last executing test programs: 13.551222962s ago: executing program 0 (id=913): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 13.005348526s ago: executing program 1 (id=914): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) r1 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) syz_usb_disconnect(r1) ioctl(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000200)) 10.861124279s ago: executing program 2 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x88}}, 0x4000040) 8.372305391s ago: executing program 1 (id=921): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 8.21756875s ago: executing program 3 (id=922): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 8.126672565s ago: executing program 2 (id=923): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20140, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161c050002311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000001640)="5273027e0a4e47adad", 0x9}], 0x3, 0x0, 0x7) capget(0x0, &(0x7f0000000740)={0x1, 0x7ff, 0xa10f, 0x8, 0x903, 0x1}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') unshare(0x38060000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x719ac1) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0xf3f1, 0x12000802, 0x3, 0x5, 0x5, 0xfffffffb, 0x0, 0x0, 0x1, 0xfffd}}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) 7.213856416s ago: executing program 0 (id=924): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mq_open(&(0x7f0000000000)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xde\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba]\b\x1b\xf5\x85\xe5\nt\xd1\xcf\v\xab\xfd\x9a(\xe7\xf9\xa7yY\x18i\xcc\xe7\x1d\xc5J\xf0\xc5\xc7\xd9hi\xc8\xc6\x9b-\xe9\xf1.\x1dE=\x117n\x88^\x9a\x927\x0f{r\xfe\xe3\xae\xf9\x16\x98=0\x99\xa0\xbd\x03\nK\xeaI\x83>\xe4\xbd\x98\x89Ub\xf2\xad\xdb\\\xf62\t\x10W\x80\x16\aJB\xf9\x1c\x06\x98+\xa7\xcf\x1c\xa7j\xea\xf8\xf0\x1ak\x98$\xd8r\x8c;_S=N\xe7\xba\x8e_\xd2kS\x177p^#\x8b-\xbb;H\xf5v\xb1@\xc12\x9d\xe4\xe4c\xa1\xf1\xb8\xce\x0e.\x8aox\xec)\xf3\x89\xe4\xa4|\xc5\xa9\xa8\xc4\x15;\xc3W.\x1a\xb2\xb3\x15\x9a9\xf1\xa9\xb9\x04e\xd21\xab\x8e(-S\x1d|\x8320\xb2\xd7L\x8b\'\n\xfa7`2D\xf1\x94\x16\xa9\r\x15K\xde\x01\x94?\x97y \x95\xdc\x04\xaf\x96\xd9\x83\x0e2%\xed\xf8E\f\x01A\x88\x897\f\x03\v\xed\x8d\xdc\x9elg\xd11\xac\xfbY\xcbj!\xae\xb7:F\x0e\x83\xd5\xdd\xd7\x94\xea\x00\x00\x00\x00\x00\x00\x97\x9b\x062\x82\x01\x90\x04\xe1\xa6K\v\xe1g\xd5i\"q\xfa\xe7t\xb2\xd0W4\x04\x1a\x1f\xb6L\xc7\t\x18J\xb2Zp\x06J\xa3\xcc\v\xcc\x06\xd2M\x06\x17]\xa3cX\\\x1e\x83\xf0Hm\x83%\x91Q \xf9\xecX\xb2\x10z\xee\"\xfa{U\xb2a\x16\xae\xab\xac\v\xe1(\x13\"\xee$\x8f\xe1\xdd\fC\xfa3}b\x9e\xffsSv\xaf', 0x6e93ebbbcc088cf2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x9, 0x2c4340) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r9, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 6.328318397s ago: executing program 1 (id=925): socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 6.263995802s ago: executing program 0 (id=926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d48804"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8) close(r2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078dadf"], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e21"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6.221692375s ago: executing program 4 (id=927): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffc, @local}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x22, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x40002, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0xffffffffffffffba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) 6.173372197s ago: executing program 2 (id=928): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x3) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 4.711140884s ago: executing program 1 (id=929): r0 = userfaultfd(0x80001) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="9200"/18, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) fchdir(r3) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x24, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x261f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x7b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r4}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) execveat(r3, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r6) 4.600516645s ago: executing program 2 (id=930): socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x1, &(0x7f0000000040)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r4, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000") ioctl(r4, 0x400c0930, 0x0) 4.509483641s ago: executing program 4 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff0280080005", @ANYRES32=r0, @ANYBLOB="080004007f00"], 0x50}}, 0xc0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8=r1], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000240)={0x2, 0x0, @broadcast, 0x3}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe0300010000000008000400010000000600"], 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) write(r5, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) 4.256251503s ago: executing program 3 (id=932): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x5, 0x6, 0x8, 0x2000, 0x1, 0xb23, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x61) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB="de42f49fa64ed1f50b32ba1f67a99bb09ff6af86c1f1ceb0178228d8bf2637f5f7ac736572ae95890af514f92241eaee9c00698be0f83cdf1e0e1d6f542839a46ed611bf50dee31d9318a8af5b199ea56381e250b87d8d31438289f9af09"], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000454c0000010000000600000001000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02800000010000000300"/28], 0x50) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r16, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1e, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000009c0)='GPL\x00', 0x80000001, 0x1, &(0x7f0000000a80)=""/1, 0x40f00, 0x0, '\x00', r18, @fallback=0x6, r15, 0x8, &(0x7f0000000b80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x6, 0x80, 0xb2}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f0000000c00)=[r17, r1, r0, r4, r0, r16], &(0x7f0000000c40)=[{0x1, 0x3, 0x10, 0x6}, {0x3, 0x5, 0xa, 0x2}], 0x10, 0x2097b32e}, 0x94) 3.92235299s ago: executing program 4 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x88}}, 0x4000040) 3.565702833s ago: executing program 4 (id=934): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000008000000018000000646c6c2500000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xb4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setxattr$incfs_id(0x0, 0x0, &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r4 = fsopen(&(0x7f00000002c0)='befs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x98223, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1}) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3.309031294s ago: executing program 2 (id=935): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000241)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x3c, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c5", 0x0, 0x8000}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000000)={0x200007, 0x1}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x12d842, 0x1) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) 3.111757052s ago: executing program 1 (id=936): socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x1, &(0x7f0000000040)='9', 0x7, 0x4, 0x7, 0x9, 0x3, 0x3, 0x2, 'syz1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x405, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x1, {0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r4, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000") ioctl(r4, 0x400c0930, 0x0) 3.059126308s ago: executing program 3 (id=937): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0x2, 0x6]}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x106, 0x1}}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) mmap(&(0x7f000014f000/0x4000)=nil, 0x4000, 0x3000000, 0x4000010, r5, 0x94eb000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x12000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x3], [0x0, 0x1001000, 0x800001, 0x4], [0x0, 0x401, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x0, 0x2000, 0x80, 0x32315e4e, 0x3, [r8], [0x2160, 0x7], [], [0x400000000000001, 0x2000000000, 0x0, 0x1]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 2.767281669s ago: executing program 2 (id=938): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x200) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x212e, 0x80, 0xe386, 0x2, 0x2, 0xbc0, 0x3b, 0xf7, 0x40, 0x9, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet(0xa, 0x2, 0xffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x13) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={r5, 0xffff8001}, &(0x7f0000000800)=0x8) openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 2.624383226s ago: executing program 0 (id=939): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x0, 0x2, 0x3, 0x73e9}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) syz_clone3(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) r5 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0xfe}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x56, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x40000000}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x1, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x0, @raw_data="5c4c2e5963a43a9218482c061cd8eaa64c001584319c89d524ff6d25027b12f46d83efdcee6ce318c7bf8938890f645a29e4d40750c6eafb7c13f02b8ed7ea00eaacfc504ec9d7ade0f6656ce80759fe8b7b467d37540a661df09efcaafb7761c85a482892a82aea68f2489404ca26bef0f692611c0d591837ff6e6a4cfb977689dd9aaf9f7e9b83a4d3538a786fd25ff0e9e507598116e2836a189114bfc6828302a4ffa87298c70f88d47fb229321e7833c59a3a84b516637e1d3c481a3bb6833891826a58482d"}) 2.531097203s ago: executing program 3 (id=940): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) dup2(r0, r0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYBLOB, @ANYBLOB="0000010000000000280012800e00010069703665727370616e0000002f0002ff80060002003000000005001600010000"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x3000004, &(0x7f0000000100)=ANY=[@ANYBLOB="6e72ff1958ffe593560176703cfc"]) syz_open_dev$video(&(0x7f0000000140), 0x3, 0x20000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00\t'], 0x30) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x321cc1, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000380)=0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff00000000}, 0x38) sendfile(r3, r5, 0x0, 0x1000000201002) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) setns(0xc9, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f00000000c0)={0xa}, 0x1c) 2.016494473s ago: executing program 3 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x8000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0xf1, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.947957786s ago: executing program 1 (id=942): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) syz_emit_vhci(0x0, 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000012c0)={0xffffffffffffeab}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x9}, 0x1c) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000080), 0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)={0xa, 0x4f21, 0x8007, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x200400c4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) shutdown(r5, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a14"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r7 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x0, 0x0}, {0x15, 0x0, 0x2, &(0x7f0000001600)="77ca"}], 0x2}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20000023896) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) finit_module(r8, &(0x7f0000000100)='!\x00', 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000006c0)) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1.851529654s ago: executing program 4 (id=943): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'}) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929a", 0x54}], 0x1}, 0x20048000) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) bpf$MAP_CREATE(0x0, 0x0, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) close(r2) 1.806381435s ago: executing program 0 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x88}}, 0x4000040) 355.619831ms ago: executing program 0 (id=945): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0xa140) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002400ebee26bd7000fadbff250f00000006000300"], 0x1c}, 0x1, 0x0, 0x0, 0x19ed1dff5d6ad1da}, 0x14940) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @loopback, @multicast, @loopback}}}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x5, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 235.090827ms ago: executing program 3 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './my_configfs/usb_gadget/g1/functions/uvc.usb0\x00'}) ioctl$VIDIOC_S_EDID(r1, 0xc0245629, &(0x7f0000000240)={0x0, 0x6, 0xc93, '\x00', &(0x7f00000001c0)=0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929a", 0x54}], 0x1}, 0x20048000) write(r4, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100"/28], 0x50) writev(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r2, 0x6f44, 0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') close(r2) 0s ago: executing program 4 (id=947): syz_ublk_setup_io_uring(0x466, &(0x7f0000000140)={0x0, 0x6291, 0x0, 0x3, 0x3c8}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) unshare(0x62040200) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2e, 0x0, 0x1, 0x7ea}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x59c, 0x13c, 0x324, 0x13c, 0x324, 0x324, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x4d4, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xf4, 0x13c, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x4e21], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0xfc}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {0x0, 0xff, 0x2}, {}, 0x300}}}, {{@uncond, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5f8) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x80010040) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10040004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffe002, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r8 = io_uring_setup(0x180d, &(0x7f00000000c0)={0x0, 0xf7cf, 0x2000, 0x8001002, 0x3d7}) memfd_create(0x0, 0x2) r9 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012042) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 5974][ T30] audit: type=1400 audit(1788883029.263:380): avc: denied { read } for pid=4957 comm="acpid" name="mouse1" dev="devtmpfs" ino=2973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.588082][ T30] audit: type=1400 audit(1788883029.263:381): avc: denied { open } for pid=4957 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2973 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.588165][ T30] audit: type=1400 audit(1788883029.263:382): avc: denied { ioctl } for pid=4957 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2973 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 274.659149][ T50] usb 5-1: USB disconnect, device number 14 [ 274.733003][ T25] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 274.742094][ T25] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 274.742160][ T25] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 274.742193][ T25] usb 4-1: config 0 has no interface number 0 [ 274.742247][ T25] usb 4-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 274.742320][ T25] usb 4-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 274.742374][ T25] usb 4-1: config 0 interface 143 has no altsetting 0 [ 274.748573][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.748632][ T25] usb 4-1: Product: syz [ 274.748648][ T25] usb 4-1: Manufacturer: syz [ 274.748676][ T25] usb 4-1: SerialNumber: syz [ 274.824109][ T5702] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 274.824144][ T5702] (id 0x00) [ 274.900498][ T25] usb 4-1: config 0 descriptor?? [ 275.179657][ T25] usb 4-1: USB disconnect, device number 10 [ 275.245815][ T5702] rc_core: IR keymap rc-imon-pad not found [ 275.245879][ T5702] Registered IR keymap rc-empty [ 275.246009][ T5702] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 275.246045][ T5702] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 275.268822][ T5702] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 275.271741][ T5702] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input10 [ 275.312303][ T5702] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:20> initialized [ 275.400058][ T7647] FAULT_INJECTION: forcing a failure. [ 275.400058][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 275.402378][ T42] IPVS: starting estimator thread 0... [ 275.420248][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT(full) [ 275.420282][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.420308][ T7647] Call Trace: [ 275.420316][ T7647] [ 275.420325][ T7647] dump_stack_lvl+0x100/0x190 [ 275.420364][ T7647] should_fail_ex.cold+0x5/0xa [ 275.420395][ T7647] should_failslab+0xc2/0x120 [ 275.420423][ T7647] __kmalloc_noprof+0xfc/0x840 [ 275.420446][ T7647] ? __register_sysctl_table+0xac/0x1650 [ 275.420482][ T7647] __register_sysctl_table+0xac/0x1650 [ 275.420512][ T7647] ? trace_kmalloc+0xeb/0x110 [ 275.420536][ T7647] ? __kasan_kmalloc+0xaa/0xb0 [ 275.420560][ T7647] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 275.420585][ T7647] ? __pfx___register_sysctl_table+0x10/0x10 [ 275.420614][ T7647] ? register_pidns_sysctls+0x48/0x1c0 [ 275.420646][ T7647] ? __asan_memcpy+0x3c/0x60 [ 275.420668][ T7647] register_pidns_sysctls+0x11d/0x1c0 [ 275.420696][ T7647] ? __ns_common_init+0x299/0x4b0 [ 275.420731][ T7647] copy_pid_ns+0x680/0x10a0 [ 275.420758][ T7647] ? __pfx_copy_pid_ns+0x10/0x10 [ 275.420783][ T7647] ? __pfx_copy_mnt_ns+0x10/0x10 [ 275.420815][ T7647] ? create_new_namespaces+0x30/0xac0 [ 275.420843][ T7647] create_new_namespaces+0x2aa/0xac0 [ 275.420873][ T7647] unshare_nsproxy_namespaces+0xf2/0x220 [ 275.420900][ T7647] ksys_unshare+0x4a2/0xa70 [ 275.420925][ T7647] ? __pfx_ksys_unshare+0x10/0x10 [ 275.420959][ T7647] __x64_sys_unshare+0x31/0x40 [ 275.420983][ T7647] do_syscall_64+0x123/0x790 [ 275.421011][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.421034][ T7647] RIP: 0033:0x7fe66ab9e159 [ 275.421054][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.421073][ T7647] RSP: 002b:00007fe66ba04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 275.421094][ T7647] RAX: ffffffffffffffda RBX: 00007fe66ae25fa0 RCX: 00007fe66ab9e159 [ 275.421108][ T7647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 275.421122][ T7647] RBP: 00007fe66ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 275.421135][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.421149][ T7647] R13: 00007fe66ae26038 R14: 00007fe66ae25fa0 R15: 00007ffc71877be8 [ 275.421178][ T7647] [ 275.493513][ T7649] IPVS: using max 39 ests per chain, 93600 per kthread [ 275.794555][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.923403][ T25] usb 4-1: device descriptor read/64, error -71 [ 276.015689][ T7654] IPv6: addrconf: prefix option has invalid lifetime [ 276.163499][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.278894][ T5724] usb 1-1: USB disconnect, device number 12 [ 276.295342][ T25] usb 4-1: device descriptor read/64, error -71 [ 276.307264][ T5724] usblp0: removed [ 276.409431][ T25] usb usb4-port1: attempt power cycle [ 276.582026][ T7657] siw: device registration error -23 [ 276.803396][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 276.825669][ T25] usb 4-1: device descriptor read/8, error -71 [ 277.063709][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 277.096878][ T25] usb 4-1: device descriptor read/8, error -71 [ 277.204583][ T25] usb usb4-port1: unable to enumerate USB device [ 277.420922][ T7674] NILFS (loop0): device size too small [ 278.721782][ T5707] usb 3-1: USB disconnect, device number 20 [ 279.341385][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 279.371631][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 279.394982][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 279.399573][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 279.401379][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 279.746929][ T25] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 280.238435][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.298589][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 280.298888][ T25] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 280.430255][ T25] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 280.430325][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.430384][ T25] usb 1-1: config 1 has no interface number 0 [ 280.528440][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.537515][ T25] usb 1-1: Product: syz [ 280.542496][ T25] usb 1-1: Manufacturer: syz [ 280.550480][ T25] usb 1-1: SerialNumber: syz [ 280.968591][ T25] peak_usb 1-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 280.981654][ T25] peak_usb 1-1:1.93: unable to read PCAN-USB serial number (err -22) [ 281.181814][ T25] peak_usb 1-1:1.93: probe with driver peak_usb failed with error -22 [ 281.214053][ T50] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.240438][ T25] usb 1-1: USB disconnect, device number 13 [ 281.373875][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 281.380489][ T50] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 281.392942][ T50] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 281.402441][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.402483][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.402518][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 281.402554][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.402604][ T50] usb 5-1: config 0 has no interface number 0 [ 281.402681][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 281.402737][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.402774][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.402834][ T50] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.402900][ T50] usb 5-1: config 0 interface 125 has no altsetting 0 [ 281.402933][ T50] usb 5-1: config 0 interface 125 has no altsetting 2 [ 281.534415][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.543781][ T50] usb 5-1: Product: syz [ 281.543802][ T50] usb 5-1: Manufacturer: syz [ 281.543818][ T50] usb 5-1: SerialNumber: syz [ 281.566943][ T50] usb 5-1: config 0 descriptor?? [ 281.603886][ T50] usb 5-1: selecting invalid altsetting 2 [ 281.823458][ T30] audit: type=1400 audit(1788883036.493:383): avc: denied { name_connect } for pid=7692 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 282.561303][ T7701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 282.607395][ T7701] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 282.607526][ T7701] overlayfs: failed to look up (tracing) for ino (-66) [ 283.104696][ T50] get_1284_register timeout [ 283.104870][ C1] usb 5-1: async_complete: urb error -104 [ 283.105000][ C1] usb 5-1: async_complete: urb error -104 [ 285.162726][ T7710] netlink: 68 bytes leftover after parsing attributes in process `syz.0.523'. [ 285.387552][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.553527][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 285.562471][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 285.601046][ T25] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 285.619815][ T25] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 285.619914][ T25] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.619974][ T25] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 285.681722][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.690633][ T25] usb 2-1: Product: syz [ 285.690669][ T25] usb 2-1: Manufacturer: syz [ 285.690700][ T25] usb 2-1: SerialNumber: syz [ 285.790114][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 285.822754][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input11 [ 285.884930][ T190] usb 5-1: USB disconnect, device number 15 [ 286.069507][ T25] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 286.069571][ T25] (id 0x00) [ 286.976526][ T25] rc_core: IR keymap rc-imon-pad not found [ 286.976592][ T25] Registered IR keymap rc-empty [ 286.976743][ T25] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 286.976776][ T25] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 287.054148][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 287.084725][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input12 [ 287.092134][ T5604] Bluetooth: hci2: Invalid handle: 0xed88 > 0x0eff [ 287.135785][ T25] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:17> initialized [ 287.272524][ T7739] loop9: detected capacity change from 0 to 2640 [ 287.280985][ T7739] buffer_io_error: 11 callbacks suppressed [ 287.287561][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.301712][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.310680][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319650][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319715][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319812][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319897][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319939][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.319968][ T7739] ldm_validate_partition_table(): Disk read failed. [ 287.320007][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.320064][ T7739] Buffer I/O error on dev loop9, logical block 0, async page read [ 287.320135][ T7739] Dev loop9: unable to read RDB block 0 [ 287.320425][ T7739] loop9: unable to read partition table [ 287.408769][ T7739] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 287.552888][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'. [ 288.589700][ T7748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'. [ 288.857855][ T7748] busy [ 291.012348][ T5702] usb 2-1: USB disconnect, device number 17 [ 291.237244][ T7764] FAULT_INJECTION: forcing a failure. [ 