last executing test programs: 8.837966165s ago: executing program 4 (id=324): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0xffc, 0x2c, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc0300000047", 0xb, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.315974766s ago: executing program 4 (id=326): mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f805", 0x8}], 0x1}}], 0x1, 0x0) ioctl$int_in(r1, 0x5452, 0x0) accept4(r1, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x80000000, 0x1856, 0x0) syz_create_resource$binfmt(0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c) getsockopt(r5, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 7.94851799s ago: executing program 2 (id=328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x5c, r5, 0x1, 0x10000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "837100080000000009000000004000"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x5c}}, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x29) 6.788544349s ago: executing program 2 (id=329): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x2c240800, &(0x7f0000000240)="2523c65f7703036ecf403cec5f8e56142f958340cb6987fae80ed85e1d3f95f2ebebb6e4140d64552d267f3b48e25106577c9dd007879ecb55916e805290d4abd73f5ea6705d", 0x46, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000380)="a88825303251f0228c20fe08517ef49fc2c831037cf198f74b521a2349d1e456e9c07b5f9399dd3afb006d809a16e6e6887299e9aaf52bd050fa8bbdd0ae131baa659f5ec206721b44f1f794d88fca6ad19f321e98e9f1d27c988b9b8b35d20bce0eba3857589731e33cef0a16b68abb8b2ecbe7d571b6f54037e0645c9545e9a59810ed688bdcc007e25b1af93047144dbb9c748d6b44e86ea9a58e01aa8b3bc5bf51a9a30aaaf30281dade910cc505618669673bddd0fb") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r3, 0x404c4701, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.455393308s ago: executing program 4 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 6.054352839s ago: executing program 0 (id=332): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0x1fe, 0xff000000, 0xffffff00, 0xff], 0x4e21, 0x4e23, 0x4e22, 0x4e21, 0xd04, 0x0, 0x0, 0x6, 0x8}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x3, 0x0, 0x50}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 6.004578106s ago: executing program 4 (id=333): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket(0x10, 0x803, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) (fail_nth: 5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.845378105s ago: executing program 0 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000080003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (fail_nth: 10) 5.590223872s ago: executing program 2 (id=336): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r4, 0x9, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x50) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4004550d, &(0x7f0000000500)) r12 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r12, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 4.672523374s ago: executing program 0 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x1dca}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32], 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x43) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) socket$kcm(0x10, 0x3, 0x10) 4.617421876s ago: executing program 1 (id=340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x1dca}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32], 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000000000008b"]) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) socket$kcm(0x10, 0x3, 0x10) 4.588218631s ago: executing program 2 (id=341): r0 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 2) 3.706131776s ago: executing program 1 (id=342): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) r0 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0xe) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d00, &(0x7f0000000000)=0x13) 3.552394324s ago: executing program 0 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x178) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210009000122"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) 3.412591581s ago: executing program 1 (id=344): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x900) 3.411237913s ago: executing program 2 (id=345): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="ecf18ed5", 0x4}], 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc1, &(0x7f00000002c0)=""/193, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.693491411s ago: executing program 4 (id=347): mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) (fail_nth: 1) 2.648444841s ago: executing program 3 (id=348): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000001480), 0x0, 0x40044}}], 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000019880)=""/102373, 0x18fe5}, {0x0}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000f00)=""/244, 0xf4}, {0x0}, {0x0}], 0x6, 0x5, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffc}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e73], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x2, 0x0, 0x0, 0x0, 0x7], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x45c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.638399135s ago: executing program 4 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff9a030000000000004000000000000000560000000000000000000000000038000100000002000000030000000500000004000000000000000d20000000400000c801000000000000e2000000000000000400000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee50532e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9a98bbfdcc80f1d7f"], 0x178) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100090001"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.609340379s ago: executing program 3 (id=350): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 1.512572303s ago: executing program 3 (id=351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000200)=0x9, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {0x7}, {0x0, 0xffffffffffff268e}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.21976175s ago: executing program 3 (id=352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.051009035s ago: executing program 3 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x10c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000200)={0x100, r6}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x4, 0x1dca}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32], 0x22) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x43) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) socket$kcm(0x10, 0x3, 0x10) 615.457338ms ago: executing program 3 (id=354): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x2a, &(0x7f0000007100)={@multicast, @random="69cb9f223870", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @broadcast, @random="c0ccfe37bdc3", @loopback}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x1f, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x40003f8, 0x0, 0xa}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000f80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="e7072dbd7000fcdbdf2513"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07", @ANYRES64], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x7, 0x4, 0x9, 0x6, 0x3]}, &(0x7f00000000c0)=0x54) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 342.694972ms ago: executing program 1 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000440)="a216c485b09810246e7a960a62884ad1af18ef598afbf50c5f73d09b2ab171599eceeebd", 0x24}], 0x2}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000005bc0)="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", 0x136}, {&(0x7f0000000800)="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", 0x1fe}, {&(0x7f00000005c0)="0ce32eab78ca3c4a7bc73e96c2990c9002babb5c34c1327440eabea6ae3692de3f41d3d9844da1b530df4dd239e13f15a6dda935ca94a167891f42edbfd16936c296e72222691c9fda05000000000000001ddad55470c0ac33967e5b3ec0e1b2a078bab634369f7773cad684cb3e9eed9cbbc67f0000", 0x76}, {&(0x7f00000058c0)="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", 0x1dd}], 0x4}}], 0x2, 0xc880) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats={0x33}}) recvfrom(r1, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='2', 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'batadv0\x00', 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b000000080003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 244.571798ms ago: executing program 2 (id=356): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syslog(0x3, &(0x7f00000000c0), 0xffffffffffffffe5) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000300)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x4) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000190211"], 0x27c}}, 0x0) 207.700029ms ago: executing program 0 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x400454cb, 0x0) 125.555163ms ago: executing program 1 (id=358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0xee00, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x4040}, 0x40040) 429.8µs ago: executing program 1 (id=359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cd3e00000000010000000800"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) recvfrom$unix(r7, &(0x7f0000000040)=""/30, 0x1e, 0x22, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x10000, 0x1000}) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 0s ago: executing program 0 (id=360): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904", @ANYRES64], 0x0) syz_usb_connect(0x5, 0xa3a, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x95, 0xfa, 0x78, 0x40, 0x7aa, 0x18, 0xe326, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa28, 0x4, 0x8, 0x2, 0x70, 0x0, [{{0x9, 0x4, 0x12, 0x52, 0xf, 0xa3, 0xed, 0x35, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "4bc3"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x49b, 0xb, 0xfffe, 0x7}, [@country_functional={0x10, 0x24, 0x7, 0x5, 0x8001, [0x1, 0xd54, 0x1, 0x507b, 0x8001]}, @acm={0x4, 0x24, 0x2, 0x6}]}], [{{0x9, 0x5, 0x8, 0x5, 0x40, 0x0, 0x8, 0x62, [@generic={0x73, 0x21, "173f9018649489a9545ca11f41972b30a4cdbe7cec50898f88b4f9126e6c0a74fb14865e4546c5c8be52a746f96ace879f725d2f653dc30329b07381e8de7c2849420892480c1a6b35c5f48578be07a83079434021a6b953e7970b653a4fc74960be3abc337d1655dce9e7350fd7f58ebe"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xe, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xaa, 0x6f}]}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0x9, 0xac, 0x9, [@generic={0x4c, 0x22, "952cb34f8243492f11b5289d349f828c9d0df408ba93d2f766b429c6098de6ceb66b8d519536a3d92a036d1f27a12d6059d3d97f7601f596211f5ec46a2bbdc66faf217e568b390721e7"}, @generic={0xcf, 0x11, "4f0f61bb55fd4b7df16a1ea6b2aa443324635c075394978b342ab201981a4da75016db4ee910af5428347db0b61a97129eb360bfad53e3581bcbaafda56395f89afe7f50a672682a89ff54f8953614ceb5e473cf4a5b261ded95033c2d99cffc339b0b844357402c61c7929a190ca1fdd60a1d2ff055b1eb7258a1bbf00cfeeeb31af54bf31e5b12967dda387792b02af5298b871693bb995f5df71b00952e3da9f6f4af5e89babfdb4415326409e488fcaa3dc7d1040ae616b5447843b9d5324ede73361c0621adfd87317c15"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x81, 0xa}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0xd, 0xe2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xfffb}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0xa, 0x2, 0x8}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x57, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}]}}, {{0x9, 0x5, 0xc, 0x3, 0x0, 0x2, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x81}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x2, 0x2, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xef, 0xff, 0x4}}, {{0x9, 0x5, 0x3, 0x11, 0x200, 0x4, 0xb7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3ff}, @generic={0xc0, 0x9, "fdb82e45cb82dc78ac2a0a540c05b9c62fa2aeb11608db6f1a6414726f619b40761a08f942b8bf57d7618637daff157ea2025fe79c0f65063c8a5d7f6d848eceb90618ba02720d8210d3f7740753f2d15c2fcf28123e0b338d37d27dc7dd2cf61b55491d3402bde0f0e9c4e139e019d07276a8810420e05020274ace7df3d23ca82728d38a1b13e065368b472eb033d570076bfaa653789a22711963eb1e1ae822ae66805b9f7f259133b376d0edc5db512e82eeeec64d4966f068b477a3"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x410, 0x4, 0x6, 0x82, [@generic={0xb3, 0xa, "00e22f52357b5203546e845f643e1a99413072fea0b42b562061265b2db3b64d611fc4c95c551bec015e08821c921223fffd79c04d2da051a1733a2c38a02363b0a8e57d87890eb3a5fb19a26e3bd6673b3d066ac7cfb5491bb0eb78a5e560e18ab93af68e50b5b42db0ce63dd8d3e712fc84c71fd88893085ea9af34a63f58e2db25e1331dcf4abaafeac3eece86d2aa4632b30ebac904ca036bd52b1f9cab53edb19148bd14fb1493aab12f0cf518c8e"}, @generic={0x50, 0x1, "d8fc046c3589823a195627edd099444c5cac328b173e1ddf636a494a6a6aa3ea8f3b1a8f57a1e23fcdcee7b593c57dd91a6fbb54054c5543a8fac6aea06872cb28a6780cd1a16dec0620160018b9"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x0, 0x9, 0x0, 0xfd}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x61, 0x4, 0x0, [@generic={0xb4, 0xf, "3a0717ca3772daac8bd22dfaf9d9d4dfa0b467ff5672a653398e9581088847407ce05470bdf1316c15038f3bcf42d2fd6b19c8a01f2ffe1d04597a290a04315560eab6bcc49a09c905f8ed144f6d7937187f082a6b31cdbba273435f659e3d6dbc6444153e11458355fa8567ed5720be5e8784c601893ee6eba6d6ab6c26c7f81cf6a70111dc1e3da8002abc1e77073ef1c08e1ad99f04c7bf6645b2ed855d2bd0a02f32beec4e65c7a94d3a73215f4fb537"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0xef, 0x2, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x8ad5dde33a8eba51, 0x55, 0x1}]}}]}}, {{0x9, 0x4, 0x4a, 0x6, 0x5, 0xa6, 0x57, 0x3f, 0x8, [@uac_as], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x6d}}, {{0x9, 0x5, 0x378ca26b9dcaf36, 0x1, 0x400, 0xcd, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfff7}, @generic={0xdf, 0xe, "88ebbe7b22cdda6da322deb049c92d6ef3b7d815308ee4f7a564dfb3bf5e7ba8d5728c375329df177c581a6e221d6aaf5028a1e041f45b3f13cbd5b388d04f54fce99cbe3b59c68871f264c971e3d832ed7870d7ec8570e5181b0584674efef3af01ff71424ff65d26cab634e0cf1cc652b75274224666c9c76a5ee94603e2b7fd8dcb066d15223260b91cb126774f1dc4cdb7563cac3a79c6ba1f7e4c5f55a6f12f9a1bc3b642cf45e9a48959c9f8f755643c5bfaeeb69efbde02046cc640829e57035a94c77330c5394b87ae21a0aa67b835c992cbc1b1d82ffd6562"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x2, 0x28, 0x80}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x5d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x95, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x10, 0x8d, [@generic={0xb8, 0x31, "2046ef52bc8616fecaf33b12a06d72bf6ebd523686c673cc8ddd48cca062a0079614e3485e5386fe64a371c7941a07bd0b20a9bd1ce6e00c19eaf1c6ffcf9eacd47bed65fce91428fba0406f0859f26ebea55c28c6d821518b7ff740a5698df30fcd2af18a7e558e2b9ec2cbcddef8532a89014818e6f1b0e90e6d13f5798c617cca772db8c773b4ef99918aad7506748a310e9e61c181f2780b52e135a8cddc835a6f4ab606a4fc10dc3b0d7dd999ddea7542a7f6f9"}]}}]}}, {{0x9, 0x4, 0x29, 0xb, 0x0, 0x2e, 0x72, 0xee, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "21f2c0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1c, 0x6, 0x51, 0xb7}, [@ncm={0x6, 0x24, 0x1a, 0x578, 0xc}]}]}}, {{0x9, 0x4, 0x3a, 0x2, 0xc, 0xd7, 0xf9, 0x11, 0x8, [], [{{0x9, 0x5, 0xb, 0x1, 0x10, 0x30, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfffb}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x2, 0x2, 0xbe}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x0, 0xff, 0x3d}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x7, 0x4, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd6, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x7}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0xd, 0x7, 0x8, [@generic={0xb0, 0xc, "96fe96c8a8fa77cfa9118e8dc8aa8fbe4cf18c9e2f7f9902a8b45ad32c62e41cfc37fc2094d296f361e840127db51a826df01e277904315b2ddd61ab0d3971271170070656f03d4da2ee1d49b16021cff1fb8f27f8d37c5784e29457f8fd1acdfd9b775956a2518c1e0ecfd68744f032d9baee2b71937059802fb3ad56010753a97b11a1ab9f30cccb0491a61dfee6ba957d9cf84edda8d164ecbb7f56965ade9211071160b8c02b59baae8f2045"}, @generic={0xbd, 0x3, "a0cd1036bb2514e3f305f9608bf4d527a0d929a0380cdba6894bcbe47f861d2c8309b419cbb1ebcb01a8d23e2fa9f425b58d67732198a13de2187b31f6edb69813037d8d9cfde448f07b2f206a29061df493756d71c541429501181af30b76d6b0cb80b20b62e8e326f06806160562f13d8ef91244cb99ff3ba3c8a3e8f17b30df513173d2dfecdc3fe7c96f7cdfe4f69891b5063f394981a2b7f5676312e49410a16629423da8620db29a0e3795b5a89afc088a3274e1a6b09bc3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xd, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe}, @generic={0x68, 