audit(1780210618.529:1865): avc: denied { kexec_image_load } for pid=10407 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 506.315869][T10409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1217'. [ 506.396180][ T4949] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 506.541189][ T4949] usb 3-1: device descriptor read/64, error -71 [ 506.795319][ T5734] usb 4-1: USB disconnect, device number 50 [ 507.033576][ T4949] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 507.191585][ T4949] usb 3-1: device descriptor read/64, error -71 [ 507.228153][T10406] SELinux: failed to load policy [ 507.322010][ T4949] usb usb3-port1: attempt power cycle [ 507.691410][ T4949] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 507.722027][ T4949] usb 3-1: device descriptor read/8, error -71 [ 508.921245][T10434] program syz.1.1222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.041615][T10434] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 509.343970][ T30] audit: type=1400 audit(1780210621.039:1866): avc: denied { append } for pid=10427 comm="syz.1.1222" name="sg0" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 509.901224][ T4949] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 510.491885][ T30] audit: type=1400 audit(1780210622.729:1867): avc: denied { create } for pid=10441 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 510.521723][ T4949] usb 3-1: device not accepting address 62, error -71 [ 510.537410][ T4949] usb usb3-port1: unable to enumerate USB device [ 510.553117][ T30] audit: type=1400 audit(1780210622.779:1868): avc: denied { connect } for pid=10441 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 510.594163][ T30] audit: type=1400 audit(1780210622.829:1869): avc: denied { write } for pid=10441 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 510.707917][ T5734] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 510.881242][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 510.895717][ T5734] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 510.905011][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.914907][ T5734] usb 4-1: Product: syz [ 510.919176][ T5734] usb 4-1: Manufacturer: syz [ 510.923967][ T4949] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 510.934120][ T5734] usb 4-1: SerialNumber: syz [ 511.084516][ T4949] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 511.100769][ T4949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.133687][ T4949] usb 3-1: config 0 descriptor?? [ 511.163441][ T4949] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 511.303551][ T5734] usb 4-1: palm_os_4_probe - error -110 getting connection info [ 511.320338][ T5734] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 511.331340][T10449] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10450] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10449] [ 511.353310][ T5734] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 511.382711][ T5734] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 511.417027][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.426820][ T5734] usb 4-1: USB disconnect, device number 51 [ 511.446082][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.446536][T10452] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 511.484684][ T5734] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 511.498174][ T5734] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 511.510257][ T4949] gp8psk: usb in 128 operation failed. [ 511.533667][ T4949] gp8psk: usb in 137 operation failed. [ 511.558581][T10452] overlayfs: missing 'lowerdir' [ 511.564164][ T5734] visor 4-1:1.0: device disconnected [ 511.578465][ T4949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.624340][ T4949] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 511.660738][ T4949] usb 3-1: media controller created [ 511.685099][ T4949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.078859][ T4949] gp8psk_fe: Frontend attached [ 512.096033][ T4949] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 512.129426][ T4949] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 512.242811][ T4949] gp8psk: usb in 138 operation failed. [ 512.259754][ T4949] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 512.281066][ T4949] gp8psk: found Genpix USB device pID = 203 (hex) [ 512.313829][ T4949] usb 3-1: USB disconnect, device number 63 [ 512.393927][T10461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1231'. [ 512.604353][ T30] audit: type=1400 audit(1780210624.779:1870): avc: denied { accept } for pid=10458 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.001309][T10238] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 513.256207][T10238] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.318473][T10238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.375022][T10238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.428005][T10238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.502945][T10238] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.560464][T10238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.612551][ T4949] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 513.651327][T10238] usb 2-1: config 0 descriptor?? [ 513.791378][ T30] audit: type=1400 audit(1780210626.019:1871): avc: denied { mount } for pid=10476 comm="syz.3.1236" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 