291.237244][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 291.237338][ T7764] CPU: 1 UID: 0 PID: 7764 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 291.237365][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 291.237378][ T7764] Call Trace: [ 291.237384][ T7764] [ 291.237393][ T7764] dump_stack_lvl+0x100/0x190 [ 291.237429][ T7764] should_fail_ex.cold+0x5/0xa [ 291.237458][ T7764] should_failslab+0xc2/0x120 [ 291.237485][ T7764] __kmalloc_noprof+0xfc/0x840 [ 291.237506][ T7764] ? __register_sysctl_table+0xbc8/0x1650 [ 291.237536][ T7764] ? __register_sysctl_table+0xbe4/0x1650 [ 291.237571][ T7764] __register_sysctl_table+0xbe4/0x1650 [ 291.237608][ T7764] ? __pfx___register_sysctl_table+0x10/0x10 [ 291.237636][ T7764] ? register_pidns_sysctls+0x48/0x1c0 [ 291.237669][ T7764] ? __asan_memcpy+0x3c/0x60 [ 291.237692][ T7764] register_pidns_sysctls+0x11d/0x1c0 [ 291.237719][ T7764] ? __ns_common_init+0x299/0x4b0 [ 291.237747][ T7764] copy_pid_ns+0x680/0x10a0 [ 291.237775][ T7764] ? __pfx_copy_pid_ns+0x10/0x10 [ 291.237802][ T7764] ? __pfx_copy_mnt_ns+0x10/0x10 [ 291.237835][ T7764] ? create_new_namespaces+0x30/0xac0 [ 291.237863][ T7764] create_new_namespaces+0x2aa/0xac0 [ 291.237892][ T7764] unshare_nsproxy_namespaces+0xf2/0x220 [ 291.237918][ T7764] ksys_unshare+0x4a2/0xa70 [ 291.237943][ T7764] ? __pfx_ksys_unshare+0x10/0x10 [ 291.237978][ T7764] __x64_sys_unshare+0x31/0x40 [ 291.238001][ T7764] do_syscall_64+0x123/0x790 [ 291.238029][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.238051][ T7764] RIP: 0033:0x7f7c2c39e159 [ 291.238068][ T7764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.238088][ T7764] RSP: 002b:00007f7c2d2c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.238108][ T7764] RAX: ffffffffffffffda RBX: 00007f7c2c625fa0 RCX: 00007f7c2c39e159 [ 291.238122][ T7764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 291.238134][ T7764] RBP: 00007f7c2c43503b R08: 0000000000000000 R09: 0000000000000000 [ 291.238147][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.238160][ T7764] R13: 00007f7c2c626038 R14: 00007f7c2c625fa0 R15: 00007ffdf628bcc8 [ 291.238188][ T7764] [ 291.238324][ T7764] sysctl could not get directory: /kernel -12 [ 291.743287][ T5702] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 291.790739][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 291.905540][ T5702] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 291.940930][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.940997][ T5702] usb 2-1: Product: syz [ 291.941056][ T5702] usb 2-1: Manufacturer: syz [ 291.941088][ T5702] usb 2-1: SerialNumber: syz [ 291.991918][ T5702] usb 2-1: config 0 descriptor?? [ 292.486467][ T7782] NILFS (loop3): device size too small [ 294.096206][ T5702] usb 2-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 294.096277][ T5702] f81604 2-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 294.096361][ T5702] f81604 2-1:0.0: probe with driver f81604 failed with error -110 [ 294.392921][ T7794] kAFS: unable to lookup cell 'ÿ' [ 294.757810][ T5702] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 294.905862][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 294.906847][ T5702] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 294.922542][ T5702] usb 4-1: config 1 has an invalid interface number: 48 but max is 2 [ 294.922601][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.922636][ T5702] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.922673][ T5702] usb 4-1: config 1 has no interface number 0 [ 294.922730][ T5702] usb 4-1: too many endpoints for config 1 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 294.922778][ T5702] usb 4-1: config 1 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 294.922833][ T5702] usb 4-1: config 1 interface 48 has no altsetting 0 [ 294.929576][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.929617][ T5702] usb 4-1: SerialNumber: syz [ 295.403552][ T5695] usb 2-1: USB disconnect, device number 18 [ 296.026392][ T5707] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.207646][ T5707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.207797][ T5707] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 296.236580][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.249021][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.271501][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.285634][ T5707] usb 5-1: Product: syz [ 296.291664][ T5707] usb 5-1: Manufacturer: syz [ 296.297035][ T5707] usb 5-1: SerialNumber: syz [ 296.344387][ T5707] usb 5-1: selecting invalid altsetting 1 [ 296.352159][ T5707] usb 5-1: unit 6 not found! [ 296.393285][ T190] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 296.563252][ T190] usb 3-1: Using ep0 maxpacket: 32 [ 296.577302][ T190] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 296.595618][ T190] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 296.595752][ T190] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 296.608797][ T190] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.608871][ T190] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 296.669789][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.682752][ T190] usb 3-1: Product: syz [ 296.682788][ T190] usb 3-1: Manufacturer: syz [ 296.682816][ T190] usb 3-1: SerialNumber: syz [ 296.743710][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 296.790335][ T190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input13 [ 297.003231][ T190] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 297.003313][ T190] (id 0x00) [ 297.348728][ T5605] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 297.393324][ T190] rc_core: IR keymap rc-imon-pad not found [ 297.393385][ T190] Registered IR keymap rc-empty [ 297.393525][ T190] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 297.393589][ T190] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 297.446868][ T190] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 297.476906][ T190] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input14 [ 297.485710][ T7814] loop9: detected capacity change from 0 to 2640 [ 297.486199][ T7814] buffer_io_error: 11 callbacks suppressed [ 297.486213][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486243][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486269][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486314][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486339][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486377][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486413][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486457][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486472][ T7814] ldm_validate_partition_table(): Disk read failed. [ 297.486498][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486523][ T7814] Buffer I/O error on dev loop9, logical block 0, async page read [ 297.486560][ T7814] Dev loop9: unable to read RDB block 0 [ 297.486726][ T7814] loop9: unable to read partition table [ 297.488975][ T7814] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 297.649609][ T5707] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 297.667339][ T190] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:21> initialized [ 297.934703][ T5707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 297.958289][ T5707] usb 5-1: USB disconnect, device number 16 [ 298.144474][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.615117][ T30] audit: type=1400 audit(1788883053.263:384): avc: denied { write } for pid=7823 comm="syz.0.547" name="u" dev="configfs" ino=14737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.769122][ T5702] usb 4-1: USB disconnect, device number 15 [ 299.776581][ T7828] imon:send_packet: task interrupted [ 299.776740][ T7828] imon:send_packet: packet tx failed (-512) [ 299.778376][ T7828] imon:vfd_write: send packet #0 failed [ 299.979638][ T190] usb 3-1: USB disconnect, device number 21 [ 302.572073][ T7868] openvswitch: netlink: Flow key attr not present in new flow. [ 302.743143][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 302.904709][ T25] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 302.916893][ T25] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 302.926550][ T25] usb 5-1: config 1 has no interface number 0 [ 302.942447][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.951000][ T25] usb 5-1: Product: syz [ 302.951053][ T25] usb 5-1: Manufacturer: syz [ 302.951101][ T25] usb 5-1: SerialNumber: syz [ 303.438965][ T25] usb 5-1: 3:1 : does not exist [ 303.443976][ T25] usb 5-1: 3:2 : does not exist [ 303.467848][ T190] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.646886][ T190] usb 2-1: Using ep0 maxpacket: 32 [ 303.647713][ T190] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 