0x5, "bf128e499ed56429afb8a034016f995eec0cd71806a3015fd66d24f441b4cf5af36177020606505bfde90feb4261b8df98749efbb03767bf9576aa656781fac8997fa5d6f44b045eea1b34797788af675fda8dfc4c1ea1171461cea1b84a6ee9dffcd5afe44f"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x7, 0x6, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x9, 0x3, 0x98, [@generic={0x9f, 0xf, "b9b2f5b60ae8382159a327ac67154faa42b0635d5ed7c5c3add2bf98c80caa0159a534aa2c50954a79db75df612768199e7867d88226030b988721999babe82cc21a477f054265b859c853ceb07e4af264a2b3f22f1b968c0f2ac1f72b067a3bd6af03d7f7de4e1ee59106321595d030ed53a8ef0ad162460bf313a8b1f08bcab4147ce97eb7c653091c98a986446767da9720e6d791227812b7dd05ab"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x0, 0x80, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x228, 0x3, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4a, 0x7, 0x1, 0x0, 0xfe}, 0x12, &(0x7f0000000b00)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x2, 0xf9, 0x3}, @ptm_cap={0x3}]}, 0x4, [{0x17, &(0x7f0000000ac0)=@string={0x17, 0x3, "461c76e185071cf9f4e9183e52f00dc0ab69d65038"}}, {0x73, &(0x7f0000000b80)=@string={0x73, 0x3, "e983591946fbefd427d3d5cb314f885dfa0b3afe362f6e5d9e52bee939769d792968d3066b351ac79581ef5879609e37ce539010b7f7ea685e2d671f9417b0d443762123268575cd3e6296a4b0c2b08d412f5a75bf4a765fc1659500f573020682c5c3f8dcd6b3b92d3951b355e7fd3c8c"}}, {0xc1, &(0x7f0000000c00)=@string={0xc1, 0x3, "5d054bbb4654b3df2a577d7566b4a9335f71ed0432c09d6821544bf2c2cdf3ad8a38f9590cdebd42c65684f66923f51ac48fe43440546f7c5181335f6dc6829e268191d945f35f4bb306bb126c26944e6f18334e8949d93f73444735b5058e07fe60bc7b235c19557deee3c38987a4d5804986bee847a0480a4b0fe0733901e0570fbb2fd46e02718d2ff640d993753b87a2676c5f88aabb7a1468fed2035cf75e4c33fe999978030f202607b63b57db641889eee8086214ec7cda50d1eca4"}}, {0x2f, &(0x7f0000000d00)=@string={0x2f, 0x3, "84faf0008237d27a3bbcd3d13b696da1931f785d6a7e85c2c01388c93867fd59f823b4da84a8b948a9964c6e4d"}}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) kernel console output (not intermixed with test programs): 78.208984][ T51] sysfs_warn_dup+0x7f/0xa0 [ 78.209010][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 78.209033][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.209061][ T51] ? find_held_lock+0x2b/0x80 [ 78.209085][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 78.209108][ T51] kobject_add_internal+0x2c4/0x9b0 [ 78.209143][ T51] kobject_add+0x16e/0x240 [ 78.209160][ T51] ? __pfx_kobject_add+0x10/0x10 [ 78.209178][ T51] ? do_raw_spin_unlock+0x172/0x230 [ 78.209198][ T51] ? kobject_put+0xab/0x5a0 [ 78.209234][ T51] device_add+0x288/0x1a70 [ 78.209263][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 78.209281][ T51] ? __pfx_device_add+0x10/0x10 [ 78.209308][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 78.209339][ T51] hci_conn_add_sysfs+0x17e/0x230 [ 78.209369][ T51] le_conn_complete_evt+0x1075/0x1d70 [ 78.209401][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 78.209426][ T51] ? hci_event_packet+0x459/0x11c0 [ 78.209458][ T51] hci_le_conn_complete_evt+0x23c/0x370 [ 78.209489][ T51] hci_le_meta_evt+0x357/0x5e0 [ 78.209516][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 78.209545][ T51] hci_event_packet+0x682/0x11c0 [ 78.209570][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 78.209595][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 78.209620][ T51] ? kcov_remote_start+0x3c9/0x6d0 [ 78.209639][ T51] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.209669][ T51] hci_rx_work+0x2c5/0x16b0 [ 78.209696][ T51] ? rcu_is_watching+0x12/0xc0 [ 78.209719][ T51] process_one_work+0x9cc/0x1b70 [ 78.209747][ T51] ? __pfx_process_one_work+0x10/0x10 [ 78.209772][ T51] ? assign_work+0x1a0/0x250 [ 78.209802][ T51] worker_thread+0x6c8/0xf10 [ 78.209828][ T51] ? __pfx_worker_thread+0x10/0x10 [ 78.209844][ T51] kthread+0x3c2/0x780 [ 78.209859][ T51] ? __pfx_kthread+0x10/0x10 [ 78.209874][ T51] ? rcu_is_watching+0x12/0xc0 [ 78.209892][ T51] ? __pfx_kthread+0x10/0x10 [ 78.209907][ T51] ret_from_fork+0x5d4/0x6f0 [ 78.209929][ T51] ? __pfx_kthread+0x10/0x10 [ 78.209944][ T51] ret_from_fork_asm+0x1a/0x30 [ 78.209971][ T51] [ 78.210026][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.212023][ T24] usb 2-1: USB disconnect, device number 3 [ 78.505139][ T51] Bluetooth: hci2: failed to register connection device [ 78.567564][ T30] audit: type=1400 audit(1750993526.683:172): avc: denied { create } for pid=6048 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.660905][ T30] audit: type=1400 audit(1750993526.773:173): avc: denied { create } for pid=6048 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.693125][ T6052] team_slave_0: entered promiscuous mode [ 78.698969][ T6052] team_slave_1: entered promiscuous mode [ 78.710545][ T6052] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 78.719603][ T6052] team0: Device macvtap1 is already an upper device of the team interface [ 79.116666][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 79.123648][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.336033][ T6052] team_slave_0: left promiscuous mode [ 79.341491][ T6052] team_slave_1: left promiscuous mode [ 79.351211][ T43] usb 3-1: USB disconnect, device number 2 [ 79.522904][ T24] usb 1-1: USB disconnect, device number 3 [ 79.658209][ T30] audit: type=1400 audit(1750993527.763:174): avc: denied { create } for pid=6056 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.749432][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 80.053988][ T30] audit: type=1400 audit(1750993527.773:175): avc: denied { bind } for pid=6056 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.561565][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.709879][ T30] audit: type=1400 audit(1750993527.853:176): avc: denied { setopt } for pid=6056 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.865204][ T6071] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.906271][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 80.930457][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.954507][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.990544][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.017180][ T5816] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 81.029989][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.042133][ T5816] usb 1-1: config 0 descriptor?? [ 81.061619][ T6077] process 'syz.2.36' launched './file0' with NULL argv: empty string added [ 81.082210][ T6075] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 81.441605][ T917] cfg80211: failed to load regulatory.db [ 81.560487][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.573490][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 81.573500][ T30] audit: type=1400 audit(1750993529.693:182): avc: denied { write } for pid=6084 comm="syz.3.40" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.750582][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 81.754995][ T6087] overlayfs: conflicting lowerdir path [ 81.761255][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.762978][ T24] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 81.763003][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.763027][ T24] usb 3-1: Product: syz [ 81.763040][ T24] usb 3-1: Manufacturer: syz [ 81.763054][ T24] usb 3-1: SerialNumber: syz [ 81.807217][ T30] audit: type=1400 audit(1750993529.873:183): avc: denied { unlink } for pid=6086 comm="syz.4.41" name="#1" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.832340][ T24] usb 3-1: config 0 descriptor?? [ 81.841010][ T24] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 82.052461][ T30] audit: type=1400 audit(1750993530.173:184): avc: denied { create } for pid=6086 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.075572][ T30] audit: type=1400 audit(1750993530.173:185): avc: denied { read append } for pid=6086 comm="syz.4.41" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.099399][ T30] audit: type=1400 audit(1750993530.173:186): avc: denied { open } for pid=6086 comm="syz.4.41" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.157781][ T6098] FAULT_INJECTION: forcing a failure. [ 82.157781][ T6098] name failslab, interval 1, probability 0, space 0, times 1 [ 82.179160][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.3.44 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 82.179184][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.179194][ T6098] Call Trace: [ 82.179202][ T6098] [ 82.179208][ T6098] dump_stack_lvl+0x16c/0x1f0 [ 82.179238][ T6098] should_fail_ex+0x512/0x640 [ 82.179267][ T6098] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 82.179293][ T6098] should_failslab+0xc2/0x120 [ 82.179317][ T6098] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 82.179339][ T6098] ? __alloc_skb+0x2b2/0x380 [ 82.179366][ T6098] __alloc_skb+0x2b2/0x380 [ 82.179388][ T6098] ? __pfx___alloc_skb+0x10/0x10 [ 82.179409][ T6098] ? genl_rcv_msg+0x4bb/0x800 [ 82.179431][ T6098] netlink_ack+0x15d/0xb80 [ 82.179442][ T6098] ? __lock_acquire+0x622/0x1c90 [ 82.179470][ T6098] netlink_rcv_skb+0x332/0x420 [ 82.179485][ T6098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.179562][ T6098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.179579][ T6098] ? netlink_deliver_tap+0x1ae/0xd30 [ 82.179595][ T6098] ? is_vmalloc_addr+0x86/0xa0 [ 82.179610][ T6098] genl_rcv+0x28/0x40 [ 82.179621][ T6098] netlink_unicast+0x53a/0x7f0 [ 82.179633][ T6098] ? __pfx_netlink_unicast+0x10/0x10 [ 82.179647][ T6098] netlink_sendmsg+0x8d1/0xdd0 [ 82.179660][ T6098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.179675][ T6098] ____sys_sendmsg+0xa98/0xc70 [ 82.179687][ T6098] ? copy_msghdr_from_user+0x10a/0x160 [ 82.179702][ T6098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.179719][ T6098] ___sys_sendmsg+0x134/0x1d0 [ 82.179734][ T6098] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.179747][ T6098] ? __lock_acquire+0x622/0x1c90 [ 82.179781][ T6098] __sys_sendmsg+0x16d/0x220 [ 82.179797][ T6098] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.179827][ T6098] do_syscall_64+0xcd/0x4c0 [ 82.179844][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.179856][ T6098] RIP: 0033:0x7f1644b8e929 [ 82.179865][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.179875][ T6098] RSP: 002b:00007f1645a66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.179886][ T6098] RAX: ffffffffffffffda RBX: 00007f1644db5fa0 RCX: 00007f1644b8e929 [ 82.179892][ T6098] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 82.179899][ T6098] RBP: 00007f1645a66090 R08: 0000000000000000 R09: 0000000000000000 [ 82.179904][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.179910][ T6098] R13: 0000000000000000 R14: 00007f1644db5fa0 R15: 00007ffcca777678 [ 82.179923][ T6098] [ 82.182393][ T55] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.604943][ T55] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 82.638856][ T55] usb 2-1: config 0 has no interface number 0 [ 82.646485][ T55] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 82.650068][ T6105] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 82.656906][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.677128][ T55] usb 2-1: config 0 descriptor?? [ 82.678733][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 82.682501][ T30] audit: type=1400 audit(1750993530.793:187): avc: denied { bind } for pid=6104 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.714897][ T55] cp210x 2-1:0.7: cp210x converter detected [ 83.122623][ T5816] usbhid 1-1:0.0: can't add hid device: -71 [ 83.126615][ T30] audit: type=1400 audit(1750993531.233:188): avc: denied { name_bind } for pid=6108 comm="syz.4.47" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.142557][ T5816] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.205994][ T5816] usb 1-1: USB disconnect, device number 4 [ 83.265031][ T30] audit: type=1400 audit(1750993531.233:189): avc: denied { node_bind } for pid=6108 comm="syz.4.47" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.331557][ T55] cp210x 2-1:0.7: failed to get vendor val 0x000e size 3: -32 [ 83.495649][ T6121] Bluetooth: MGMT ver 1.23 [ 83.500767][ T30] audit: type=1400 audit(1750993531.613:190): avc: denied { write } for pid=6120 comm="syz.0.51" path="socket:[9230]" dev="sockfs" ino=9230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.540616][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.568123][ T55] cp210x 2-1:0.7: GPIO initialisation failed: -19 [ 83.589210][ T55] usb 2-1: cp210x converter now attached to ttyUSB0 [ 83.700468][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 83.707285][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.716089][ T5816] usb 5-1: config 16 interface 0 has no altsetting 0 [ 83.724693][ T5816] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 83.738061][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.746508][ T5816] usb 5-1: Product: syz [ 83.751746][ T5816] usb 5-1: Manufacturer: syz [ 83.756502][ T5816] usb 5-1: SerialNumber: syz [ 83.868823][ T55] usb 3-1: USB disconnect, device number 3 [ 83.967973][ T5816] usb 5-1: ucan: probing device on interface #0 [ 83.977735][ T6124] netlink: zone id is out of range [ 83.986661][ T5816] usb 5-1: ucan: invalid endpoint configuration [ 83.990559][ T6124] netlink: zone id is out of range [ 84.014879][ T5816] usb 5-1: ucan: probe failed; try to update the device firmware [ 84.029444][ T6124] netlink: zone id is out of range [ 84.049008][ T6127] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 84.049822][ T5816] usb 5-1: USB disconnect, device number 3 [ 84.085184][ T30] audit: type=1400 audit(1750993532.193:191): avc: denied { create } for pid=6125 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.095952][ T6124] netlink: zone id is out of range [ 84.113582][ T6124] netlink: zone id is out of range [ 84.142436][ T6124] netlink: del zone limit has 4 unknown bytes [ 84.155402][ T6128] kvm: user requested TSC rate below hardware speed [ 85.927281][ T6139] netlink: 'syz.0.57': attribute type 4 has an invalid length. [ 86.099835][ T6154] netlink: 'syz.3.59': attribute type 11 has an invalid length. [ 86.660525][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.921354][ T6155] "syz.4.58" (6155) uses obsolete ecb(arc4) skcipher [ 86.952544][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 86.959841][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.979649][ T10] usb 4-1: config 179 has no interface number 0 [ 87.007888][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 87.032836][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 87.044607][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 87.057951][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 87.071854][ T24] usb 2-1: USB disconnect, device number 4 [ 87.090468][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.121848][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 87.121859][ T30] audit: type=1326 audit(1750993535.243:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.60" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7814b8e929 code=0x0 [ 87.164763][ T30] audit: type=1400 audit(1750993535.283:202): avc: denied { write } for pid=6167 comm="syz.1.61" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.190571][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 87.198525][ T24] cp210x 2-1:0.7: device disconnected [ 87.207035][ T6169] 9pnet_fd: Insufficient options for proto=fd [ 87.226478][ T30] audit: type=1400 audit(1750993535.323:203): avc: denied { read } for pid=6164 comm="syz.0.60" dev="sockfs" ino=9348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.254369][ T30] audit: type=1400 audit(1750993535.373:204): avc: denied { read write } for pid=6167 comm="syz.1.61" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.289044][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 87.291267][ T30] audit: type=1400 audit(1750993535.373:205): avc: denied { open } for pid=6167 comm="syz.1.61" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 87.332533][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 87.341676][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.538187][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 87.633677][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.62'. [ 88.078008][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.111747][ T30] audit: type=1400 audit(1750993536.223:206): avc: denied { read } for pid=5170 