513.902115][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 514.004922][ T4949] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 514.092840][T10238] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 514.143148][ T4949] usb 3-1: device descriptor read/64, error -71 [ 514.403163][ T4949] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 514.501226][ T6879] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 514.551279][ T4949] usb 3-1: device descriptor read/64, error -71 [ 514.654005][ T6879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.664454][ T4949] usb usb3-port1: attempt power cycle [ 514.678889][ T6879] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 514.698318][ T6879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.706710][ T6879] usb 4-1: Product: syz [ 514.711010][ T6879] usb 4-1: Manufacturer: syz [ 514.716285][ T6879] usb 4-1: SerialNumber: syz [ 514.727359][ T6879] usb 4-1: config 0 descriptor?? [ 514.952088][T10482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.963439][T10482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.977704][ T6879] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -71 [ 515.011193][ T4949] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 515.020039][ T6879] usb 4-1: USB disconnect, device number 52 [ 515.051939][ T4949] usb 3-1: device descriptor read/8, error -71 [ 515.291312][ T4949] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 515.322623][ T4949] usb 3-1: device descriptor read/8, error -71 [ 515.443838][ T4949] usb usb3-port1: unable to enumerate USB device [ 515.453417][T10492] kAFS: unable to lookup cell 'ÿ' [ 515.975190][T10494] random: crng reseeded on system resumption [ 516.052813][ T5733] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 516.393874][ T6879] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 516.571794][ T6879] usb 4-1: Using ep0 maxpacket: 32 [ 516.589300][ T6879] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 516.598601][ T6879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.607382][ T6879] usb 4-1: Product: syz [ 516.622653][ T6879] usb 4-1: Manufacturer: syz [ 516.637381][ T6879] usb 4-1: SerialNumber: syz [ 516.658886][ T6879] usb 4-1: config 0 descriptor?? [ 516.684553][ T6879] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 516.842761][ T4949] usb 2-1: USB disconnect, device number 49 [ 516.951359][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 517.322520][ T30] audit: type=1400 audit(1780210629.559:1872): avc: denied { read } for pid=5281 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 517.831222][ T6879] gspca_topro: reg_w err -110 [ 517.861191][ T6879] gspca_topro: Sensor soi763a [ 518.951487][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 519.008485][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 519.092023][T10549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=10549 comm=syz.3.1241 [ 519.143142][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.215602][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 519.250074][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 519.262144][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.278513][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.290447][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.348774][ T10] usb 3-1: config 0 descriptor?? [ 519.661204][ T5734] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 519.792150][ T10] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 519.811886][ T5734] usb 2-1: device descriptor read/64, error -71 [ 519.942046][ T6879] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 520.071221][ T5734] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 520.091446][ T6879] usb 5-1: Using ep0 maxpacket: 8 [ 520.097943][ T6879] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 520.107202][ T6879] usb 5-1: config 179 has no interface number 0 [ 520.113842][ T6879] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 520.124968][ T6879] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 520.136606][ T6879] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.148204][ T6879] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 520.160523][ T6879] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 520.174268][ T6879] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 520.183492][ T6879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.195415][T10557] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 520.201202][ T5734] usb 2-1: device descriptor read/64, error -71 [ 520.343887][ T5734] usb usb2-port1: attempt power cycle [ 520.381909][ T5726] usb 4-1: USB disconnect, device number 53 [ 520.505155][ T6879] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input53 [ 520.521778][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 520.681355][ T5734] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 520.711270][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 520.712308][ T5734] usb 2-1: device descriptor read/8, error -71 [ 520.728148][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.745226][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.757197][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.772878][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.782808][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.804039][ T10] usb 1-1: config 0 descriptor?? [ 520.961340][ T5734] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 