303.650500][ T190] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 303.650584][ T190] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 303.650624][ T190] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.650665][ T190] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 303.666097][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.666154][ T190] usb 2-1: Product: syz [ 303.666182][ T190] usb 2-1: Manufacturer: syz [ 303.666197][ T190] usb 2-1: SerialNumber: syz [ 303.732170][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 303.750693][ T190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input15 [ 303.963967][ T190] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 303.964031][ T190] (id 0x00) [ 304.085330][ T190] rc_core: IR keymap rc-imon-pad not found [ 304.085369][ T190] Registered IR keymap rc-empty [ 304.085528][ T190] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 304.085560][ T190] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 304.165878][ T190] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 304.185477][ T190] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input16 [ 304.214087][ T190] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:19> initialized [ 304.948237][ T7896] IPv6: addrconf: prefix option has invalid lifetime [ 305.452592][ T50] usb 5-1: USB disconnect, device number 17 [ 306.323435][ T7903] imon:send_packet: task interrupted [ 306.323467][ T7903] imon:send_packet: packet tx failed (-512) [ 306.323512][ T7903] imon:vfd_write: send packet #1 failed [ 306.510851][ T25] usb 2-1: USB disconnect, device number 19 [ 307.593352][ T25] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 307.743910][ T25] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 307.750935][ T25] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 307.750961][ T25] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 307.750980][ T25] usb 2-1: config 0 has no interface number 0 [ 307.751005][ T25] usb 2-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 307.751035][ T25] usb 2-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 307.751061][ T25] usb 2-1: config 0 interface 143 has no altsetting 0 [ 307.754709][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.754741][ T25] usb 2-1: Product: syz [ 307.754755][ T25] usb 2-1: Manufacturer: syz [ 307.754770][ T25] usb 2-1: SerialNumber: syz [ 307.764397][ T25] usb 2-1: config 0 descriptor?? [ 307.813717][ T5791] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 307.872184][ T30] audit: type=1400 audit(1788883062.543:385): avc: denied { cmd } for pid=7918 comm="iou-wrk-7919" path="socket:[16574]" dev="sockfs" ino=16574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 307.903019][ T5605] Bluetooth: hci0: Invalid handle: 0xed88 > 0x0eff [ 307.966043][ T5791] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 307.974046][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.974092][ T5791] usb 1-1: Product: syz [ 307.974106][ T5791] usb 1-1: Manufacturer: syz [ 307.974121][ T5791] usb 1-1: SerialNumber: syz [ 308.005994][ T5791] usb 1-1: config 0 descriptor?? [ 308.038750][ T7923] loop9: detected capacity change from 0 to 2640 [ 308.047552][ T7923] buffer_io_error: 11 callbacks suppressed [ 308.059236][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.062735][ T25] usb 2-1: USB disconnect, device number 20 [ 308.068092][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068151][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068214][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068270][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068342][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068407][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068448][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068501][ T7923] ldm_validate_partition_table(): Disk read failed. [ 308.068542][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068597][ T7923] Buffer I/O error on dev loop9, logical block 0, async page read [ 308.068665][ T7923] Dev loop9: unable to read RDB block 0 [ 308.139630][ T7923] loop9: unable to read partition table [ 308.139885][ T7923] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 308.515131][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 308.643255][ T25] usb 2-1: device descriptor read/64, error -71 [ 308.883901][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 309.013191][ T25] usb 2-1: device descriptor read/64, error -71 [ 309.232279][ T25] usb usb2-port1: attempt power cycle [ 309.729761][ T7946] jffs2: notice: (7946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 309.731702][ T30] audit: type=1400 audit(1788883064.403:386): avc: denied { write } for pid=7945 comm="syz.2.581" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.014948][ T5791] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 310.014992][ T5791] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 310.015032][ T5791] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 310.081259][ T5791] usb 1-1: USB disconnect, device number 14 [ 310.190223][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'. [ 310.211607][ T30] audit: type=1400 audit(1788883064.883:387): avc: denied { mount } for pid=7952 comm="syz.1.583" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 310.224515][ T30] audit: type=1400 audit(1788883064.903:388): avc: denied { ioctl } for pid=7956 comm="syz.4.587" path="socket:[16697]" dev="sockfs" ino=16697 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.384758][ T50] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 310.441674][ T7970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=7970 comm=syz.2.585 [ 310.537992][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 310.544328][ T50] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 310.554033][ T50] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 310.554078][ T50] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 310.554103][ T50] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.554129][ T50] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 310.564811][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.564837][ T50] usb 4-1: Product: syz [ 310.564863][ T50] usb 4-1: Manufacturer: syz [ 310.564878][ T50] usb 4-1: SerialNumber: syz [ 310.590399][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 310.650411][ T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input17 [ 310.703591][ T7970] netlink: 'syz.2.585': attribute type 2 has an invalid length. [ 310.703621][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.585'. [ 310.819705][ T50] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 310.819742][ T50] (id 0x00) [ 310.912727][ T30] audit: type=1400 audit(1788883065.583:389): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 311.035416][ T50] rc_core: IR keymap rc-imon-pad not found [ 311.035705][ T50] Registered IR keymap rc-empty [ 311.035761][ T50] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 311.035778][ T50] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 311.057861][ T50] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 311.066389][ T50] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input18 [ 311.138780][ T50] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:16> initialized [ 311.365192][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 311.532310][ T25] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.541353][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.541426][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.573544][ T25] usb 2-1: config 0 descriptor?? [ 311.784842][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.784933][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.851041][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 311.851160][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 311.899756][ T25] usb 2-1: USB disconnect, device number 24 [ 312.363296][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 312.444737][ T190] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 312.513903][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 312.528406][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.528458][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.535113][ T25] usb 2-1: config 0 descriptor?? [ 312.604756][ T190] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 312.620875][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.629684][ T190] usb 1-1: Product: syz [ 312.634317][ T190] usb 1-1: Manufacturer: syz [ 312.634368][ T190] usb 1-1: SerialNumber: syz [ 312.649025][ T190] usb 1-1: config 0 descriptor?? [ 312.894271][ T50] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 313.540213][ T50] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 