comm="acpid" name="js0" dev="devtmpfs" ino=2818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.139863][ T30] audit: type=1400 audit(1750993536.223:207): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2818 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.164510][ T5170] input input5: unable to receive magic message: -110 [ 88.201703][ T5170] input input5: unable to receive magic message: -32 [ 88.246501][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 88.265837][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 88.273981][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.310022][ T30] audit: type=1400 audit(1750993536.293:208): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2818 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.316575][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.378639][ T5170] input input5: unable to receive magic message: -32 [ 88.429719][ T10] usb 4-1: USB disconnect, device number 2 [ 88.431367][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 88.435627][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 88.457343][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.558071][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 89.070180][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.111867][ T24] usb 5-1: config 0 descriptor?? [ 89.139514][ T10] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 89.485011][ T30] audit: type=1400 audit(1750993537.603:209): avc: denied { mount } for pid=6184 comm="syz.0.66" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.542819][ T30] audit: type=1400 audit(1750993537.663:210): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.835068][ T6194] mmap: syz.0.68 (6194) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.212044][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.409829][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 90.489710][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.522925][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.545090][ T43] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 90.555164][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.567429][ T43] usb 1-1: config 0 descriptor?? [ 90.700596][ T5816] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.875642][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 91.328892][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 91.343035][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.348303][ T5816] usb 3-1: config 0 has no interfaces? [ 91.367264][ T43] hid-multitouch 0003:1FD2:6007.0001: ignoring exceeding usage max [ 91.382205][ T5816] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 91.398753][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.403220][ T24] usb 5-1: USB disconnect, device number 4 [ 91.419437][ T5816] usb 3-1: Product: syz [ 91.429212][ T5816] usb 3-1: Manufacturer: syz [ 91.431446][ T43] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 91.440201][ T5816] usb 3-1: SerialNumber: syz [ 91.513805][ T5816] usb 3-1: config 0 descriptor?? [ 92.253332][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 92.253342][ T30] audit: type=1400 audit(1750993540.372:214): avc: denied { create } for pid=6200 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.395426][ T30] audit: type=1400 audit(1750993540.402:215): avc: denied { ioctl } for pid=6222 comm="syz.4.76" path="socket:[9445]" dev="sockfs" ino=9445 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.520795][ T6229] "syz.4.76" (6229) uses obsolete ecb(arc4) skcipher [ 92.539052][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 92.623469][ T24] usb 3-1: USB disconnect, device number 4 [ 93.060779][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 93.069845][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 93.183174][ T30] audit: type=1400 audit(1750993540.832:216): avc: denied { create } for pid=6227 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.254418][ T10] usb 1-1: USB disconnect, device number 5 [ 93.289436][ T30] audit: type=1400 audit(1750993541.082:217): avc: denied { write } for pid=6227 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.346195][ T30] audit: type=1400 audit(1750993541.092:218): avc: denied { connect } for pid=6227 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.368653][ T30] audit: type=1400 audit(1750993541.092:219): avc: denied { name_connect } for pid=6227 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 93.410505][ T30] audit: type=1400 audit(1750993541.162:220): avc: denied { setopt } for pid=6227 comm="syz.3.77" lport=42963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.435826][ T6238] FAULT_INJECTION: forcing a failure. [ 93.435826][ T6238] name failslab, interval 1, probability 0, space 0, times 0 [ 93.497351][ T6238] CPU: 1 UID: 0 PID: 6238 Comm: syz.1.80 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 93.497377][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.497387][ T6238] Call Trace: [ 93.497393][ T6238] [ 93.497400][ T6238] dump_stack_lvl+0x16c/0x1f0 [ 93.497430][ T6238] should_fail_ex+0x512/0x640 [ 93.497452][ T6238] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 93.497477][ T6238] should_failslab+0xc2/0x120 [ 93.497501][ T6238] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 93.497523][ T6238] ? skb_clone+0x190/0x3f0 [ 93.497548][ T6238] skb_clone+0x190/0x3f0 [ 93.497570][ T6238] nfnetlink_rcv_batch+0x1cf/0x2330 [ 93.497589][ T6238] ? kmem_cache_free+0x2d1/0x4d0 [ 93.497615][ T6238] ? __lock_acquire+0x622/0x1c90 [ 93.497643][ T6238] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 93.497678][ T6238] ? avc_has_perm_noaudit+0x149/0x3b0 [ 93.497708][ T6238] ? __asan_memset+0x23/0x50 [ 93.497726][ T6238] ? __nla_validate_parse+0x600/0x2880 [ 93.497757][ T6238] ? __pfx___nla_validate_parse+0x10/0x10 [ 93.497785][ T6238] ? cap_capable+0xb3/0x250 [ 93.497808][ T6238] ? __nla_parse+0x40/0x60 [ 93.497836][ T6238] nfnetlink_rcv+0x3c1/0x430 [ 93.497855][ T6238] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.497881][ T6238] netlink_unicast+0x53a/0x7f0 [ 93.497901][ T6238] ? __pfx_netlink_unicast+0x10/0x10 [ 93.497924][ T6238] netlink_sendmsg+0x8d1/0xdd0 [ 93.497942][ T6238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.497966][ T6238] ____sys_sendmsg+0xa98/0xc70 [ 93.497983][ T6238] ? copy_msghdr_from_user+0x10a/0x160 [ 93.498005][ T6238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.498032][ T6238] ___sys_sendmsg+0x134/0x1d0 [ 93.498056][ T6238] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.498076][ T6238] ? __lock_acquire+0x622/0x1c90 [ 93.498129][ T6238] __sys_sendmsg+0x16d/0x220 [ 93.498152][ T6238] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.498190][ T6238] do_syscall_64+0xcd/0x4c0 [ 93.498224][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.498241][ T6238] RIP: 0033:0x7f3cd0b8e929 [ 93.498255][ T6238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.498271][ T6238] RSP: 002b:00007f3cd1a84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.498288][ T6238] RAX: ffffffffffffffda RBX: 00007f3cd0db5fa0 RCX: 00007f3cd0b8e929 [ 93.498299][ T6238] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 93.498310][ T6238] RBP: 00007f3cd1a84090 R08: 0000000000000000 R09: 0000000000000000 [ 93.498320][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.498330][ T6238] R13: 0000000000000000 R14: 00007f3cd0db5fa0 R15: 00007ffe80f86358 [ 93.498352][ T6238] [ 93.910534][ T30] audit: type=1400 audit(1750993541.162:221): avc: denied { shutdown } for pid=6227 comm="syz.3.77" lport=42963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.982726][ T30] audit: type=1400 audit(1750993541.232:222): avc: denied { read } for pid=6227 comm="syz.3.77" lport=42963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.992656][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.83'. [ 94.026231][ T30] audit: type=1400 audit(1750993542.142:223): avc: denied { write } for pid=6243 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.284768][ T6249] FAULT_INJECTION: forcing a failure. [ 94.284768][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 94.371023][ T6255] FAULT_INJECTION: forcing a failure. [ 94.371023][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 94.383935][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.4.84 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 94.383959][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.383969][ T6255] Call Trace: [ 94.383976][ T6255] [ 94.383983][ T6255] dump_stack_lvl+0x16c/0x1f0 [ 94.384011][ T6255] should_fail_ex+0x512/0x640 [ 94.384033][ T6255] ? __kmalloc_noprof+0xbf/0x510 [ 94.384057][ T6255] ? __vb2_queue_alloc+0x23e/0x1280 [ 94.384082][ T6255] should_failslab+0xc2/0x120 [ 94.384107][ T6255] __kmalloc_noprof+0xd2/0x510 [ 94.384128][ T6255] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 94.384160][ T6255] __vb2_queue_alloc+0x23e/0x1280 [ 94.384187][ T6255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.384207][ T6255] ? __pfx_vim2m_queue_setup+0x10/0x10 [ 94.384241][ T6255] vb2_core_reqbufs+0xa90/0xfe0 [ 94.384273][ T6255] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 94.384305][ T6255] ? vb2_verify_memory_type+0x295/0x620 [ 94.384329][ T6255] ? vb2_verify_memory_type+0x2a3/0x620 [ 94.384353][ T6255] ? vb2_verify_memory_type+0x2db/0x620 [ 94.384380][ T6255] vb2_reqbufs+0x1a3/0x1f0 [ 94.384403][ T6255] ? __pfx_vb2_reqbufs+0x10/0x10 [ 94.384426][ T6255] ? lockdep_hardirqs_on+0x7c/0x110 [ 94.384450][ T6255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.384472][ T6255] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 94.384498][ T6255] v4l_reqbufs+0x152/0x1e0 [ 94.384518][ T6255] __video_do_ioctl+0xb3d/0xfc0 [ 94.384543][ T6255] ? __might_fault+0xe3/0x190 [ 94.384564][ T6255] ? __pfx___video_do_ioctl+0x10/0x10 [ 94.384594][ T6255] video_usercopy+0x4cd/0x1720 [ 94.384617][ T6255] ? __pfx___video_do_ioctl+0x10/0x10 [ 94.384637][ T6255] ? selinux_kernel_read_file+0xa0/0x130 [ 94.384660][ T6255] ? __pfx_video_usercopy+0x10/0x10 [ 94.384698][ T6255] v4l2_ioctl+0x1ba/0x250 [ 94.384718][ T6255] ? __pfx_v4l2_ioctl+0x10/0x10 [ 94.384749][ T6255] __x64_sys_ioctl+0x18b/0x210 [ 94.384770][ T6255] do_syscall_64+0xcd/0x4c0 [ 94.384797][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.384814][ T6255] RIP: 0033:0x7f918d78e929 [ 94.384828][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.384843][ T6255] RSP: 002b:00007f918b5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.384860][ T6255] RAX: ffffffffffffffda RBX: 00007f918d9b6160 RCX: 00007f918d78e929 [ 94.384872][ T6255] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000005 [ 94.384882][ T6255] RBP: 00007f918b5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 94.384897][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.384907][ T6255] R13: 0000000000000000 R14: 00007f918d9b6160 R15: 00007ffe871c8c98 [ 94.384929][ T6255] [ 94.665978][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.85 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 94.666002][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.666010][ T6249] Call Trace: [ 94.666015][ T6249] [ 94.666021][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 94.666047][ T6249] should_fail_ex+0x512/0x640 [ 94.666066][ T6249] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 94.666087][ T6249] should_failslab+0xc2/0x120 [ 94.666108][ T6249] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 94.666127][ T6249] ? skb_clone+0x190/0x3f0 [ 94.666158][ T6249] skb_clone+0x190/0x3f0 [ 94.666179][ T6249] nfnetlink_rcv_batch+0x1cf/0x2330 [ 94.666195][ T6249] ? kmem_cache_free+0x2d1/0x4d0 [ 94.666217][ T6249] ? __lock_acquire+0x622/0x1c90 [ 94.666242][ T6249] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 94.666272][ T6249] ? avc_has_perm_noaudit+0x149/0x3b0 [ 94.666298][ T6249] ? __asan_memset+0x23/0x50 [ 94.666314][ T6249] ? __nla_validate_parse+0x600/0x2880 [ 94.666343][ T6249] ? __pfx___nla_validate_parse+0x10/0x10 [ 94.666367][ T6249] ? cap_capable+0xb3/0x250 [ 94.666387][ T6249] ? __nla_parse+0x40/0x60 [ 94.666413][ T6249] nfnetlink_rcv+0x3c1/0x430 [ 94.666431][ T6249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 94.666455][ T6249] netlink_unicast+0x53a/0x7f0 [ 94.666475][ T6249] ? __pfx_netlink_unicast+0x10/0x10 [ 94.666496][ T6249] netlink_sendmsg+0x8d1/0xdd0 [ 94.666515][ T6249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.666541][ T6249] ____sys_sendmsg+0xa98/0xc70 [ 94.666559][ T6249] ? copy_msghdr_from_user+0x10a/0x160 [ 94.666582][ T6249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.666609][ T6249] ___sys_sendmsg+0x134/0x1d0 [ 94.666632][ T6249] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.666654][ T6249] ? __lock_acquire+0x622/0x1c90 [ 94.666710][ T6249] __sys_sendmsg+0x16d/0x220 [ 94.666733][ T6249] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.666767][ T6249] do_syscall_64+0xcd/0x4c0 [ 94.666792][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.666810][ T6249] RIP: 0033:0x7fc16138e929 [ 94.666825][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.666841][ T6249] RSP: 002b:00007fc162130038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.666858][ T6249] RAX: ffffffffffffffda RBX: 00007fc1615b5fa0 RCX: 00007fc16138e929 [ 94.666869][ T6249] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 94.666879][ T6249] RBP: 00007fc162130090 R08: 0000000000000000 R09: 0000000000000000 [ 94.666888][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.666897][ T6249] R13: 0000000000000000 R14: 00007fc1615b5fa0 R15: 00007ffe683322e8 [ 94.666919][ T6249] [ 94.938711][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.84'. [ 94.947593][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.4.84'. [ 95.212012][ T6261] netlink: 'syz.3.87': attribute type 2 has an invalid length. [ 95.350568][ T5892] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.517226][ T5892] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 95.780711][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.880267][ T5892] usb 1-1: config 0 has no interface number 0 [ 95.901675][ T5892] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 95.937029][ T5892] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 8456, setting to 64 [ 95.972879][ T5892] usb 1-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.050974][ T6275] FAULT_INJECTION: forcing a failure. [ 96.050974][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.081043][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.3.93 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 96.081060][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.081066][ T6275] Call Trace: [ 96.081070][ T6275] [ 96.081074][ T6275] dump_stack_lvl+0x16c/0x1f0 [ 96.081093][ T6275] should_fail_ex+0x512/0x640 [ 96.081109][ T6275] _copy_to_user+0x32/0xd0 [ 96.081127][ T6275] simple_read_from_buffer+0xcb/0x170 [ 96.081143][ T6275] proc_fail_nth_read+0x197/0x270 [ 96.081158][ T6275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.081172][ T6275] ? rw_verify_area+0xcf/0x680 [ 96.081183][ T6275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.081196][ T6275] vfs_read+0x1e1/0xc60 [ 96.081210][ T6275] ? __pfx___mutex_lock+0x10/0x10 [ 96.081229][ T6275] ? __pfx_vfs_read+0x10/0x10 [ 96.081245][ T6275] ? __fget_files+0x20e/0x3c0 [ 96.081264][ T6275] ksys_read+0x12a/0x250 [ 96.081276][ T6275] ? __pfx_ksys_read+0x10/0x10 [ 96.081293][ T6275] do_syscall_64+0xcd/0x4c0 [ 96.081310][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.081321][ T6275] RIP: 0033:0x7f1644b8d33c [ 96.081330][ T6275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.081340][ T6275] RSP: 002b:00007f1645a66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.081350][ T6275] RAX: ffffffffffffffda RBX: 00007f1644db5fa0 RCX: 00007f1644b8d33c [ 96.081357][ T6275] RDX: 000000000000000f RSI: 00007f1645a660a0 RDI: 0000000000000008 [ 96.081363][ T6275] RBP: 00007f1645a66090 R08: 0000000000000000 R09: 0000000000000000 [ 96.081368][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.081374][ T6275] R13: 0000000000000000 R14: 00007f1644db5fa0 R15: 00007ffcca777678 [ 96.081388][ T6275] [ 96.097283][ T5892] usb 1-1: config 0 interface 11 has no altsetting 0 [ 96.280795][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.453464][ T5892] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 96.466508][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.006262][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 97.398558][ T24] usb 2-1: config index 0 