520.976982][ T6879] usb 5-1: USB disconnect, device number 57 [ 520.983044][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 520.983093][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 521.021633][ T5734] usb 2-1: device descriptor read/8, error -71 [ 521.120929][ T30] audit: type=1400 audit(1780210633.349:1873): avc: denied { create } for pid=10569 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.145876][ T5734] usb usb2-port1: unable to enumerate USB device [ 521.153466][ T30] audit: type=1400 audit(1780210633.379:1874): avc: denied { connect } for pid=10569 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 521.311636][ T10] microsoft 0003:045E:07DA.0024: item fetching failed at offset 30/34 [ 521.321474][ T10] microsoft 0003:045E:07DA.0024: parse failed [ 521.327893][ T10] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 521.516636][ T5751] usb 1-1: USB disconnect, device number 39 [ 521.531484][ T10] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 521.930820][T10578] random: crng reseeded on system resumption [ 522.110884][T10581] tipc: New replicast peer: 172.30.0.5 [ 522.127059][T10581] tipc: Enabled bearer , priority 10 [ 522.137959][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'. [ 522.148314][T10581] tipc: Disabling bearer [ 522.492894][ T5726] usb 3-1: USB disconnect, device number 68 [ 523.218962][T10603] serio: Serial port ptm0 [ 523.668151][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1272'. [ 523.801176][ T5734] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 524.082312][ T5734] usb 1-1: no configurations [ 524.088590][ T5734] usb 1-1: can't read configurations, error -22 [ 524.242132][ T5734] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 525.011280][ T6879] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 525.063303][ T5734] usb 1-1: no configurations [ 525.080214][ T5734] usb 1-1: can't read configurations, error -22 [ 525.096425][ T5734] usb usb1-port1: attempt power cycle [ 525.174038][ T6879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.194258][ T6879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.209627][ T6879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.220842][ T6879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.245511][ T6879] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.276374][ T6879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.304077][ T6879] usb 4-1: config 0 descriptor?? [ 525.461377][ T5734] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 525.482407][ T5734] usb 1-1: no configurations [ 525.510551][ T5734] usb 1-1: can't read configurations, error -22 [ 525.551389][ T5726] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 525.661456][ T5734] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 525.702447][ T5734] usb 1-1: no configurations [ 525.708803][ T5734] usb 1-1: can't read configurations, error -22 [ 525.721254][ T5726] usb 5-1: device descriptor read/64, error -71 [ 525.729946][ T5734] usb usb1-port1: unable to enumerate USB device [ 525.757339][ T6879] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 525.961259][ T5726] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 526.141533][ T5726] usb 5-1: device descriptor read/64, error -71 [ 526.301479][ T5726] usb usb5-port1: attempt power cycle [ 526.431307][ T5734] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 526.592675][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 526.602390][ T5734] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 526.614184][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.623406][ T5734] usb 2-1: Product: syz [ 526.628861][ T5734] usb 2-1: Manufacturer: syz [ 526.634839][ T5734] usb 2-1: SerialNumber: syz [ 526.740014][T10634] tipc: New replicast peer: 172.30.0.1 [ 526.748859][T10634] tipc: Enabled bearer , priority 10 [ 526.758198][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 526.770175][T10634] tipc: Disabling bearer [ 526.843825][ T5726] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 526.892130][ T5726] usb 5-1: device descriptor read/8, error -71 [ 526.937679][ T5734] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 526.958068][ T5734] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 526.990901][ T5734] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 527.005848][ T5734] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 527.030656][ T5734] usb 2-1: USB disconnect, device number 54 [ 527.067656][ T5624] udevd[5624]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 527.083318][ T5734] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 527.099797][ T5624] udevd[5624]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 527.116564][ T5734] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 527.135726][ T5734] visor 2-1:1.0: device disconnected [ 527.152158][ T5726] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 527.192164][ T5726] usb 5-1: device descriptor read/8, error -71 [ 527.323141][ T5726] usb usb5-port1: unable to enumerate USB device [ 527.524136][ T6879] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 527.533460][ T5734] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 527.730511][ T30] audit: type=1400 audit(1780210639.959:1875): avc: denied { read } for pid=10641 comm="syz.1.1283" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 527.759343][ T6879] usb 3-1: Using ep0 maxpacket: 32 [ 