313.541533][ T50] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 313.541932][ T50] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 313.541966][ T50] usb 5-1: config 0 has no interface number 0 [ 313.541997][ T50] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 313.542060][ T50] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 313.542089][ T50] usb 5-1: config 0 interface 143 has no altsetting 0 [ 313.546823][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.546853][ T50] usb 5-1: Product: syz [ 313.546906][ T50] usb 5-1: Manufacturer: syz [ 313.546925][ T50] usb 5-1: SerialNumber: syz [ 313.553591][ T50] usb 5-1: config 0 descriptor?? [ 313.579066][ T25] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 313.581831][ T25] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 313.648118][ T8013] imon:send_packet: task interrupted [ 313.648146][ T8013] imon:send_packet: packet tx failed (-512) [ 313.648216][ T8013] imon:vfd_write: send packet #3 failed [ 313.728199][ T10] usb 4-1: USB disconnect, device number 16 [ 313.947606][ T25] usb 2-1: USB disconnect, device number 25 [ 313.947717][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 313.997597][ T50] usb 5-1: USB disconnect, device number 18 [ 314.047758][ T8026] jffs2: notice: (8026) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 314.072366][ T30] audit: type=1400 audit(1788883068.743:390): avc: denied { write } for pid=8025 comm="syz.3.596" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.393614][ T5605] Bluetooth: hci4: Invalid handle: 0xed88 > 0x0eff [ 314.429962][ T8035] loop9: detected capacity change from 0 to 2640 [ 314.432494][ T8035] buffer_io_error: 11 callbacks suppressed [ 314.432511][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432541][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432567][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432593][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432617][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432655][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432710][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432736][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432751][ T8035] ldm_validate_partition_table(): Disk read failed. [ 314.432774][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432800][ T8035] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.432839][ T8035] Dev loop9: unable to read RDB block 0 [ 314.432972][ T8035] loop9: unable to read partition table [ 314.433423][ T8035] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 314.473564][ T50] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 314.603212][ T50] usb 5-1: device descriptor read/64, error -71 [ 314.703168][ T25] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 314.746429][ T190] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 314.746469][ T190] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 314.746504][ T190] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 314.843447][ T50] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 315.006608][ T25] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 315.008514][ T25] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 315.008554][ T25] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 315.008576][ T25] usb 3-1: config 0 has no interface number 0 [ 315.008606][ T25] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 315.008652][ T25] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 315.008683][ T25] usb 3-1: config 0 interface 143 has no altsetting 0 [ 315.011605][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.011640][ T25] usb 3-1: Product: syz [ 315.011658][ T25] usb 3-1: Manufacturer: syz [ 315.011676][ T25] usb 3-1: SerialNumber: syz [ 315.019664][ T25] usb 3-1: config 0 descriptor?? [ 315.063175][ T50] usb 5-1: device descriptor read/64, error -71 [ 315.091329][ T8047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 315.134309][ T8047] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 315.134379][ T8047] overlayfs: failed to look up (tracing) for ino (-66) [ 315.174708][ T50] usb usb5-port1: attempt power cycle [ 315.210811][ T5791] usb 1-1: USB disconnect, device number 15 [ 315.261000][ T25] usb 3-1: USB disconnect, device number 22 [ 315.523842][ T50] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 315.543834][ T50] usb 5-1: device descriptor read/8, error -71 [ 315.759328][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 316.023656][ T25] usb 3-1: device descriptor read/64, error -71 [ 316.408874][ T30] audit: type=1800 audit(1788883071.083:391): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.604" name="cpuset.effective_cpus" dev="sda1" ino=2047 res=0 errno=0 [ 316.496567][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 316.623155][ T25] usb 3-1: device descriptor read/64, error -71 [ 316.733648][ T25] usb usb3-port1: attempt power cycle [ 316.762960][ T8067] jffs2: notice: (8067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 316.801094][ T30] audit: type=1400 audit(1788883071.473:392): avc: denied { write } for pid=8066 comm="syz.1.610" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.103162][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.123740][ T25] usb 3-1: device descriptor read/8, error -71 [ 317.167441][ T8081] NILFS (loop0): device size too small [ 317.608804][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 318.333160][ T50] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 318.364617][ T8083] IPVS: sh: FWM 3 0x00000003 - no destination available [ 318.392666][ T25] usb 3-1: device descriptor read/8, error -71 [ 318.486225][ T50] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 318.511131][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.523143][ T25] usb usb3-port1: unable to enumerate USB device [ 318.532093][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.643958][ T50] usb 5-1: config 0 descriptor?? [ 318.910255][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 318.910361][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.931017][ T50] usb 5-1: USB disconnect, device number 23 [ 319.143166][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 319.294182][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 319.300085][ T25] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 319.309707][ T5791] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 319.320601][ T25] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 319.329243][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.337783][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.346620][ T25] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 319.355579][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.364573][ T25] usb 3-1: config 0 has no interface number 0 [ 319.371423][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 319.382672][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 319.393223][ T25] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.405178][ T25] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.418412][ T50] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 319.418514][ T25] usb 3-1: config 0 interface 125 has no altsetting 0 [ 319.418535][ T25] usb 3-1: config 0 interface 125 has no altsetting 2 [ 319.444145][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.452210][ T25] usb 3-1: Product: syz [ 319.452233][ T25] usb 3-1: Manufacturer: syz [ 319.452249][ T25] usb 3-1: SerialNumber: syz [ 319.472296][ T25] usb 3-1: config 0 descriptor?? [ 319.478256][ T5791] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 319.489010][ T5791] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 319.489056][ T5791] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 319.489094][ T5791] usb 1-1: config 0 has no interface number 0 [ 319.489123][ T5791] usb 1-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 319.489164][ T5791] usb 1-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 319.489194][ T5791] usb 1-1: config 0 interface 143 has no altsetting 0 [ 319.549356][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.549395][ T5791] usb 1-1: Product: syz [ 319.549425][ T5791] usb 1-1: Manufacturer: syz [ 319.549444][ T5791] usb 1-1: SerialNumber: syz [ 319.576483][ T5791] usb 1-1: config 0 descriptor?? [ 319.592122][ T25] usb 3-1: selecting invalid altsetting 2 [ 319.603790][ T50] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 319.642162][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.642274][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.669765][ T50] usb 5-1: config 0 descriptor?? [ 319.808582][ T5791] usb 1-1: USB disconnect, device number 16 [ 320.263349][ T5791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 