descriptor too short (expected 36609, got 36) [ 97.420440][ T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 97.428902][ T24] usb 2-1: can't read configurations, error -22 [ 97.498339][ T5892] usb 1-1: config 0 descriptor?? [ 97.503406][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 97.503419][ T30] audit: type=1400 audit(1750993545.612:228): avc: denied { write } for pid=6286 comm="syz.2.99" name="igmp" dev="proc" ino=4026532834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.517355][ T6291] netlink: 27 bytes leftover after parsing attributes in process `syz.3.98'. [ 97.705774][ T5892] usb 1-1: can't set config #0, error -71 [ 97.750546][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.156709][ T30] audit: type=1400 audit(1750993546.272:229): avc: denied { bind } for pid=6295 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.185239][ T5892] usb 1-1: USB disconnect, device number 6 [ 98.200650][ T30] audit: type=1400 audit(1750993546.272:230): avc: denied { name_bind } for pid=6295 comm="syz.3.101" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.224901][ T30] audit: type=1400 audit(1750993546.272:231): avc: denied { node_bind } for pid=6295 comm="syz.3.101" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 98.265004][ T30] audit: type=1400 audit(1750993546.272:232): avc: denied { connect } for pid=6295 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.309599][ T30] audit: type=1400 audit(1750993546.302:233): avc: denied { create } for pid=6295 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.350561][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 98.399162][ T24] usb 2-1: config index 0 descriptor too short (expected 36609, got 36) [ 98.410188][ T30] audit: type=1400 audit(1750993546.372:234): avc: denied { listen } for pid=6295 comm="syz.3.101" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.467149][ T24] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 98.493605][ T24] usb 2-1: can't read configurations, error -22 [ 98.506555][ T24] usb usb2-port1: attempt power cycle [ 98.549362][ T30] audit: type=1400 audit(1750993546.662:235): avc: denied { setopt } for pid=6307 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.800472][ T5892] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.885889][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.204483][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.215953][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.249215][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.289274][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.327980][ T6304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.363689][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.431006][ T24] usb 2-1: device not accepting address 7, error -71 [ 99.628549][ T30] audit: type=1400 audit(1750993547.742:236): avc: denied { setopt } for pid=6328 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.670520][ T30] audit: type=1400 audit(1750993547.772:237): avc: denied { sys_module } for pid=6320 comm="syz.1.109" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.700459][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.861825][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 99.868759][ T10] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 99.877641][ T917] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 99.888508][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.984363][ T10] usb 4-1: config 0 has no interface number 0 [ 99.991472][ T10] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 100.002548][ T10] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 100.023470][ T10] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 100.033356][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.086376][ T917] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 100.147866][ T10] usb 4-1: Product: syz [ 100.233896][ T10] usb 4-1: Manufacturer: syz [ 100.238732][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.257106][ T10] usb 4-1: SerialNumber: syz [ 100.282351][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.294949][ T10] usb 4-1: config 0 descriptor?? [ 100.314999][ T6323] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.346925][ T917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 100.363434][ T10] usb-storage 4-1:0.231: USB Mass Storage device detected [ 100.386442][ T917] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 100.397293][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.452239][ T917] usb 5-1: config 0 descriptor?? [ 100.792643][ T6323] xt_hashlimit: size too large, truncated to 1048576 [ 101.011995][ T6347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.115'. [ 101.324371][ T10] usb 1-1: USB disconnect, device number 7 [ 101.422199][ T917] usbhid 5-1:0.0: can't add hid device: -71 [ 101.428590][ T917] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.444318][ T6362] ======================================================= [ 101.444318][ T6362] WARNING: The mand mount option has been deprecated and [ 101.444318][ T6362] and is ignored by this kernel. Remove the mand [ 101.444318][ T6362] option from the mount to silence this warning. [ 101.444318][ T6362] ======================================================= [ 101.457543][ T917] usb 5-1: USB disconnect, device number 5 [ 101.790551][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.954504][ T10] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 102.017630][ T10] usb 1-1: config 160 has no interface number 0 [ 102.100011][ T10] usb 1-1: config 160 interface 200 has no altsetting 0 [ 102.119402][ T10] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 102.128705][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.168836][ T10] usb 1-1: Product: syz [ 102.311161][ T10] usb 1-1: Manufacturer: syz [ 102.321040][ T10] usb 1-1: SerialNumber: syz [ 102.440223][ T6375] FAULT_INJECTION: forcing a failure. [ 102.440223][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 102.761106][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.1.120 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 102.761135][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.761145][ T6375] Call Trace: [ 102.761151][ T6375] [ 102.761158][ T6375] dump_stack_lvl+0x16c/0x1f0 [ 102.761188][ T6375] should_fail_ex+0x512/0x640 [ 102.761210][ T6375] ? trace_contention_end+0xdd/0x130 [ 102.761245][ T6375] should_failslab+0xc2/0x120 [ 102.761271][ T6375] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 102.761293][ T6375] ? hci_sock_sendmsg+0xde2/0x25f0 [ 102.761318][ T6375] ? __alloc_skb+0x2b2/0x380 [ 102.761340][ T6375] ? __pfx___mutex_lock+0x10/0x10 [ 102.761367][ T6375] __alloc_skb+0x2b2/0x380 [ 102.761389][ T6375] ? __pfx___alloc_skb+0x10/0x10 [ 102.761419][ T6375] hci_sock_sendmsg+0x1a6f/0x25f0 [ 102.761449][ T6375] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 102.761481][ T6375] sock_write_iter+0x4fc/0x5b0 [ 102.761500][ T6375] ? __pfx_sock_write_iter+0x10/0x10 [ 102.761527][ T6375] ? bpf_lsm_file_permission+0x9/0x10 [ 102.761552][ T6375] ? security_file_permission+0x71/0x210 [ 102.761577][ T6375] ? rw_verify_area+0xcf/0x680 [ 102.761599][ T6375] vfs_write+0x6c4/0x1150 [ 102.761620][ T6375] ? __pfx_sock_write_iter+0x10/0x10 [ 102.761643][ T6375] ? __pfx_vfs_write+0x10/0x10 [ 102.761668][ T6375] ? __rcu_read_unlock+0x2b4/0x580 [ 102.761705][ T6375] ksys_write+0x1f8/0x250 [ 102.761725][ T6375] ? __pfx_ksys_write+0x10/0x10 [ 102.761754][ T6375] do_syscall_64+0xcd/0x4c0 [ 102.761780][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.761803][ T6375] RIP: 0033:0x7f3cd0b8e929 [ 102.761818][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.761833][ T6375] RSP: 002b:00007f3cd1a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.761850][ T6375] RAX: ffffffffffffffda RBX: 00007f3cd0db6080 RCX: 00007f3cd0b8e929 [ 102.761860][ T6375] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 102.761870][ T6375] RBP: 00007f3cd1a63090 R08: 0000000000000000 R09: 0000000000000000 [ 102.761880][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.761889][ T6375] R13: 0000000000000000 R14: 00007f3cd0db6080 R15: 00007ffe80f86358 [ 102.761912][ T6375] [ 102.776129][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.095223][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 103.138414][ T917] usb 4-1: USB disconnect, device number 3 [ 104.061439][ T10] usb 1-1: USB disconnect, device number 8 [ 104.800616][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 104.807209][ T5819] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 104.908912][ T6396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.919752][ T6396] FAULT_INJECTION: forcing a failure. [ 104.919752][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 104.970810][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.3.127 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 104.970837][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.970847][ T6396] Call Trace: [ 104.970855][ T6396] [ 104.970863][ T6396] dump_stack_lvl+0x16c/0x1f0 [ 104.970893][ T6396] should_fail_ex+0x512/0x640 [ 104.970917][ T6396] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 104.970943][ T6396] should_failslab+0xc2/0x120 [ 104.970968][ T6396] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 104.970991][ T6396] ? __alloc_skb+0x2b2/0x380 [ 104.971018][ T6396] __alloc_skb+0x2b2/0x380 [ 104.971040][ T6396] ? __pfx___alloc_skb+0x10/0x10 [ 104.971073][ T6396] ? genl_rcv_msg+0x4bb/0x800 [ 104.971101][ T6396] netlink_ack+0x15d/0xb80 [ 104.971121][ T6396] ? __lock_acquire+0x622/0x1c90 [ 104.971151][ T6396] netlink_rcv_skb+0x332/0x420 [ 104.971169][ T6396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.971190][ T6396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.971218][ T6396] ? netlink_deliver_tap+0x1ae/0xd30 [ 104.971249][ T6396] ? is_vmalloc_addr+0x86/0xa0 [ 104.971275][ T6396] genl_rcv+0x28/0x40 [ 104.971292][ T6396] netlink_unicast+0x53a/0x7f0 [ 104.971312][ T6396] ? __pfx_netlink_unicast+0x10/0x10 [ 104.971337][ T6396] netlink_sendmsg+0x8d1/0xdd0 [ 104.971358][ T6396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.971386][ T6396] ____sys_sendmsg+0xa98/0xc70 [ 104.971405][ T6396] ? copy_msghdr_from_user+0x10a/0x160 [ 104.971428][ T6396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.971458][ T6396] ___sys_sendmsg+0x134/0x1d0 [ 104.971483][ T6396] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.971505][ T6396] ? __lock_acquire+0x622/0x1c90 [ 104.971563][ T6396] __sys_sendmsg+0x16d/0x220 [ 104.971587][ T6396] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.971628][ T6396] do_syscall_64+0xcd/0x4c0 [ 104.971655][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.971673][ T6396] RIP: 0033:0x7f1644b8e929 [ 104.971688][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.971704][ T6396] RSP: 002b:00007f1645a66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.971721][ T6396] RAX: ffffffffffffffda RBX: 00007f1644db5fa0 RCX: 00007f1644b8e929 [ 104.971732][ T6396] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 104.971742][ T6396] RBP: 00007f1645a66090 R08: 0000000000000000 R09: 0000000000000000 [ 104.971752][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.971761][ T6396] R13: 0000000000000000 R14: 00007f1644db5fa0 R15: 00007ffcca777678 [ 104.971786][ T6396] [ 105.589545][ T6406] "syz.1.128" (6406) uses obsolete ecb(arc4) skcipher [ 107.038758][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 107.038773][ T30] audit: type=1400 audit(1750993555.152:242): avc: denied { getopt } for pid=6410 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.580588][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.770754][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 107.781097][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.867738][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.879386][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.894815][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 107.903903][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.004814][ T24] usb 5-1: config 0 descriptor?? [ 108.071418][ T917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.220565][ T917] usb 4-1: Using ep0 maxpacket: 8 [ 108.232707][ T917] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 108.267939][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.326554][ T917] usb 4-1: config 0 has no interface number 0 [ 108.336931][ T917] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 108.347754][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.360082][ T917] usb 4-1: Product: syz [ 108.365884][ T917] usb 4-1: Manufacturer: syz [ 108.375940][ T917] usb 4-1: SerialNumber: syz [ 108.395235][ T917] usb 4-1: config 0 descriptor?? [ 108.411906][ T917] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 108.428315][ T917] usb 4-1: No valid video chain found. [ 108.816549][ T917] usb 4-1: USB disconnect, device number 4 [ 109.028113][ T30] audit: type=1400 audit(1750993557.142:243): avc: denied { read write } for pid=6434 comm="syz.1.137" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.053077][ T30] audit: type=1400 audit(1750993557.142:244): avc: denied { open } for pid=6434 comm="syz.1.137" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.088065][ T30] audit: type=1400 audit(1750993557.202:245): avc: denied { ioctl } for pid=6434 comm="syz.1.137" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0xae48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.296617][ T30] audit: type=1400 audit(1750993557.402:246): avc: denied { read write } for pid=6439 comm="syz.0.138" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.336809][ T30] audit: type=1400 audit(1750993557.412:247): avc: denied { open } for pid=6439 comm="syz.0.138" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.583324][ T6441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 109.680864][ T30] audit: type=1400 audit(1750993557.412:248): avc: denied { read write } for pid=6438 comm="syz.2.140" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.737877][ T30] audit: type=1400 audit(1750993557.412:249): avc: denied { open } for pid=6438 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.770148][ T6444] netlink: 'syz.3.141': attribute type 14 has an invalid length. [ 109.779221][ T30] audit: type=1400 audit(1750993557.412:250): avc: denied { ioctl } for pid=6438 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.809534][ T30] audit: type=1400 audit(1750993557.412:251): avc: denied { map } for pid=6438 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.818577][ T6447] fuse: Bad value for 'fd' [ 110.326847][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 110.463558][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.010140][ T24] usb 5-1: USB disconnect, device number 6 [ 111.545406][ T6469] netlink: 'syz.2.147': attribute type 2 has an invalid length. [ 111.925451][ T6483] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.970228][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.154'. [ 112.270774][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.660540][ T917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.881159][ T55] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 113.096603][ T55] usb 5-1: config 0 has no interface number 1 [ 113.143876][ T55] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 113.160562][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.181757][ T55] usb 5-1: config 0 descriptor?? [ 113.200736][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.207837][ T55] usb 5-1: MIDIStreaming interface descriptor not found [ 113.286885][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 113.522703][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.538794][ T6487] netlink: 'syz.4.155': attribute type 2 has an invalid length. [ 113.555090][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.572753][ T6487] netlink: 'syz.4.155': attribute type 8 has an invalid length. [ 113.586257][ T55] gspca_main: spca561-2.14.0 probing abcd:cdee [ 113.629764][ T917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 113.633041][ T6487] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.155'. [ 113.692828][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 113.692843][ T30] audit: type=1400 audit(1750993561.772:261): avc: denied { sqpoll } for pid=6468 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.735897][ T55] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 113.750283][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 113.752020][ T55] usb 5-1: USB disconnect, device number 7 [ 113.793736][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.872157][ T917] usb 3-1: config 0 descriptor?? [ 113.957568][ T6515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.310474][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.478922][ T55] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.782256][ T55] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.816796][ T55] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.851745][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.891723][ T6517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.906543][ T55] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.613481][ T6540] netlink: 'syz.3.162': attribute type 2 has an invalid length. [ 115.621176][ T6540] netlink: 'syz.3.162': attribute type 8 has an invalid length. [ 115.630116][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 116.062665][ T30] audit: type=1400 audit(1750993563.542:262): avc: denied { create } for pid=6516 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 116.203556][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 116.209584][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 116.219785][ T917] usb 3-1: USB disconnect, device number 5 [ 116.551155][ T30] audit: type=1400 audit(1750993564.662:263): avc: denied { name_bind } for pid=6534 comm="syz.0.