527.780734][ T6879] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 527.791764][ T6879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.799947][ T6879] usb 3-1: Product: syz [ 527.806829][ T6879] usb 3-1: Manufacturer: syz [ 527.814925][ T6879] usb 3-1: SerialNumber: syz [ 528.304168][ T6879] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 528.312690][ T6879] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 528.335576][ T6879] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 528.365047][ T6879] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 528.667876][ T4949] usb 4-1: USB disconnect, device number 54 [ 528.968077][ T10] usb 3-1: USB disconnect, device number 69 [ 529.010460][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 529.032008][T10655] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 529.079884][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 529.113773][ T10] visor 3-1:1.0: device disconnected [ 530.193350][T10664] tipc: Started in network mode [ 530.212817][T10664] tipc: Node identity ac14140f, cluster identity 4711 [ 530.251314][T10664] tipc: New replicast peer: 172.30.0.2 [ 530.276488][T10664] tipc: Enabled bearer , priority 10 [ 530.303678][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 530.328232][T10668] tipc: Disabling bearer [ 530.731471][ T6879] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 531.661274][ T6879] usb 1-1: Using ep0 maxpacket: 32 [ 531.686502][ T6879] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 531.703929][ T6879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.716133][ T6879] usb 1-1: Product: syz [ 531.739075][ T6879] usb 1-1: Manufacturer: syz [ 531.746373][ T6879] usb 1-1: SerialNumber: syz [ 531.751222][ T4949] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 531.922919][ T4949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.959620][ T4949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 531.972344][ T5733] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 532.005253][ T4949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 532.023419][ T4949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.065588][ T4949] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.077280][ T4949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.111937][ T6879] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 532.123835][ T4949] usb 3-1: config 0 descriptor?? [ 532.131240][ T5733] usb 2-1: device descriptor read/64, error -71 [ 532.141045][ T6879] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 532.200429][ T6879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 532.234114][ T6879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 532.297907][ T6879] usb 1-1: USB disconnect, device number 44 [ 532.375268][ T6879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 532.385034][ T5733] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 532.410528][ T6879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 532.428523][ T6879] visor 1-1:1.0: device disconnected [ 532.532380][ T5733] usb 2-1: device descriptor read/64, error -71 [ 532.595932][ T4949] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 532.661896][ T5733] usb usb2-port1: attempt power cycle [ 533.021268][ T5733] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 533.065201][ T5733] usb 2-1: device descriptor read/8, error -71 [ 533.331519][ T5733] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 533.382042][ T5733] usb 2-1: device descriptor read/8, error -71 [ 533.483390][T10700] FAULT_INJECTION: forcing a failure. [ 533.483390][T10700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.519648][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.4.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.519677][T10700] Tainted: [L]=SOFTLOCKUP [ 533.519683][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.519693][T10700] Call Trace: [ 533.519698][T10700] [ 533.519704][T10700] dump_stack_lvl+0x100/0x190 [ 533.519730][T10700] should_fail_ex.cold+0x5/0xa [ 533.519753][T10700] _copy_from_user+0x2e/0xd0 [ 533.519774][T10700] kcm_ioctl+0xd8/0x1290 [ 533.519799][T10700] ? __pfx_kcm_ioctl+0x10/0x10 [ 533.519818][T10700] ? tomoyo_path_number_perm+0x188/0x580 [ 533.519850][T10700] sock_do_ioctl+0x118/0x280 [ 533.519870][T10700] ? __pfx_sock_do_ioctl+0x10/0x10 [ 533.519895][T10700] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 533.519913][T10700] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 533.519943][T10700] sock_ioctl+0x599/0x6b0 [ 533.519964][T10700] ? __pfx_sock_ioctl+0x10/0x10 [ 533.519983][T10700] ? hook_file_ioctl_common+0x149/0x410 [ 533.520006][T10700] ? selinux_file_ioctl+0x13b/0x290 [ 533.520035][T10700] ? selinux_file_ioctl+0xb6/0x290 [ 533.520060][T10700] ? __pfx_sock_ioctl+0x10/0x10 [ 533.520081][T10700] __x64_sys_ioctl+0x18e/0x210 [ 533.520100][T10700] do_syscall_64+0x115/0x870 [ 533.520121][T10700] ? clear_bhb_loop+0x40/0x90 [ 533.520141][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.520158][T10700] RIP: 0033:0x7f465559ce59 [ 533.520172][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.520188][T10700] RSP: 002b:00007f46563c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.520205][T10700] RAX: ffffffffffffffda RBX: 00007f4655815fa0 RCX: 00007f465559ce59 [ 533.520216][T10700] RDX: 0000200000000200 RSI: 00000000000089e0 RDI: 0000000000000003 [ 533.520226][T10700] RBP: 00007f46563c5090 R08: 