320.495874][ T50] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 320.503875][ T5791] usb 1-1: device descriptor read/64, error -71 [ 320.909807][ T25] get_1284_register timeout [ 320.909910][ C1] usb 3-1: async_complete: urb error -104 [ 320.910036][ C1] usb 3-1: async_complete: urb error -104 [ 320.926043][ T50] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 321.033953][ T5791] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 321.042636][ T50] usb 5-1: USB disconnect, device number 24 [ 321.042720][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 321.225489][ T5791] usb 1-1: device descriptor read/64, error -71 [ 321.436913][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 321.460573][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 321.463886][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 321.480819][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 321.482825][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 321.604597][ T5791] usb usb1-port1: attempt power cycle [ 322.494477][ T5791] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 322.800072][ T5724] usb 3-1: USB disconnect, device number 27 [ 323.852684][ T5791] usb 1-1: device descriptor read/8, error -71 [ 324.349153][ T8114] jffs2: notice: (8114) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 324.371336][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 324.386810][ T30] audit: type=1400 audit(1788883079.063:393): avc: denied { create } for pid=8115 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.409522][ T30] audit: type=1400 audit(1788883079.093:394): avc: denied { getopt } for pid=8115 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.443309][ T50] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 324.639884][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 324.649615][ T50] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 324.661655][ T50] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 324.661708][ T50] usb 4-1: can't read configurations, error -71 [ 325.919698][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 325.997035][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 326.110489][ T8136] busy [ 326.258607][ T30] audit: type=1400 audit(1788883080.903:395): avc: denied { write } for pid=8134 comm="syz.0.632" name="fs" dev="configfs" ino=13099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.663144][ T50] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 327.053217][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 327.226955][ T50] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 327.245147][ T50] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 327.245188][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.245221][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.245244][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 327.245264][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 327.245288][ T50] usb 5-1: config 0 has no interface number 0 [ 327.245327][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 327.245356][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 327.245381][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 327.245420][ T50] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.245449][ T50] usb 5-1: config 0 interface 125 has no altsetting 0 [ 327.245470][ T50] usb 5-1: config 0 interface 125 has no altsetting 2 [ 327.291783][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.291809][ T50] usb 5-1: Product: syz [ 327.291824][ T50] usb 5-1: Manufacturer: syz [ 327.291838][ T50] usb 5-1: SerialNumber: syz [ 327.307585][ T50] usb 5-1: config 0 descriptor?? [ 327.313532][ T50] usb 5-1: selecting invalid altsetting 2 [ 327.639318][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 327.643644][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 327.644011][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 327.644327][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 327.644484][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 328.334139][ T50] get_1284_register timeout [ 328.339102][ C1] usb 5-1: async_complete: urb error -104 [ 328.339235][ C1] usb 5-1: async_complete: urb error -104 [ 328.763479][ T5791] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 328.913854][ T5791] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 328.924361][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.924418][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.981279][ T5791] usb 2-1: config 0 descriptor?? [ 328.990915][ T8163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8163 comm=syz.3.640 [ 329.854914][ T5791] usbhid 2-1:0.0: can't add hid device: -71 [ 329.855031][ T5791] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.889231][ T5791] usb 2-1: USB disconnect, device number 26 [ 330.223451][ T5707] usb 5-1: USB disconnect, device number 25 [ 330.430527][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 330.430720][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 330.430852][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 330.692514][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 330.692571][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 330.698538][ T8178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=8178 comm=syz.3.645 [ 330.775028][ T5724] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 331.178938][ T5724] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 332.774875][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 332.774954][ T5724] usb 2-1: can't read configurations, error -71 [ 332.814891][ T8186] __nla_validate_parse: 1 callbacks suppressed [ 332.814936][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 333.792950][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 334.986665][ T8213] NILFS (loop0): device size too small [ 335.332554][ T8224] overlayfs: failed to resolve './file0': -2 [ 336.297106][ T5605] Bluetooth: hci2: Invalid handle: 0xed88 > 0x0eff [ 336.992730][ T8236] loop9: detected capacity change from 0 to 2640 [ 337.112530][ T8236] buffer_io_error: 11 callbacks suppressed [ 337.121439][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.140805][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.151407][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.165759][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.176492][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.209629][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.221975][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.233022][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.247274][ T8236] ldm_validate_partition_table(): Disk read failed. [ 337.257838][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.271065][ T8236] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.282355][ T8236] Dev loop9: unable to read RDB block 0 [ 337.320327][ T8236] loop9: unable to read partition table [ 337.331191][ T8236] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 339.189084][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 339.204978][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 339.207533][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 339.211859][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 339.217787][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 339.636254][ T5791] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 340.619759][ T5791] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 340.732772][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.732817][ T5791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 340.833200][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.833242][ T5791] usb 4-1: Product: syz [ 340.833271][ T5791] usb 4-1: Manufacturer: syz [ 340.833290][ T5791] usb 4-1: SerialNumber: syz [ 341.192592][ T5791] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 341.279957][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.280147][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.286696][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.296999][ T8280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.300448][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.665'. [ 341.302096][ T8280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.469838][ T8284] busy [ 342.426958][ T8300] IPVS: sh: FWM 3 0x00000003 - no destination available [ 343.358025][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 343.367194][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 343.383846][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 343.384530][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 343.387150][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.137011][ T30] audit: type=1800 