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 116.719476][ T6544] netlink: 'syz.1.167': attribute type 2 has an invalid length. [ 116.815737][ T6549] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 117.983997][ T6558] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 117.987808][ T6037] usb 4-1: USB disconnect, device number 5 [ 118.221775][ T6562] netlink: 256 bytes leftover after parsing attributes in process `syz.2.174'. [ 118.239162][ T5819] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 118.269515][ T30] audit: type=1400 audit(1750993566.352:264): avc: denied { connect } for pid=6563 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.527079][ T30] audit: type=1400 audit(1750993566.352:265): avc: denied { bind } for pid=6563 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.816541][ T6572] 9pnet_fd: Insufficient options for proto=fd [ 118.822702][ T30] audit: type=1400 audit(1750993566.932:266): avc: denied { read } for pid=6571 comm="syz.0.177" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 118.862336][ T30] audit: type=1400 audit(1750993566.932:267): avc: denied { open } for pid=6571 comm="syz.0.177" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 118.887487][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.897611][ T30] audit: type=1400 audit(1750993566.932:268): avc: denied { ioctl } for pid=6571 comm="syz.0.177" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 119.115424][ T24] usb 5-1: device descriptor read/64, error -71 [ 119.760487][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.778152][ T917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.911241][ T24] usb 5-1: device descriptor read/64, error -71 [ 120.191082][ T24] usb usb5-port1: attempt power cycle [ 120.211292][ T917] usb 4-1: Using ep0 maxpacket: 32 [ 120.224683][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.249708][ T917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 120.358510][ T917] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 120.367885][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.377788][ T917] usb 4-1: config 0 descriptor?? [ 120.388561][ T917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 120.420564][ T6599] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 120.482330][ T6600] FAULT_INJECTION: forcing a failure. [ 120.482330][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 120.495253][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.1.184 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 120.495278][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.495288][ T6600] Call Trace: [ 120.495294][ T6600] [ 120.495301][ T6600] dump_stack_lvl+0x16c/0x1f0 [ 120.495330][ T6600] should_fail_ex+0x512/0x640 [ 120.495352][ T6600] ? __kmalloc_noprof+0xbf/0x510 [ 120.495376][ T6600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 120.495398][ T6600] should_failslab+0xc2/0x120 [ 120.495423][ T6600] __kmalloc_noprof+0xd2/0x510 [ 120.495451][ T6600] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 120.495473][ T6600] ? cred_has_capability.isra.0+0x193/0x2f0 [ 120.495500][ T6600] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 120.495521][ T6600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 120.495551][ T6600] ? bpf_lsm_capable+0x9/0x10 [ 120.495569][ T6600] ? security_capable+0x7e/0x260 [ 120.495594][ T6600] genl_rcv_msg+0x55c/0x800 [ 120.495616][ T6600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.495637][ T6600] ? __pfx_ieee802154_llsec_del_key+0x10/0x10 [ 120.495664][ T6600] ? __lock_acquire+0x622/0x1c90 [ 120.495694][ T6600] netlink_rcv_skb+0x158/0x420 [ 120.495711][ T6600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.495732][ T6600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.495760][ T6600] ? netlink_deliver_tap+0x1ae/0xd30 [ 120.495786][ T6600] ? is_vmalloc_addr+0x86/0xa0 [ 120.495810][ T6600] genl_rcv+0x28/0x40 [ 120.495827][ T6600] netlink_unicast+0x53a/0x7f0 [ 120.495847][ T6600] ? __pfx_netlink_unicast+0x10/0x10 [ 120.495871][ T6600] netlink_sendmsg+0x8d1/0xdd0 [ 120.495893][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.495926][ T6600] ____sys_sendmsg+0xa98/0xc70 [ 120.495945][ T6600] ? copy_msghdr_from_user+0x10a/0x160 [ 120.495968][ T6600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.495999][ T6600] ___sys_sendmsg+0x134/0x1d0 [ 120.496024][ T6600] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.496045][ T6600] ? __lock_acquire+0x622/0x1c90 [ 120.496102][ T6600] __sys_sendmsg+0x16d/0x220 [ 120.496126][ T6600] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.496167][ T6600] do_syscall_64+0xcd/0x4c0 [ 120.496194][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.496212][ T6600] RIP: 0033:0x7f3cd0b8e929 [ 120.496227][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.496242][ T6600] RSP: 002b:00007f3cd1a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.496259][ T6600] RAX: ffffffffffffffda RBX: 00007f3cd0db6160 RCX: 00007f3cd0b8e929 [ 120.496270][ T6600] RDX: 0000000000048004 RSI: 0000200000000a80 RDI: 0000000000000006 [ 120.496280][ T6600] RBP: 00007f3cd1a42090 R08: 0000000000000000 R09: 0000000000000000 [ 120.496290][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.496300][ T6600] R13: 0000000000000000 R14: 00007f3cd0db6160 R15: 00007ffe80f86358 [ 120.496324][ T6600] [ 120.916992][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.940972][ T24] usb 5-1: device descriptor read/8, error -71 [ 121.640571][ T917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.682964][ T30] audit: type=1400 audit(1750993569.792:269): avc: denied { getopt } for pid=6609 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.723965][ T6611] warning: `syz.4.189' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.767970][ T6613] FAULT_INJECTION: forcing a failure. [ 121.767970][ T6613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 121.781307][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.0.190 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 121.781331][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.781341][ T6613] Call Trace: [ 121.781347][ T6613] [ 121.781353][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 121.781383][ T6613] should_fail_ex+0x512/0x640 [ 121.781411][ T6613] should_fail_alloc_page+0xe7/0x130 [ 121.781439][ T6613] prepare_alloc_pages+0x3c2/0x610 [ 121.781461][ T6613] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 121.781484][ T6613] ? rcu_is_watching+0x12/0xc0 [ 121.781506][ T6613] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 121.781528][ T6613] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.781552][ T6613] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.781574][ T6613] ? stack_depot_save_flags+0x3e0/0xa40 [ 121.781604][ T6613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 121.781634][ T6613] ? kasan_save_stack+0x33/0x60 [ 121.781656][ T6613] ? __kasan_kmalloc+0xaa/0xb0 [ 121.781676][ T6613] ? copy_splice_read+0x1a8/0xba0 [ 121.781696][ T6613] ? do_splice_read+0x282/0x370 [ 121.781714][ T6613] ? splice_direct_to_actor+0x2a1/0xa30 [ 121.781732][ T6613] ? do_splice_direct+0x174/0x240 [ 121.781751][ T6613] ? do_sendfile+0xb06/0xe50 [ 121.781769][ T6613] ? __x64_sys_sendfile64+0x154/0x220 [ 121.781793][ T6613] ? do_syscall_64+0xcd/0x4c0 [ 121.781836][ T6613] alloc_pages_bulk_noprof+0x71c/0x1410 [ 121.781866][ T6613] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 121.781895][ T6613] ? trace_kmalloc+0x2b/0xd0 [ 121.781920][ T6613] ? __kmalloc_noprof+0x242/0x510 [ 121.781948][ T6613] copy_splice_read+0x1e1/0xba0 [ 121.781976][ T6613] ? __pfx_copy_splice_read+0x10/0x10 [ 121.782000][ T6613] ? look_up_lock_class+0x6b/0x150 [ 121.782027][ T6613] ? lockdep_init_map_type+0x5c/0x280 [ 121.782056][ T6613] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 121.782082][ T6613] ? __pfx_copy_splice_read+0x10/0x10 [ 121.782103][ T6613] do_splice_read+0x282/0x370 [ 121.782127][ T6613] splice_direct_to_actor+0x2a1/0xa30 [ 121.782151][ T6613] ? __pfx_direct_splice_actor+0x10/0x10 [ 121.782178][ T6613] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 121.782200][ T6613] ? __pfx_file_has_perm+0x10/0x10 [ 121.782223][ T6613] do_splice_direct+0x174/0x240 [ 121.782246][ T6613] ? __pfx_do_splice_direct+0x10/0x10 [ 121.782268][ T6613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 121.782290][ T6613] ? bpf_lsm_file_permission+0x9/0x10 [ 121.782315][ T6613] ? security_file_permission+0x71/0x210 [ 121.782341][ T6613] ? rw_verify_area+0xcf/0x680 [ 121.782362][ T6613] do_sendfile+0xb06/0xe50 [ 121.782388][ T6613] ? __pfx_do_sendfile+0x10/0x10 [ 121.782418][ T6613] __x64_sys_sendfile64+0x154/0x220 [ 121.782444][ T6613] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 121.782478][ T6613] do_syscall_64+0xcd/0x4c0 [ 121.782505][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.782522][ T6613] RIP: 0033:0x7f7814b8e929 [ 121.782538][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.782554][ T6613] RSP: 002b:00007f78159b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 121.782571][ T6613] RAX: ffffffffffffffda RBX: 00007f7814db5fa0 RCX: 00007f7814b8e929 [ 121.782582][ T6613] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 121.782592][ T6613] RBP: 00007f78159b3090 R08: 0000000000000000 R09: 0000000000000000 [ 121.782602][ T6613] R10: 0000000000008ffb R11: 0000000000000246 R12: 0000000000000001 [ 121.782618][ T6613] R13: 0000000000000000 R14: 00007f7814db5fa0 R15: 00007fff24fc46a8 [ 121.782642][ T6613] [ 122.158089][ T55] usb 4-1: USB disconnect, device number 6 [ 122.172843][ T917] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.470496][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.489632][ T30] audit: type=1400 audit(1750993570.602:270): avc: denied { ioctl } for pid=6617 comm="syz.3.192" path="socket:[11376]" dev="sockfs" ino=11376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.499587][ T917] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 122.525461][ T917] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 122.535726][ T917] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.556314][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.582354][ T6606] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 122.601747][ T917] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.645504][ T5865] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 122.664639][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.728066][ T5865] usb 2-1: config 0 descriptor?? [ 122.804732][ T30] audit: type=1400 audit(1750993570.922:271): avc: denied { append } for pid=6603 comm="syz.2.187" name="midi3" dev="devtmpfs" ino=2896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.827728][ T917] usb 3-1: USB disconnect, device number 6 [ 122.897127][ T6631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.918232][ T30] audit: type=1400 audit(1750993571.032:272): avc: denied { name_bind } for pid=6630 comm="syz.4.195" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.942497][ T6631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.148188][ T6638] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 123.169698][ T5865] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 123.178162][ T5865] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 123.216635][ T5865] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 123.244535][ T5865] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 123.269004][ T5865] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 123.294445][ T5865] elecom 0003:056E:00E6.0002: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 123.306747][ T30] audit: type=1400 audit(1750993571.412:273): avc: denied { create } for pid=6641 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.336642][ T30] audit: type=1400 audit(1750993571.452:274): avc: denied { setcheckreqprot } for pid=6641 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.379923][ T24] usb 2-1: USB disconnect, device number 9 [ 123.457672][ T30] audit: type=1400 audit(1750993571.572:275): avc: denied { map } for pid=6645 comm="syz.2.200" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.248200][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 124.320634][ T917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.085783][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 125.216596][ T917] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.248197][ T917] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.272054][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 125.288636][ T917] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.289809][ T6662] 9pnet_fd: Insufficient options for proto=fd [ 125.297901][ T917] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.313622][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.315788][ T917] usb 3-1: Product: syz [ 125.326753][ T917] usb 3-1: Manufacturer: syz [ 125.335816][ T917] hub 3-1:4.0: USB hub found [ 125.400544][ T5816] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.433449][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.444876][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.460724][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.469901][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.478283][ T10] usb 5-1: Product: syz [ 125.482482][ T10] usb 5-1: Manufacturer: syz [ 125.487076][ T10] usb 5-1: SerialNumber: syz [ 125.520529][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 125.539493][ T917] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 125.550505][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 125.559105][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.569311][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.584609][ T917] usb 3-1: USB disconnect, device number 7 [ 125.590548][ T5816] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 125.590577][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.599606][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.617403][ T5816] usb 1-1: config 0 descriptor?? [ 125.624687][ T5816] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 125.691632][ T5865] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.699824][ T5865] usb 2-1: config 0 has no interface number 0 [ 125.710427][ T5865] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 125.720232][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.732513][ T5865] usb 2-1: Product: syz [ 125.736717][ T5865] usb 2-1: Manufacturer: syz [ 125.741462][ T43] usb 4-1: device descriptor read/64, error -71 [ 125.747741][ T5865] usb 2-1: SerialNumber: syz [ 125.758016][ T5865] usb 2-1: config 0 descriptor?? [ 125.969214][ T5865] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 125.980447][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.996256][ T5865] usb 2-1: USB disconnect, device number 10 [ 126.130537][ T43] usb 4-1: device descriptor read/64, error -71 [ 126.288521][ T43] usb usb4-port1: attempt power cycle [ 126.452392][ T30] audit: type=1326 audit(1750993574.442:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.478049][ T30] audit: type=1326 audit(1750993574.442:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.503829][ T30] audit: type=1326 audit(1750993574.442:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.529130][ T30] audit: type=1326 audit(1750993574.