0000000000000000 R09: 0000000000000000 [ 533.520236][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.520245][T10700] R13: 00007f4655816038 R14: 00007f4655815fa0 R15: 00007ffc3aaf68a8 [ 533.520269][T10700] [ 533.744803][ T5733] usb usb2-port1: unable to enumerate USB device [ 534.059211][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 534.141382][ T5751] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 534.645853][ T5733] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 534.700367][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 534.752371][ T5751] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 535.060362][ T5751] usb 4-1: config 0 has no interface number 0 [ 535.083225][ T5751] usb 4-1: config 0 interface 12 has no altsetting 0 [ 535.134023][ T5751] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 535.461380][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.480104][ T5751] usb 4-1: Product: syz [ 535.489215][ T5751] usb 4-1: Manufacturer: syz [ 535.500359][ T5751] usb 4-1: SerialNumber: syz [ 535.530373][ T5751] usb 4-1: config 0 descriptor?? [ 535.666256][T10718] tipc: New replicast peer: 172.30.0.2 [ 535.684635][ T6879] usb 3-1: USB disconnect, device number 70 [ 535.698665][T10718] tipc: Enabled bearer , priority 10 [ 535.714171][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 535.764705][T10718] tipc: Disabling bearer [ 536.137943][T10727] random: crng reseeded on system resumption [ 536.150358][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 536.733741][ T5751] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 536.749860][ T5751] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 536.780308][ T5751] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 536.797144][ T5751] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 536.851998][ T6879] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 536.854323][ T5751] usb 4-1: USB disconnect, device number 55 [ 536.999384][ T30] audit: type=1400 audit(1780210649.229:1876): avc: denied { write } for pid=10736 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 537.051271][ T6879] usb 5-1: Using ep0 maxpacket: 32 [ 537.060764][ T6879] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 537.070375][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.079048][ T6879] usb 5-1: Product: syz [ 537.084172][ T6879] usb 5-1: Manufacturer: syz [ 537.088791][ T6879] usb 5-1: SerialNumber: syz [ 537.211263][ T5733] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 537.402669][ T5733] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.721371][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 537.767177][ T6879] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 537.774911][ T5733] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.784818][ T6879] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 537.794747][ T5733] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 537.808497][ T6879] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 537.818774][ T5733] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 537.848570][ T6879] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 537.857225][ T5733] usb 1-1: Product: syz [ 537.862176][ T5733] usb 1-1: Manufacturer: syz [ 537.876839][ T6879] usb 5-1: USB disconnect, device number 62 [ 537.893440][ T5733] hub 1-1:4.0: USB hub found [ 537.901477][ T6879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 538.051651][ T5751] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 538.148118][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.191302][ T6879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 538.194222][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.325332][ T6879] visor 5-1:1.0: device disconnected [ 538.330882][ T5733] hub 1-1:4.0: 2 ports detected [ 538.364258][ T5751] usb 4-1: no configurations [ 538.370362][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.382350][ T5751] usb 4-1: can't read configurations, error -22 [ 538.406204][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.452999][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.481666][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.508153][ T10] usb 3-1: config 0 descriptor?? [ 538.531246][ T5751] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 538.552198][ T5733] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 538.561037][ T5733] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 538.593001][ T5733] usb 1-1: USB disconnect, device number 45 [ 538.812381][ T5751] usb 4-1: no configurations [ 538.852661][ T6879] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 538.965632][ T5751] usb 4-1: can't read configurations, error -22 [ 538.978323][ T10] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 538.997475][ T5751] usb usb4-port1: attempt power cycle [ 539.023454][ T6879] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 539.083728][ T6879] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 539.094991][ T6879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.103921][ T6879] usb 5-1: Product: syz [ 539.108138][ T6879] usb 5-1: Manufacturer: syz [ 539.113326][ T6879] usb 5-1: SerialNumber: syz [ 539.183284][ T6879] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 539.382484][ T5751] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 539.422697][ T5751] usb 4-1: no configurations [ 539.428080][ T5751] usb 4-1: can't read