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.604759][ T30] audit: type=1326 audit(1750993574.452:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.634490][ T30] audit: type=1326 audit(1750993574.452:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.664236][ T30] audit: type=1326 audit(1750993574.452:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.742410][ T30] audit: type=1326 audit(1750993574.452:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.765884][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.780812][ T30] audit: type=1326 audit(1750993574.452:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.805555][ T30] audit: type=1326 audit(1750993574.452:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16138e929 code=0x7ffc0000 [ 126.833362][ T43] usb 4-1: device descriptor read/8, error -71 [ 127.080570][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.103390][ T43] usb 4-1: device descriptor read/8, error -71 [ 127.295951][ T43] usb usb4-port1: unable to enumerate USB device [ 127.360857][ T5816] usb 1-1: USB disconnect, device number 9 [ 127.424095][ T10] cdc_ncm 5-1:1.0: bind() failure [ 127.431820][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 127.458296][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 127.526608][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 127.543296][ T10] usb 5-1: USB disconnect, device number 12 [ 127.680534][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.860780][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 127.888763][ T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.897926][ T43] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.907153][ T43] usb 2-1: Product: syz [ 127.916701][ T43] usb 2-1: Manufacturer: syz [ 127.934887][ T43] usb 2-1: SerialNumber: syz [ 127.985390][ T43] usb 2-1: config 0 descriptor?? [ 128.310456][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.689647][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 128.705074][ T10] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 128.715265][ T10] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 128.732826][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.741955][ T10] usb 1-1: config 0 has no interface number 0 [ 128.750357][ T10] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.768106][ T10] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 128.800585][ T10] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 128.822384][ T10] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 128.846985][ T10] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.998568][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 129.007953][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.016937][ T10] usb 1-1: Product: syz [ 129.021355][ T10] usb 1-1: Manufacturer: syz [ 129.025953][ T10] usb 1-1: SerialNumber: syz [ 129.033258][ T10] usb 1-1: config 0 descriptor?? [ 129.508963][ T6694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.519489][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.679387][ T6711] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 130.156029][ T10] usb 1-1: USB disconnect, device number 10 [ 130.810537][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.853394][ T5865] usb 2-1: USB disconnect, device number 11 [ 130.897014][ T6725] FAULT_INJECTION: forcing a failure. [ 130.897014][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 130.912093][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.3.224 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 130.912111][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.912118][ T6725] Call Trace: [ 130.912121][ T6725] [ 130.912126][ T6725] dump_stack_lvl+0x16c/0x1f0 [ 130.912147][ T6725] should_fail_ex+0x512/0x640 [ 130.912162][ T6725] ? fs_reclaim_acquire+0xae/0x150 [ 130.912174][ T6725] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 130.912190][ T6725] should_failslab+0xc2/0x120 [ 130.912206][ T6725] __kmalloc_noprof+0xd2/0x510 [ 130.912222][ T6725] tomoyo_realpath_from_path+0xc2/0x6e0 [ 130.912238][ T6725] ? tomoyo_profile+0x47/0x60 [ 130.912255][ T6725] tomoyo_path_number_perm+0x245/0x580 [ 130.912267][ T6725] ? tomoyo_path_number_perm+0x237/0x580 [ 130.912281][ T6725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.912295][ T6725] ? find_held_lock+0x2b/0x80 [ 130.912320][ T6725] ? find_held_lock+0x2b/0x80 [ 130.912332][ T6725] ? hook_file_ioctl_common+0x145/0x410 [ 130.912352][ T6725] ? __fget_files+0x20e/0x3c0 [ 130.912369][ T6725] security_file_ioctl+0x9b/0x240 [ 130.912384][ T6725] __x64_sys_ioctl+0xb7/0x210 [ 130.912398][ T6725] do_syscall_64+0xcd/0x4c0 [ 130.912414][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.912426][ T6725] RIP: 0033:0x7f1644b8e929 [ 130.912434][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.912444][ T6725] RSP: 002b:00007f1645a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.912455][ T6725] RAX: ffffffffffffffda RBX: 00007f1644db5fa0 RCX: 00007f1644b8e929 [ 130.912461][ T6725] RDX: 0000200000000040 RSI: 000000004008af25 RDI: 0000000000000003 [ 130.912467][ T6725] RBP: 00007f1645a66090 R08: 0000000000000000 R09: 0000000000000000 [ 130.912473][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.912479][ T6725] R13: 0000000000000000 R14: 00007f1644db5fa0 R15: 00007ffcca777678 [ 130.912492][ T6725] [ 130.912496][ T6725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.042833][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 131.260013][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.274872][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.284665][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.298730][ T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.307985][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.318033][ T43] usb 5-1: config 0 descriptor?? [ 131.949373][ T6742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.307151][ T6757] netlink: 'syz.3.237': attribute type 11 has an invalid length. [ 132.328484][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.335023][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.573220][ T6769] FAULT_INJECTION: forcing a failure. [ 132.573220][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 132.601172][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.3.239 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 132.601201][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.601211][ T6769] Call Trace: [ 132.601217][ T6769] [ 132.601224][ T6769] dump_stack_lvl+0x16c/0x1f0 [ 132.601253][ T6769] should_fail_ex+0x512/0x640 [ 132.601276][ T6769] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 132.601297][ T6769] should_failslab+0xc2/0x120 [ 132.601318][ T6769] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 132.601336][ T6769] ? __alloc_skb+0x2b2/0x380 [ 132.601357][ T6769] __alloc_skb+0x2b2/0x380 [ 132.601375][ T6769] ? __pfx___alloc_skb+0x10/0x10 [ 132.601393][ T6769] ? process_measurement+0x4a6/0x23e0 [ 132.601412][ T6769] ? down_write+0x14d/0x200 [ 132.601438][ T6769] tipc_buf_acquire+0x26/0xe0 [ 132.601455][ T6769] tipc_msg_build+0x112/0x1150 [ 132.601476][ T6769] ? __pfx_tipc_msg_build+0x10/0x10 [ 132.601502][ T6769] ? avc_has_perm+0x11a/0x1c0 [ 132.601525][ T6769] ? __pfx_avc_has_perm+0x10/0x10 [ 132.601549][ T6769] __tipc_sendstream+0x6f9/0x1170 [ 132.601572][ T6769] ? __pfx___tipc_sendstream+0x10/0x10 [ 132.601588][ T6769] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.601603][ T6769] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.601618][ T6769] ? __pfx_woken_wake_function+0x10/0x10 [ 132.601638][ T6769] ? __local_bh_enable_ip+0xa4/0x120 [ 132.601658][ T6769] tipc_send_packet+0x6c/0xa0 [ 132.601673][ T6769] ____sys_sendmsg+0xa98/0xc70 [ 132.601688][ T6769] ? copy_msghdr_from_user+0x10a/0x160 [ 132.601707][ T6769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.601724][ T6769] ? __pfx__kstrtoull+0x10/0x10 [ 132.601743][ T6769] ___sys_sendmsg+0x134/0x1d0 [ 132.601763][ T6769] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.601791][ T6769] ? find_held_lock+0x2b/0x80 [ 132.601820][ T6769] __sys_sendmmsg+0x200/0x420 [ 132.601841][ T6769] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.601867][ T6769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.601896][ T6769] ? fput+0x70/0xf0 [ 132.601918][ T6769] ? ksys_write+0x1ac/0x250 [ 132.601935][ T6769] ? __pfx_ksys_write+0x10/0x10 [ 132.601955][ T6769] __x64_sys_sendmmsg+0x9c/0x100 [ 132.601974][ T6769] ? lockdep_hardirqs_on+0x7c/0x110 [ 132.601993][ T6769] do_syscall_64+0xcd/0x4c0 [ 132.602015][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.602029][ T6769] RIP: 0033:0x7f1644b8e929 [ 132.602042][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.602056][ T6769] RSP: 002b:00007f1645a24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.602070][ T6769] RAX: ffffffffffffffda RBX: 00007f1644db6160 RCX: 00007f1644b8e929 [ 132.602079][ T6769] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000006 [ 132.602088][ T6769] RBP: 00007f1645a24090 R08: 0000000000000000 R09: 0000000000000000 [ 132.602096][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.602104][ T6769] R13: 0000000000000000 R14: 00007f1644db6160 R15: 00007ffcca777678 [ 132.602123][ T6769] [ 132.980465][ T917] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.283450][ T6774] netlink: 'syz.2.240': attribute type 10 has an invalid length. [ 133.318079][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 133.376183][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.639138][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 133.663933][ T917] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 133.673282][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.687586][ T917] usb 1-1: Product: syz [ 133.689136][ T6774] syz_tun: entered promiscuous mode [ 133.704407][ T6774] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 133.763735][ T43] usb 5-1: USB disconnect, device number 13 [ 133.800527][ T917] usb 1-1: Manufacturer: syz [ 133.815360][ T917] usb 1-1: SerialNumber: syz [ 133.832189][ T917] usb 1-1: config 0 descriptor?? [ 133.847904][ T917] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 134.162785][ T917] usb 1-1: Detected FT-X [ 134.168400][ T917] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 134.393513][ T6784] "syz.2.242" (6784) uses obsolete ecb(arc4) skcipher [ 134.781075][ T917] ftdi_sio 1-1:0.0: GPIO initialisation failed: -32 [ 134.875371][ T917] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.220280][ T917] usb 1-1: USB disconnect, device number 11 [ 135.239372][ T917] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.279490][ T917] ftdi_sio 1-1:0.0: device disconnected [ 135.317993][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.4.245'. [ 135.370118][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.4.245'. [ 135.402793][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'. [ 135.412459][ T6792] netlink: 5 bytes leftover after parsing attributes in process `syz.4.245'. [ 136.542596][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 136.542612][ T30] audit: type=1400 audit(1750993584.662:301): avc: denied { append } for pid=6801 comm="syz.0.249" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.432354][ T6819] binder: 6817:6819 ioctl c0306201 200000000080 returned -14 [ 138.128038][ T30] audit: type=1400 audit(1750993585.792:302): avc: denied { create } for pid=6825 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.209751][ T6822] binder: 6817:6822 ioctl ae41 0 returned -22 [ 138.303789][ T30] audit: type=1400 audit(1750993585.812:303): avc: denied { connect } for pid=6825 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 138.935949][ T30] audit: type=1400 audit(1750993587.052:304): avc: denied { getopt } for pid=6844 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.015232][ T30] audit: type=1400 audit(1750993587.112:305): avc: denied { watch watch_reads } for pid=6846 comm="syz.2.262" path="/50" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.110037][ T30] audit: type=1400 audit(1750993587.222:306): avc: denied { mount } for pid=6848 comm="syz.4.261" name="/" dev="autofs" ino=12618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.176315][ T30] audit: type=1400 audit(1750993587.252:307): avc: denied { ioctl } for pid=6840 comm="syz.0.259" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.261598][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.580502][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 139.619567][ T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.644109][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.655615][ T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.668984][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.677998][ T55] usb 1-1: Product: syz [ 139.682319][ T55] usb 1-1: Manufacturer: syz [ 139.687528][ T55] usb 1-1: SerialNumber: syz [ 139.903259][ T30] audit: type=1400 audit(1750993588.012:308): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 139.976287][ T5816] usb 1-1: USB disconnect, device number 12 [ 140.069230][ T6858] kvm: pic: non byte write [ 141.704960][ T6867] "syz.4.266" (6867) uses obsolete ecb(arc4) skcipher [ 143.283330][ T917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.290889][ T30] audit: type=1400 audit(1750993591.022:309): avc: denied { read write } for pid=6880 comm="syz.2.273" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.358637][ T30] audit: type=1400 audit(1750993591.022:310): avc: denied { open } for pid=6880 comm="syz.2.273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.471333][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 143.479266][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.490442][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.500194][ T917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 143.513323][ T917] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 143.526345][ T917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.537793][ T917] usb 3-1: config 0 descriptor?? [ 143.720768][ T30] audit: type=1400 audit(1750993591.832:311): avc: denied { map } for pid=6890 comm="syz.0.276" path="socket:[12738]" dev="sockfs" ino=12738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.782378][ T30] audit: type=1400 audit(1750993591.832:312): avc: denied { accept } for pid=6890 comm="syz.0.276" path="socket:[12738]" dev="sockfs" ino=12738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.936346][ T6902] ocfs2: Unknown parameter 'usrquota' [ 144.060542][ T55] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.543295][ T55] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.556109][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8199, setting to 1024 [ 145.037294][ T55] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 145.056982][ T55] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.065499][ T55] usb 2-1: Manufacturer: syz [ 145.077049][ T55] usb 2-1: config 0 descriptor?? [ 145.084550][ T55] igorplugusb 2-1:0.0: endpoint incorrect [ 145.093412][ T6912] FAULT_INJECTION: forcing a failure. [ 145.093412][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 145.108253][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.281 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 145.108283][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.108294][ T6912] Call Trace: [ 145.108299][ T6912] [ 145.108306][ T6912] dump_stack_lvl+0x16c/0x1f0 [ 145.108335][ T6912] should_fail_ex+0x512/0x640 [ 145.108358][ T6912] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 145.108383][ T6912] should_failslab+0xc2/0x120 [ 145.108414][ T6912] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 145.108437][ T6912] ? __d_alloc+0x31/0xaa0 [ 145.108464][ T6912] __d_alloc+0x31/0xaa0 [ 145.108490][ T6912] d_alloc_pseudo+0x1c/0xc0 [ 145.108507][ T6912] alloc_file_pseudo+0xcf/0x230 [ 145.108526][ T6912] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 145.108549][ T6912] __anon_inode_getfile+0xf7/0x3a0 [ 145.108573][ T6912] ? lockdep_init_map_type+0x5c/0x280 [ 145.108604][ T6912] iommufd_test+0x7b9/0x6140 [ 145.108630][ T6912] ? __pfx_iommufd_test+0x10/0x10 [ 145.108651][ T6912] ? find_held_lock+0x2b/0x80 [ 145.108670][ T6912] ? __might_fault+0xe3/0x190 [ 145.108691][ T6912] ? __might_fault+0xe3/0x190 [ 145.108710][ T6912] ? __might_fault+0x13b/0x190 [ 145.108740][ T6912] iommufd_fops_ioctl+0x33f/0x4e0 [ 145.108764][ T6912] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 145.108788][ T6912] ? hook_file_ioctl_common+0x145/0x410 [ 145.108822][ T6912] ? selinux_file_ioctl+0x180/0x270 [ 145.108844][ T6912] ? selinux_file_ioctl+0xb4/0x270 [ 145.108868][ T6912] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 145.108892][ T6912] __x64_sys_ioctl+0x18b/0x210 [ 145.108912][ T6912] do_syscall_64+0xcd/0x4c0 [ 145.108939][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.108957][ T6912] RIP: 0033:0x7f1644b8e929 [ 145.108971][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.108987][ T6912] RSP: 002b:00007f1645a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.109005][ T6912] RAX: ffffffffffffffda RBX: 00007f1644db5fa0 RCX: 00007f1644b8e929 [ 145.109016][ T6912] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 145.109026][ T6912] RBP: 00007f1645a66090 R08: 0000000000000000 R09: 0000000000000000 [ 145.109035][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.109045][ T6912] R13: 0000000000000000 R14: 00007f1644db5fa0 R15: 00007ffcca777678 [ 145.109066][ T6912] [ 145.750737][ T917] usbhid 3-1:0.0: can't add hid device: -71 [ 145.760581][ T917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 145.776965][ T917] usb 3-1: USB disconnect, device number 8 [ 146.146001][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.333983][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.205096][ T6943] ip6tnl1: entered promiscuous mode [ 147.220749][ T6943] ip6tnl1: entered allmulticast mode [ 147.493199][ T6943] team0: Device ip6tnl1 is of different type [ 148.241011][ T30] audit: type=1400 audit(1750993596.362:313): avc: denied { read write } for pid=6965 comm="syz.0.298" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.244788][ T55] hid (null): invalid report_size 36546 [ 148.266177][ T30] audit: type=1400 audit(1750993596.362:314): avc: denied { open } for pid=6965 comm="syz.0.298" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 148.318004][ T55] hid-generic 1292:0000:0008.0003: unknown main item tag 0x3 [ 148.349662][ T55] hid-generic 1292:0000:0008.0003: unknown main item tag 0x5 [ 148.404779][ T10] usb 2-1: USB disconnect, device number 12 [ 148.428211][ T55] hid-generic 1292:0000:0008.0003: invalid report_size 36546 [ 148.436642][ T55] hid-generic 1292:0000:0008.0003: item 0 2 1 7 parsing failed [ 148.479545][ T55] hid-generic 1292:0000:0008.0003: probe with driver hid-generic failed with error -22 [ 148.590457][ T917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.710599][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.753295][ T917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.780433][ T917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.798683][ T917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.871342][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.914231][ T6970] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 148.924328][ T917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.003269][ T5816] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 149.047546][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.066377][ T5816] usb 3-1: Product: syz [ 149.074603][ T30] audit: type=1400 audit(1750993597.192:315): avc: denied { connect } for pid=6980 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.094932][ T5816] usb 3-1: Manufacturer: syz [ 149.099549][ T5816] usb 3-1: SerialNumber: syz [ 149.110170][ T5816] usb 3-1: config 0 descriptor?? [ 149.115420][ T30] audit: type=1400 audit(1750993597.192:316): avc: denied { setattr } for pid=6980 comm="syz.4.303" name="RXRPC" dev="sockfs" ino=12985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.145049][ T5816] usb 3-1: selecting invalid altsetting 1 [ 149.154941][ T5816] comedi comedi0: could not switch to alternate setting 1 [ 149.245927][ T5816] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 149.848556][ T917] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 149.859159][ T6979] FAULT_INJECTION: forcing a failure. [ 149.859159][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 149.879553][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.1.302 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 149.879581][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.879592][ T6979] Call Trace: [ 149.879599][ T6979] [ 149.879606][ T6979] dump_stack_lvl+0x16c/0x1f0 [ 149.879634][ T6979] should_fail_ex+0x512/0x640 [ 149.879662][ T6979] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 149.879689][ T6979] should_failslab+0xc2/0x120 [ 149.879714][ T6979] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 149.879736][ T6979] ? copy_process+0x4b6/0x76a0 [ 149.879764][ T6979] copy_process+0x4b6/0x76a0 [ 149.879795][ T6979] ? __pfx_copy_process+0x10/0x10 [ 149.879822][ T6979] ? lockdep_init_map_type+0x5c/0x280 [ 149.879851][ T6979] ? lockdep_init_map_type+0x5c/0x280 [ 149.879878][ T6979] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 149.879903][ T6979] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 149.879931][ T6979] vhost_task_create+0x1d2/0x2e0 [ 149.879948][ T6979] ? __pfx_vhost_task_create+0x10/0x10 [ 149.879972][ T6979] ? __pfx_vhost_task_fn+0x10/0x10 [ 149.880001][ T6979] kvm_mmu_post_init_vm+0x1b7/0x370 [ 149.880025][ T6979] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 149.880045][ T6979] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 149.880070][ T6979] kvm_vcpu_ioctl+0x5eb/0x1690 [ 149.880093][ T6979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.880120][ T6979] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 149.880147][ T6979] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 149.880178][ T6979] ? hook_file_ioctl_common+0x145/0x410 [ 149.880211][ T6979] ? selinux_file_ioctl+0x180/0x270 [ 149.880232][ T6979] ? selinux_file_ioctl+0xb4/0x270 [ 149.880255][ T6979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 149.880276][ T6979] __x64_sys_ioctl+0x18b/0x210 [ 149.880298][ T6979] do_syscall_64+0xcd/0x4c0 [ 149.880323][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.880341][ T6979] RIP: 0033:0x7f3cd0b8e929 [ 149.880359][ T6979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.880374][ T6979] RSP: 002b:00007f3cd1a63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.880391][ T6979] RAX: ffffffffffffffda RBX: 00007f3cd0db6080 RCX: 00007f3cd0b8e929 [ 149.880401][ T6979] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 149.880412][ T6979] RBP: 00007f3cd1a63090 R08: 0000000000000000 R09: 0000000000000000 [ 149.880422][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.880433][ T6979] R13: 0000000000000000 R14: 00007f3cd0db6080 R15: 00007ffe80f86358 [ 149.880456][ T6979] [ 150.453652][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 150.492378][ T30] audit: type=1400 audit(1750993598.602:317): avc: denied { ioctl } for pid=6984 comm="syz.0.304" path="socket:[13540]" dev="sockfs" ino=13540 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.517272][ T917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 150.580252][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 150.613519][ T30] audit: type=1400 audit(1750993598.732:318): avc: denied { bind } for pid=6984 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.654870][ T917] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 150.665446][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.705192][ T917] usb 5-1: Product: syz [ 150.710510][ T30] audit: type=1400 audit(1750993598.732:319): avc: denied { read } for pid=6984 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.720199][ T917] usb 5-1: Manufacturer: syz [ 150.739335][ T917] usb 5-1: SerialNumber: syz [ 150.757118][ T917] usb 5-1: config 0 descriptor?? [ 150.765681][ T6981] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.774404][ T6981] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 150.782218][ T917] usb 5-1: ucan: probing device on interface #0 [ 151.259518][ T917] usb 5-1: ucan: device protocol version 31875 is not supported [ 151.303791][ T917] usb 5-1: ucan: probe failed; try to update the device firmware [ 151.329091][ T30] audit: type=1400 audit(1750993599.442:320): avc: denied { append } for pid=6995 comm="syz.1.306" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.410049][ T55] usb 4-1: USB disconnect, device number 11 [ 151.541003][ T30] audit: type=1400 audit(1750993599.662:321): avc: denied { setopt } for pid=6980 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.542908][ T24] usb 5-1: USB disconnect, device number 14 [ 151.850225][ T24] usb 3-1: USB disconnect, device number 9 [ 151.893597][ T30] audit: type=1400 audit(1750993600.012:322): avc: denied { ioctl } for pid=7002 comm="syz.2.309" path="socket:[13566]" dev="sockfs" ino=13566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.009914][ T30] audit: type=1400 audit(1750993600.012:323): avc: denied { append } for pid=7002 comm="syz.2.309" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.620445][ T30] audit: type=1400 audit(1750993601.732:324): avc: denied { ioctl } for pid=7029 comm="syz.3.319" path="socket:[13201]" dev="sockfs" ino=13201 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.644977][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.655610][ T7034] 9pnet_fd: Insufficient options for proto=fd [ 153.800527][ T5872] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.857419][ T7042] FAULT_INJECTION: forcing a failure. [ 153.857419][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 153.878630][ T7042] CPU: 0 UID: 0 PID: 7042 Comm: syz.2.322 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 153.878659][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.878669][ T7042] Call Trace: [ 153.878675][ T7042] [ 153.878682][ T7042] dump_stack_lvl+0x16c/0x1f0 [ 153.878712][ T7042] should_fail_ex+0x512/0x640 [ 153.878734][ T7042] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 153.878757][ T7042] should_failslab+0xc2/0x120 [ 153.878782][ T7042] __kmalloc_cache_noprof+0x6a/0x3e0 [ 153.878802][ T7042] ? cfg80211_sinfo_alloc_tid_stats+0xa6/0x170 [ 153.878833][ T7042] cfg80211_sinfo_alloc_tid_stats+0xa6/0x170 [ 153.878860][ T7042] sta_set_sinfo+0x23ea/0x4600 [ 153.878896][ T7042] ? kasan_save_track+0x14/0x30 [ 153.878921][ T7042] __sta_info_destroy_part2+0x2da/0x540 [ 153.878952][ T7042] __sta_info_flush+0x521/0x740 [ 153.878983][ T7042] ? __pfx___sta_info_flush+0x10/0x10 [ 153.879016][ T7042] ieee80211_ibss_disconnect+0x165/0x8f0 [ 153.879042][ T7042] ieee80211_ibss_leave+0x4a/0x160 [ 153.879063][ T7042] cfg80211_leave_ibss+0x1af/0x480 [ 153.879089][ T7042] cfg80211_ibss_wext_siwfreq+0x34d/0x450 [ 153.879114][ T7042] cfg80211_wext_siwfreq+0x2ee/0x330 [ 153.879140][ T7042] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 153.879166][ T7042] ? __pfx___mutex_lock+0x10/0x10 [ 153.879197][ T7042] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 153.879221][ T7042] ioctl_standard_call+0xb2/0x1d0 [ 153.879247][ T7042] ? __pfx_ioctl_standard_call+0x10/0x10 [ 153.879273][ T7042] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 153.879296][ T7042] wireless_process_ioctl.constprop.0+0x291/0x3d0 [ 153.879326][ T7042] wext_handle_ioctl+0x226/0x2a0 [ 153.879352][ T7042] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 153.879383][ T7042] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 153.879410][ T7042] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 153.879438][ T7042] sock_ioctl+0x3a1/0x6b0 [ 153.879458][ T7042] ? __pfx_sock_ioctl+0x10/0x10 [ 153.879474][ T7042] ? hook_file_ioctl_common+0x145/0x410 [ 153.879508][ T7042] ? selinux_file_ioctl+0x180/0x270 [ 153.879529][ T7042] ? selinux_file_ioctl+0xb4/0x270 [ 153.879553][ T7042] ? __pfx_sock_ioctl+0x10/0x10 [ 153.879572][ T7042] __x64_sys_ioctl+0x18b/0x210 [ 153.879604][ T7042] do_syscall_64+0xcd/0x4c0 [ 153.879631][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.879648][ T7042] RIP: 0033:0x7fc16138e929 [ 153.879663][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.879680][ T7042] RSP: 002b:00007fc162130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.879698][ T7042] RAX: ffffffffffffffda RBX: 00007fc1615b5fa0 RCX: 00007fc16138e929 [ 153.879709][ T7042] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 153.879720][ T7042] RBP: 00007fc162130090 R08: 0000000000000000 R09: 0000000000000000 [ 153.879730][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.879740][ T7042] R13: 0000000000000000 R14: 00007fc1615b5fa0 R15: 00007ffe683322e8 [ 153.879764][ T7042] [ 154.180003][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.225799][ T30] audit: type=1400 audit(1750993602.332:325): avc: denied { ioctl } for pid=7043 comm="syz.1.325" path="socket:[13235]" dev="sockfs" ino=13235 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.250413][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.290188][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.302166][ T5872] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.312078][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.321351][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.338374][ T7026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.376525][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.728238][ T30] audit: type=1400 audit(1750993602.842:326): avc: denied { bind } for pid=7046 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.213188][ T30] audit: type=1400 audit(1750993602.842:327): avc: denied { write } for pid=7046 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.232818][ T30] audit: type=1400 audit(1750993602.842:328): avc: denied { accept } for pid=7046 comm="syz.4.326" lport=53257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.464633][ T7061] netlink: 'syz.2.328': attribute type 37 has an invalid length. [ 155.804042][ T30] audit: type=1400 audit(1750993603.322:329): avc: denied { create } for pid=7046 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.900639][ T30] audit: type=1400 audit(1750993603.902:330): avc: denied { getopt } for pid=7046 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.527551][ T5872] usb 1-1: USB disconnect, device number 13 [ 156.614790][ T7075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.692114][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.702039][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.721928][ T7078] FAULT_INJECTION: forcing a failure. [ 156.721928][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.733481][ T7085] netlink: 156 bytes leftover after parsing attributes in process `syz.0.335'. [ 156.744377][ T7078] CPU: 0 UID: 0 PID: 7078 Comm: syz.4.333 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 156.744402][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.744412][ T7078] Call Trace: [ 156.744416][ T7078] [ 156.744420][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 156.744440][ T7078] should_fail_ex+0x512/0x640 [ 156.744457][ T7078] _copy_to_user+0x32/0xd0 [ 156.744473][ T7078] snd_pcm_oss_read2+0x294/0x410 [ 156.744486][ T7078] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 156.744496][ T7078] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 156.744509][ T7078] ? snd_pcm_oss_prepare+0x11e/0x220 [ 156.744527][ T7078] snd_pcm_oss_read+0x5d3/0x760 [ 156.744540][ T7078] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 156.744551][ T7078] vfs_read+0x1e1/0xc60 [ 156.744568][ T7078] ? __pfx_vfs_read+0x10/0x10 [ 156.744579][ T7078] ? find_held_lock+0x2b/0x80 [ 156.744593][ T7078] ? __fget_files+0x204/0x3c0 [ 156.744609][ T7078] ? __fget_files+0x20e/0x3c0 [ 156.744627][ T7078] ksys_read+0x12a/0x250 [ 156.744640][ T7078] ? __pfx_ksys_read+0x10/0x10 [ 156.744656][ T7078] do_syscall_64+0xcd/0x4c0 [ 156.744672][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.744684][ T7078] RIP: 0033:0x7f918d78e929 [ 156.744693][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.744704][ T7078] RSP: 002b:00007f918b5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.744714][ T7078] RAX: ffffffffffffffda RBX: 00007f918d9b5fa0 RCX: 00007f918d78e929 [ 156.744721][ T7078] RDX: 0000000000002020 RSI: 0000200000000a00 RDI: 0000000000000005 [ 156.744727][ T7078] RBP: 00007f918b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.744733][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.744739][ T7078] R13: 0000000000000000 R14: 00007f918d9b5fa0 R15: 00007ffe871c8c98 [ 156.744752][ T7078] [ 157.034236][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.335'. [ 157.043488][ T7085] FAULT_INJECTION: forcing a failure. [ 157.043488][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.057046][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.0.335 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 157.057071][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.057082][ T7085] Call Trace: [ 157.057088][ T7085] [ 157.057094][ T7085] dump_stack_lvl+0x16c/0x1f0 [ 157.057124][ T7085] should_fail_ex+0x512/0x640 [ 157.057150][ T7085] _copy_to_user+0x32/0xd0 [ 157.057175][ T7085] simple_read_from_buffer+0xcb/0x170 [ 157.057199][ T7085] proc_fail_nth_read+0x197/0x270 [ 157.057222][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.057244][ T7085] ? rw_verify_area+0xcf/0x680 [ 157.057263][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.057283][ T7085] vfs_read+0x1e1/0xc60 [ 157.057304][ T7085] ? __pfx___mutex_lock+0x10/0x10 [ 157.057334][ T7085] ? __pfx_vfs_read+0x10/0x10 [ 157.057360][ T7085] ? __fget_files+0x20e/0x3c0 [ 157.057381][ T7085] ? rcu_is_watching+0x10/0xc0 [ 157.057409][ T7085] ksys_read+0x12a/0x250 [ 157.057428][ T7085] ? __pfx_ksys_read+0x10/0x10 [ 157.057455][ T7085] do_syscall_64+0xcd/0x4c0 [ 157.057479][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.057495][ T7085] RIP: 0033:0x7f7814b8d33c [ 157.057509][ T7085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.057525][ T7085] RSP: 002b:00007f78159b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.057541][ T7085] RAX: ffffffffffffffda RBX: 00007f7814db5fa0 RCX: 00007f7814b8d33c [ 157.057551][ T7085] RDX: 000000000000000f RSI: 00007f78159b30a0 RDI: 0000000000000006 [ 157.057561][ T7085] RBP: 00007f78159b3090 R08: 0000000000000000 R09: 0000000000000000 [ 157.057571][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.057579][ T7085] R13: 0000000000000000 R14: 00007f7814db5fa0 R15: 00007fff24fc46a8 [ 157.057601][ T7085] [ 157.365427][ T917] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 157.536465][ T917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.546117][ T917] usb 4-1: not running at top speed; connect to a high speed hub [ 157.557182][ T917] usb 4-1: config 253 has an invalid interface number: 252 but max is 0 [ 157.566109][ T917] usb 4-1: config 253 has no interface number 0 [ 157.578692][ T917] usb 4-1: New USB device found, idVendor=1f4d, idProduct=d220, bcdDevice=13.2e [ 157.830618][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.839711][ T917] usb 4-1: Product: 《 [ 157.850207][ T917] usb 4-1: Manufacturer: 㠁 [ 157.856917][ T917] usb 4-1: SerialNumber: syz [ 158.279060][ T917] dvb-usb: found a 'Geniatech T220 DVB-T/T2 USB2.0' in warm state. [ 158.379662][ T917] dw2102: su3000_power_ctrl: 1, initialized 0 [ 158.511496][ T917] dvb-usb: bulk message failed: -22 (2/0) [ 158.520094][ T917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 158.522484][ T7102] FAULT_INJECTION: forcing a failure. [ 158.522484][ T7102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.545975][ T917] dvb-usb: Geniatech T220 DVB-T/T2 USB2.0 error while loading driver (-19) [ 158.665001][ T917] usb 4-1: USB disconnect, device number 12 [ 158.675283][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.2.341 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 158.675311][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.675321][ T7102] Call Trace: [ 158.675327][ T7102] [ 158.675333][ T7102] dump_stack_lvl+0x16c/0x1f0 [ 158.675361][ T7102] should_fail_ex+0x512/0x640 [ 158.675394][ T7102] _copy_from_user+0x2e/0xd0 [ 158.675420][ T7102] move_addr_to_kernel+0x65/0x170 [ 158.675439][ T7102] __sys_sendto+0x1be/0x520 [ 158.675461][ T7102] ? __pfx___sys_sendto+0x10/0x10 [ 158.675488][ T7102] ? find_held_lock+0x2b/0x80 [ 158.675526][ T7102] __x64_sys_sendto+0xe0/0x1c0 [ 158.675547][ T7102] ? do_syscall_64+0x91/0x4c0 [ 158.675571][ T7102] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.675594][ T7102] do_syscall_64+0xcd/0x4c0 [ 158.675620][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.675647][ T7102] RIP: 0033:0x7fc1613907bc [ 158.675661][ T7102] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 158.675678][ T7102] RSP: 002b:00007fc16212eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 158.675694][ T7102] RAX: ffffffffffffffda RBX: 00007fc16212efc0 RCX: 00007fc1613907bc [ 158.675706][ T7102] RDX: 0000000000000020 RSI: 00007fc16212f010 RDI: 0000000000000003 [ 158.675716][ T7102] RBP: 0000000000000000 R08: 00007fc16212ef14 R09: 000000000000000c [ 158.675726][ T7102] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 158.675737][ T7102] R13: 00007fc16212ef68 R14: 00007fc16212f010 R15: 0000000000000000 [ 158.675759][ T7102] [ 159.072724][ T5819] Bluetooth: min 0 < 6 [ 159.410616][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.521848][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 159.749983][ T5816] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 159.759979][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.769128][ T5816] usb 3-1: Product: syz [ 159.773520][ T5816] usb 3-1: Manufacturer: syz [ 159.780946][ T5816] usb 3-1: SerialNumber: syz [ 159.800646][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.813694][ T5816] usb 3-1: config 0 descriptor?? [ 159.822395][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.839739][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.851562][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.861445][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.891220][ T7113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.901727][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.479818][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 160.584555][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.594927][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.611804][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 160.680663][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.822415][ T9] usb 1-1: config 0 descriptor?? [ 161.044601][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 161.077641][ T30] audit: type=1400 audit(1750993609.192:331): avc: denied { bind } for pid=7132 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.099760][ T30] audit: type=1400 audit(1750993609.202:332): avc: denied { setopt } for pid=7132 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.121722][ T5819] Bluetooth: hci1: command tx timeout [ 161.466680][ T5816] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.487723][ T5816] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 161.502566][ T5816] asix 3-1:0.0: probe with driver asix failed with error -71 [ 161.514499][ T5816] usb 3-1: USB disconnect, device number 10 [ 161.540552][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.885564][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 161.936739][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.947062][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 161.960174][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 161.969321][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.979741][ T9] usb 5-1: config 0 descriptor?? [ 161.987764][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 161.996787][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 162.215795][ T5816] usb 2-1: USB disconnect, device number 13 [ 162.336505][ T7145] netlink: 156 bytes leftover after parsing attributes in process `syz.1.355'. [ 162.350564][ T7145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'. [ 162.367389][ T6037] usb 1-1: USB disconnect, device number 14 [ 162.382432][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 162.391553][ T30] audit: type=1400 audit(1750993610.502:333): avc: denied { bind } for pid=7146 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.606319][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.1.359'. [ 162.649057][ T7159] xt_CT: No such helper "pptp" [ 267.680314][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 267.687278][ C0] rcu: 1-...!: (0 ticks this GP) idle=cd34/1/0x4000000000000000 softirq=23026/23026 fqs=0 [ 267.697802][ C0] rcu: (detected by 0, t=10502 jiffies, g=14633, q=512 ncpus=2) [ 267.705519][ C0] Sending NMI from CPU 0 to CPUs 1: [ 267.705544][ C1] NMI backtrace for cpu 1 [ 267.705555][ C1] CPU: 1 UID: 0 PID: 7159 Comm: syz.1.359 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 267.705573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.705581][ C1] RIP: 0010:__lock_acquire+0x28/0x1c90 [ 267.705607][ C1] Code: 90 90 41 57 41 56 41 55 41 54 55 53 65 48 8b 2d b6 88 34 12 48 83 ec 68 8b 1d d8 ed 0f 0f 48 8b 84 24 a0 00 00 00 44 89 04 24 <48> 89 44 24 08 65 48 8b 05 83 88 34 12 48 89 44 24 60 31 c0 85 db [ 267.705620][ C1] RSP: 0018:ffffc90000a08c40 EFLAGS: 00000082 [ 267.705632][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 267.705641][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803546d300 [ 267.705649][ C1] RBP: ffff888036ba0000 R08: 0000000000000001 R09: 0000000000000001 [ 267.705657][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 267.705665][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.705673][ C1] FS: 00007f3cd1a846c0(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 267.705687][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.705696][ C1] CR2: 000000110c31cce9 CR3: 000000007b7a7000 CR4: 00000000003526f0 [ 267.705704][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 267.705712][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 267.705720][ C1] Call Trace: [ 267.705725][ C1] [ 267.705733][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 267.705748][ C1] lock_acquire+0x179/0x350 [ 267.705766][ C1] ? advance_sched+0xd9/0xc80 [ 267.705783][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 267.705797][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 267.705815][ C1] ? __pfx_advance_sched+0x10/0x10 [ 267.705830][ C1] _raw_spin_lock+0x2e/0x40 [ 267.705844][ C1] ? advance_sched+0xd9/0xc80 [ 267.705858][ C1] advance_sched+0xd9/0xc80 [ 267.705873][ C1] ? find_held_lock+0x2b/0x80 [ 267.705890][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 267.705904][ C1] ? __pfx_advance_sched+0x10/0x10 [ 267.705919][ C1] __hrtimer_run_queues+0x202/0xad0 [ 267.705936][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 267.705950][ C1] ? read_tsc+0x9/0x20 [ 267.705966][ C1] hrtimer_interrupt+0x397/0x8e0 [ 267.705986][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 267.706007][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 267.706024][ C1] [ 267.706029][ C1] [ 267.706033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.706048][ C1] RIP: 0010:__text_poke+0x4bc/0xb70 [ 267.706061][ C1] Code: 00 48 85 db 0f 85 d2 02 00 00 e8 0f ae 5c 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 6d a9 5c 00 48 85 db 0f 85 a3 05 00 00 ef ad 5c 00 48 8b bc 24 80 00 00 00 e8 12 c2 23 0a e8 fd 1e 21 [ 267.706073][ C1] RSP: 0018:ffffc9000b9df720 EFLAGS: 00000283 [ 267.706084][ C1] RAX: 00000000000076a2 RBX: 0000000000000000 RCX: ffffc900050c3000 [ 267.706093][ C1] RDX: 0000000000080000 RSI: ffffffff815f7558 RDI: 0000000000000007 [ 267.706101][ C1] RBP: ffffffff814554ee R08: 0000000000000007 R09: 0000000000000000 [ 267.706109][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000004ef [ 267.706117][ C1] R13: ffff8880316cd600 R14: 0000000000000001 R15: 8000000000000063 [ 267.706126][ C1] ? kvm_recalculate_apic_map+0x37e/0x1570 [ 267.706141][ C1] ? __text_poke+0x798/0xb70 [ 267.706155][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 267.706170][ C1] ? __pfx___text_poke+0x10/0x10 [ 267.706187][ C1] ? kvm_recalculate_apic_map+0x37e/0x1570 [ 267.706201][ C1] ? kvm_recalculate_apic_map+0x37e/0x1570 [ 267.706214][ C1] smp_text_poke_batch_finish+0x237/0xdb0 [ 267.706229][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 267.706248][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 267.706265][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 267.706281][ C1] ? find_held_lock+0x2b/0x80 [ 267.706298][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 267.706313][ C1] jump_label_update+0x376/0x550 [ 267.706329][ C1] static_key_slow_inc_cpuslocked+0x82/0x120 [ 267.706345][ C1] static_key_slow_inc+0x1a/0x30 [ 267.706360][ C1] kvm_create_lapic+0x37b/0x4d0 [ 267.706375][ C1] kvm_arch_vcpu_create+0x283/0xb20 [ 267.706390][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 267.706411][ C1] kvm_vm_ioctl+0xf57/0x3da0 [ 267.706433][ C1] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 267.706457][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 267.706473][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.706491][ C1] ? find_held_lock+0x2b/0x80 [ 267.706506][ C1] ? tomoyo_path_number_perm+0x295/0x580 [ 267.706524][ C1] ? tomoyo_path_number_perm+0x18d/0x580 [ 267.706539][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.706554][ C1] ? futex_wake+0x1ad/0x530 [ 267.706566][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.706581][ C1] ? do_vfs_ioctl+0x523/0x1a60 [ 267.706596][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.706612][ C1] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 267.706632][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 267.706653][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 267.706675][ C1] ? selinux_file_ioctl+0x180/0x270 [ 267.706692][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 267.706709][ C1] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 267.706728][ C1] __x64_sys_ioctl+0x18b/0x210 [ 267.706743][ C1] do_syscall_64+0xcd/0x4c0 [ 267.706762][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.706776][ C1] RIP: 0033:0x7f3cd0b8e929 [ 267.706787][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.706800][ C1] RSP: 002b:00007f3cd1a84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.706812][ C1] RAX: ffffffffffffffda RBX: 00007f3cd0db5fa0 RCX: 00007f3cd0b8e929 [ 267.706821][ C1] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009 [ 267.706828][ C1] RBP: 00007f3cd0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 267.706837][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.706844][ C1] R13: 0000000000000000 R14: 00007f3cd0db5fa0 R15: 00007ffe80f86358 [ 267.706857][ C1] [ 267.707538][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g14633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 268.323737][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=7123 [ 268.331526][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g14633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 268.342881][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 268.352837][ C0] rcu: RCU grace-period kthread stack dump: [ 268.358709][ C0] task:rcu_preempt state:I stack:27928 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 268.370642][ C0] Call Trace: [ 268.373920][ C0] [ 268.376850][ C0] __schedule+0x116a/0x5de0 [ 268.381371][ C0] ? __lock_acquire+0x622/0x1c90 [ 268.386334][ C0] ? __pfx___schedule+0x10/0x10 [ 268.391198][ C0] ? find_held_lock+0x2b/0x80 [ 268.395883][ C0] ? schedule+0x2d7/0x3a0 [ 268.400225][ C0] schedule+0xe7/0x3a0 [ 268.404303][ C0] schedule_timeout+0x123/0x290 [ 268.409150][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 268.414516][ C0] ? __pfx_process_timeout+0x10/0x10 [ 268.419809][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 268.425611][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 268.431083][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 268.435940][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 268.441230][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.446429][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 268.451797][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 268.456652][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 268.462457][ C0] rcu_gp_kthread+0x270/0x380 [ 268.467145][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.472341][ C0] ? rcu_is_watching+0x12/0xc0 [ 268.477108][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.482309][ C0] ? __kthread_parkme+0x19e/0x250 [ 268.487333][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.492531][ C0] kthread+0x3c2/0x780 [ 268.496593][ C0] ? __pfx_kthread+0x10/0x10 [ 268.501180][ C0] ? rcu_is_watching+0x12/0xc0 [ 268.505944][ C0] ? __pfx_kthread+0x10/0x10 [ 268.510528][ C0] ret_from_fork+0x5d4/0x6f0 [ 268.515118][ C0] ? __pfx_kthread+0x10/0x10 [ 268.519712][ C0] ret_from_fork_asm+0x1a/0x30 [ 268.524484][ C0]