configurations, error -22 [ 539.509730][T10757] SELinux: failed to load policy [ 539.571313][ T5751] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 539.616067][ T6879] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 539.617082][ T5751] usb 4-1: no configurations [ 539.657941][ T6879] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 539.672883][ T6879] usb 5-1: media controller created [ 539.673518][ T5751] usb 4-1: can't read configurations, error -22 [ 539.695517][T10759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.707630][ T5751] usb usb4-port1: unable to enumerate USB device [ 539.708412][ T6879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.729921][T10769] tipc: New replicast peer: 172.30.0.2 [ 539.735577][T10769] tipc: Enabled bearer , priority 10 [ 539.756095][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 539.765416][T10769] tipc: Disabling bearer [ 539.964957][T10777] random: crng reseeded on system resumption [ 540.252851][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1321'. [ 540.328198][ T5733] usb 5-1: USB disconnect, device number 63 [ 540.671563][ T9] usb 3-1: reset high-speed USB device number 71 using dummy_hcd [ 543.439303][T10811] netlink: 'syz.0.1329': attribute type 20 has an invalid length. [ 543.696799][ T5751] usb 3-1: USB disconnect, device number 71 [ 544.816883][T10818] tipc: New replicast peer: 172.30.0.1 [ 544.847400][T10818] tipc: Enabled bearer , priority 10 [ 544.879906][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 544.917928][T10818] tipc: Disabling bearer [ 545.031004][ T30] audit: type=1400 audit(1780210657.259:1877): avc: denied { write } for pid=10821 comm="syz.2.1332" name="ptype" dev="proc" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 545.150125][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1332'. [ 545.212123][ T806] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 545.229144][ T30] audit: type=1400 audit(1780210657.459:1878): avc: denied { mount } for pid=10821 comm="syz.2.1332" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 545.283416][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'. [ 545.391147][ T806] usb 5-1: Using ep0 maxpacket: 32 [ 545.405651][ T806] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 545.432527][ T806] usb 5-1: config 0 interface 0 has no altsetting 0 [ 545.450496][ T806] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 545.464237][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.489078][ T806] usb 5-1: config 0 descriptor?? [ 545.500704][T10820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.611183][ T6879] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 545.762179][ T6879] usb 4-1: no configurations [ 545.770687][ T6879] usb 4-1: can't read configurations, error -22 [ 545.868319][ T30] audit: type=1400 audit(1780210658.099:1879): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 545.921473][ T6879] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 546.035204][ T30] audit: type=1400 audit(1780210658.259:1880): avc: denied { append } for pid=10819 comm="syz.4.1331" name="dvr0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 546.128578][ T6879] usb 4-1: no configurations [ 546.135033][ T6879] usb 4-1: can't read configurations, error -22 [ 546.171267][ T5734] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 546.204982][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.219259][ T6879] usb usb4-port1: attempt power cycle [ 546.278992][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.309547][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.351320][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.359506][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.371487][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.384070][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.391262][ T4949] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 546.404835][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 546.422912][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.431603][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.438589][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 546.449749][ T806] hid_mf 0003:0079:1801.0028: unknown main item tag 0x0 [ 546.457433][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 546.468232][ T806] hid_mf 0003:0079:1801.0028: unexpected long global item [ 546.551839][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.565859][ T806] hid_mf 0003:0079:1801.0028: HID parse failed. [ 546.598123][T10820] trusted_key: syz.4.1331 sent an empty control message without MSG_MORE. [ 546.612344][ T4949] usb 3-1: device descriptor read/64, error -71 [ 546.618872][ T806] hid_mf 0003:0079:1801.0028: probe with driver hid_mf failed with error -22 [ 546.631540][ T6879] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 546.645607][ T5734] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.692804][ T806] usb 5-1: USB disconnect, device number 64 [ 546.698841][ T6879] usb 4-1: no configurations [ 546.710129][ T6879] usb 4-1: can't read configurations, error -22 [ 546.716665][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.762472][ T5734] usb 2-1: config 0 descriptor?? [ 546.861547][ T4949] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 546.959053][ T6879] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 546.992633][ T6879] usb 4-1: no configurations [ 546.997484][ T6879] usb 4-1: can't read configurations, error -22 [ 547.004581][ T6879] usb usb4-port1: unable to enumerate USB device [ 547.101287][ T4949] usb 3-1: device descriptor read/64, error -71 [ 547.142450][T10839] SELinux: failed to load policy [ 547.223270][ T4949] usb usb3-port1: attempt power cycle [ 547.297869][T10849] capability: warning: `syz.0.1340' uses 32-bit capabilities (legacy support in use) [ 547.403548][ T5734] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 652.421061][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 652.428032][ C1] rcu: 0-...!: (2 ticks this GP) idle=04ac/1/0x4000000000000000 softirq=51359/51360 fqs=2 [ 652.439112][ C1] rcu: (detected by 1, t=10502 jiffies, g=61977, q=210 ncpus=2) [ 652.446837][ C1] Sending NMI from CPU 1 to CPUs 0: [ 652.446865][ C0] NMI backtrace for cpu 0 [ 652.446880][ C0] CPU: 0 UID: 0 PID: 10850 Comm: syz.0.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.446899][ C0] Tainted: [L]=SOFTLOCKUP [ 652.446904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 652.446912][ C0] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 652.446938][ C0] Code: c0 75 0f 65 8b 05 4c ba 80 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 54 55 53 48 83 ec 08 65 8b 1d 25 76 80 08 65 f7 05 16 76 80 08 [ 652.446951][ C0] RSP: 0018:ffffc90000007e20 EFLAGS: 00000087 [ 652.446963][ C0] RAX: 0000000000000000 RBX: ffff8880b84284d8 RCX: ffffffff81f45a24 [ 652.446973][ C0] RDX: 0000000000000000 RSI: ffffffff8e0006af RDI: ffffffff8c1c4400 [ 652.446981][ C0] RBP: ffffffff81f45f93 R08: 0000000000000001 R09: 0000000000000000 [ 652.446990][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032412540 [ 652.446999][ C0] R13: 0000000000000001 R14: 0000000000000087 R15: ffff8880b8428650 [ 652.447008][ C0] FS: 00007f4e3676e6c0(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 652.447023][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.447032][ C0] CR2: 00007f4e3676dff8 CR3: 000000003ecf1000 CR4: 00000000003526f0 [ 652.447042][ C0] Call Trace: [ 652.447049][ C0] [ 652.447054][ C0] lock_release+0x9a/0x310 [ 652.447074][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 652.447090][ C0] ? __pfx_advance_sched+0x10/0x10 [ 652.447110][ C0] __hrtimer_run_queues+0x383/0xa00 [ 652.447134][ C0] hrtimer_interrupt+0x3e5/0x940 [ 652.447158][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 652.447178][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 652.447195][ C0] [ 652.447200][ C0] [ 652.447205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 652.447221][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x0/0x60 [ 652.447237][ C0] Code: 48 89 df 58 5b e9 70 8c 58 f6 e8 bb a6 84 f6 eb c9 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 48 89 fb 9c 5d fa f7 c5 00 02 00 00 75 39 bf 01 [ 652.447249][ C0] RSP: 0018:ffffc90003ef7c98 EFLAGS: 00000287 [ 652.447261][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81f493f8 [ 652.447270][ C0] RDX: 1ffffffff1c38324 RSI: ffffffff81f49406 RDI: ffff8880b84284c0 [ 652.447279][ C0] RBP: ffff8880b84284c0 R08: 0000000000000005 R09: 0000000000000007 [ 652.447288][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: fffffbfff21ae18a [ 652.447297][ C0] R13: ffff8880b8428508 R14: 000000000d19b81c R15: 0000000000000000 [ 652.447308][ C0] ? clock_was_set+0x118/0x870 [ 652.447327][ C0] ? clock_was_set+0x126/0x870 [ 652.447348][ C0] clock_was_set+0x173/0x870 [ 652.447367][ C0] ? find_held_lock+0x2b/0x80 [ 652.447379][ C0] ? do_settimeofday64+0x315/0x4d0 [ 652.447395][ C0] ? __asan_memcpy+0x3c/0x60 [ 652.447415][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 652.447434][ C0] ? rcu_is_watching+0x12/0xc0 [ 652.447454][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 652.447471][ C0] do_settimeofday64+0x330/0x4d0 [ 652.447487][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 652.447506][ C0] ? security_capable+0x80/0x260 [ 652.447522][ C0] ? uhid_dev_create+0x203/0x530 [ 652.447542][ C0] ? capable+0xd3/0xf0 [ 652.447561][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 652.447578][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 652.447599][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 652.447621][ C0] ? rcu_is_watching+0x12/0xc0 [ 652.447641][ C0] do_syscall_64+0x115/0x870 [ 652.447657][ C0] ? clear_bhb_loop+0x40/0x90 [ 652.447672][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.447686][ C0] RIP: 0033:0x7f4e3599ce59 [ 652.447698][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.447710][ C0] RSP: 002b:00007f4e3676e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 652.447723][ C0] RAX: ffffffffffffffda RBX: 00007f4e35c16090 RCX: 00007f4e3599ce59 [ 652.447732][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 652.447740][ C0] RBP: 00007f4e35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 652.447748][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.447755][ C0] R13: 00007f4e35c16128 R14: 00007f4e35c16090 R15: 00007ffc6e3db8c8 [ 652.447770][ C0] [ 652.447859][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g61977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 652.893964][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 652.903920][ C1] rcu: RCU grace-period kthread stack dump: [ 652.909787][ C1] task:rcu_preempt state:R running task stack:26488 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 652.923264][ C1] Call Trace: [ 652.926529][ C1] [ 652.929452][ C1] __schedule+0x1295/0x67a0 [ 652.933965][ C1] ? __pfx___schedule+0x10/0x10 [ 652.938817][ C1] ? find_held_lock+0x2b/0x80 [ 652.943481][ C1] ? schedule+0x2bf/0x390 [ 652.947804][ C1] schedule+0xdd/0x390 [ 652.951863][ C1] schedule_timeout+0x127/0x280 [ 652.956707][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 652.962066][ C1] ? __pfx_process_timeout+0x10/0x10 [ 652.967342][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 652.973137][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 652.978599][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 652.983356][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 652.988644][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 652.994094][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 652.999028][ C1] ? rcu_is_watching+0x12/0xc0 [ 653.003786][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 653.009586][ C1] rcu_gp_kthread+0x179/0x230 [ 653.014258][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 653.019445][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 653.025243][ C1] ? __kthread_parkme+0x18c/0x230 [ 653.030270][ C1] ? kthread+0x13a/0x450 [ 653.034499][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 653.039684][ C1] kthread+0x370/0x450 [ 653.043742][ C1] ? __pfx_kthread+0x10/0x10 [ 653.048323][ C1] ret_from_fork+0x72b/0xd50 [ 653.052904][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 653.058013][ C1] ? __switch_to+0x800/0x1100 [ 653.062684][ C1] ? __pfx_kthread+0x10/0x10 [ 653.067267][ C1] ret_from_fork_asm+0x1a/0x30 [ 653.072037][ C1] [ 653.075044][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 653.081356][ C1] CPU: 1 UID: 0 PID: 5625 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 653.091755][ C1] Tainted: [L]=SOFTLOCKUP [ 653.096062][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.106103][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 653.111378][ C1] Code: ee 46 01 12 48 8b 80 e0 16 00 00 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <65> 8b 05 d9 46 01 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d b0 46 [ 653.130982][ C1] RSP: 0018:ffffc9000374f610 EFLAGS: 00000202 [ 653.137039][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fc0c4d [ 653.144998][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 653.152957][ C1] RBP: ffff8880b8443360 R08: 0000000000000005 R09: 0000000000000000 [ 653.160922][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 653.168878][ C1] R13: ffffed101708866d R14: 0000000000000001 R15: ffff8880b853c600 [ 653.176835][ C1] FS: 00007f480679e880(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 653.185767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.192339][ C1] CR2: 00007f4805e58d74 CR3: 00000000731f0000 CR4: 00000000003526f0 [ 653.200297][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 653.208257][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.216214][ C1] Call Trace: [ 653.219481][ C1] [ 653.222395][ C1] smp_call_function_many_cond+0x5ad/0x1700 [ 653.228281][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 653.233478][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 653.239794][ C1] ? ldt_dup_context+0x1a4/0x300 [ 653.244725][ C1] ? ldt_dup_context+0x1a4/0x300 [ 653.249661][ C1] ? rcu_is_watching+0x12/0xc0 [ 653.254423][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 653.259625][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 653.264762][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 653.269893][ C1] ? dup_mmap+0x12ec/0x21b0 [ 653.274392][ C1] ? dup_mmap+0x12ec/0x21b0 [ 653.278895][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 653.284452][ C1] ? up_write+0x28c/0x4f0 [ 653.288782][ C1] dup_mmap+0x1307/0x21b0 [ 653.293139][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 653.297807][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 653.303614][ C1] ? __lock_acquire+0x4a5/0x2630 [ 653.308554][ C1] ? find_held_lock+0x2b/0x80 [ 653.313217][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 653.319126][ C1] copy_process+0x6c78/0x7ed0 [ 653.323799][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 653.329267][ C1] ? __pfx_copy_process+0x10/0x10 [ 653.334302][ C1] kernel_clone+0x176/0x9e0 [ 653.338803][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 653.343823][ C1] ? __lock_acquire+0x4a5/0x2630 [ 653.348759][ C1] ? find_held_lock+0x2b/0x80 [ 653.353423][ C1] ? __might_fault+0xc5/0x140 [ 653.358102][ C1] __do_sys_clone+0xd9/0x120 [ 653.362693][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 653.367900][ C1] ? __pfx_do_faccessat+0x10/0x10 [ 653.372940][ C1] ? rcu_is_watching+0x12/0xc0 [ 653.377702][ C1] do_syscall_64+0x115/0x870 [ 653.382291][ C1] ? clear_bhb_loop+0x40/0x90 [ 653.386960][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.392842][ C1] RIP: 0033:0x7f48060f1636 [ 653.397245][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 653.416841][ C1] RSP: 002b:00007ffcde616870 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 653.425247][ C1] RAX: ffffffffffffffda RBX: 00007ffcde616878 RCX: 00007f48060f1636 [ 653.433203][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 653.441169][ C1] RBP: 000055b88e76b8d0 R08: 0000000000000000 R09: 000055b886b66140 [ 653.449163][ C1] R10: 00007f480679eb50 R11: 0000000000000246 R12: 000055b88e784bc0 [ 653.457138][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000055b886b4b4be [ 653.465112][ C1]