audit(1788883098.813:396): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.666" name="cpuset.effective_cpus" dev="sda1" ino=2047 res=0 errno=0 [ 344.683481][ T5702] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.833209][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 344.840915][ T5702] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 344.856907][ T5702] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 344.865613][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.865670][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.865707][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.865744][ T5702] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 344.865796][ T5702] usb 1-1: config 0 has no interface number 0 [ 344.875924][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 344.875986][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 344.876041][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.885345][ T5702] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.885393][ T5702] usb 1-1: config 0 interface 125 has no altsetting 0 [ 344.885444][ T5702] usb 1-1: config 0 interface 125 has no altsetting 2 [ 344.905007][ T50] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 345.006746][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.015077][ T5702] usb 1-1: Product: syz [ 345.015127][ T5702] usb 1-1: Manufacturer: syz [ 345.015159][ T5702] usb 1-1: SerialNumber: syz [ 345.056763][ T5702] usb 1-1: config 0 descriptor?? [ 345.103364][ T5702] usb 1-1: selecting invalid altsetting 2 [ 345.168071][ T50] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.178938][ T50] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 345.268217][ T5710] usb 4-1: USB disconnect, device number 19 [ 345.324940][ T5710] usblp0: removed [ 345.364095][ T50] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.364170][ T50] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.367851][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.367877][ T50] usb 3-1: Product: syz [ 345.367892][ T50] usb 3-1: Manufacturer: syz [ 345.367907][ T50] usb 3-1: SerialNumber: syz [ 345.464152][ T50] usb 3-1: selecting invalid altsetting 1 [ 345.470365][ T50] usb 3-1: unit 6 not found! [ 346.175581][ T5702] get_1284_register timeout [ 346.175723][ C1] usb 1-1: async_complete: urb error -104 [ 346.175805][ C1] usb 1-1: async_complete: urb error -104 [ 346.796481][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 346.955480][ T50] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 347.011424][ T190] usb 1-1: USB disconnect, device number 21 [ 347.107387][ T50] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 347.119164][ T50] usb 3-1: USB disconnect, device number 28 [ 347.242913][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.244493][ T8342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8342 comm=syz.3.681 [ 347.516990][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 347.898096][ T8349] overlayfs: failed to resolve './file0': -2 [ 348.293670][ T50] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 348.454054][ T50] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 348.466521][ T50] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 348.466568][ T50] usb 3-1: config 0 has no interface number 0 [ 348.466608][ T50] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.495859][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.505081][ T50] usb 3-1: Product: syz [ 348.505102][ T50] usb 3-1: Manufacturer: syz [ 348.505117][ T50] usb 3-1: SerialNumber: syz [ 348.522623][ T50] usb 3-1: config 0 descriptor?? [ 348.539988][ T50] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 348.786791][ T8354] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 349.096235][ T8372] NILFS (loop1): device size too small [ 349.195689][ T8354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.472659][ T5710] usb 3-1: USB disconnect, device number 29 [ 350.479247][ T5710] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 350.619237][ T8376] NILFS (loop3): device size too small [ 352.333472][ T5702] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 352.429164][ T5604] Bluetooth: hci0: Invalid handle: 0xed88 > 0x0eff [ 352.498249][ T5702] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 352.516665][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 352.516711][ T5702] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 352.547568][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.547612][ T5702] usb 5-1: Product: syz [ 352.547903][ T5702] usb 5-1: Manufacturer: syz [ 352.547919][ T5702] usb 5-1: SerialNumber: syz [ 352.612230][ T8388] loop9: detected capacity change from 0 to 2640 [ 352.612733][ T8388] buffer_io_error: 11 callbacks suppressed [ 352.612748][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612783][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612809][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612855][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612880][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612918][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.612979][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.613005][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.623499][ T8388] ldm_validate_partition_table(): Disk read failed. [ 352.623546][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.628461][ T8388] Buffer I/O error on dev loop9, logical block 0, async page read [ 352.628506][ T8388] Dev loop9: unable to read RDB block 0 [ 352.628675][ T8388] loop9: unable to read partition table [ 352.628880][ T8388] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 352.834854][ T5702] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 354.888778][ T5791] usb 5-1: USB disconnect, device number 26 [ 354.904424][ T5791] usblp0: removed [ 355.433154][ T5791] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 355.593182][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 355.594898][ T5791] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 355.601199][ T5791] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 355.601224][ T5791] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 355.601244][ T5791] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 355.601263][ T5791] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 355.601282][ T5791] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.601301][ T5791] usb 4-1: config 0 has no interface number 0 [ 355.601334][ T5791] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 355.601380][ T5791] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 355.601402][ T5791] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.601431][ T5791] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.601457][ T5791] usb 4-1: config 0 interface 125 has no altsetting 0 [ 355.601501][ T5791] usb 4-1: config 0 interface 125 has no altsetting 2 [ 355.618538][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.618564][ T5791] usb 4-1: Product: syz [ 355.618579][ T5791] usb 4-1: Manufacturer: syz [ 355.618594][ T5791] usb 4-1: SerialNumber: syz [ 355.638764][ T5791] usb 4-1: config 0 descriptor?? [ 355.652544][ T5791] usb 4-1: selecting invalid altsetting 2 [ 355.910707][ T8432] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 356.080813][ T8435] NILFS (loop0): device size too small [ 357.106590][ T5791] get_1284_register timeout [ 357.106811][ C1] usb 4-1: async_complete: urb error -104 [ 357.106946][ C1] usb 4-1: async_complete: urb error -104 [ 358.518179][ T5791] usb 4-1: USB disconnect, device number 20 [ 358.806033][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=8450 comm=syz.4.718 [ 364.352553][ T8491] NILFS (loop2): device size too small [ 366.676470][ T8497] siw: device registration error -23 [ 367.161059][ T30] audit: type=1400 audit(1788883121.823:397): avc: denied { write } for pid=8503 comm="syz.1.728" name="fs" dev="configfs" ino=13099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 368.839123][ T8510] NILFS (loop0): device size too small [ 370.347429][ T190] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 371.119321][ T190] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 371.909703][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.909808][ T190] usb 2-1: Product: syz [ 371.909837][ T190] usb 2-1: Manufacturer: syz [ 371.909868][ T190] usb 2-1: SerialNumber: syz [ 372.281994][ T190] usb 2-1: config 0 descriptor?? [ 372.458944][ T8526] IPv6: addrconf: prefix option has invalid lifetime [ 372.550857][ T190] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 372.550951][ T190] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 372.550991][ T190] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 372.602141][ T190] usb 2-1: USB disconnect, device number 29 [ 372.814384][ T30] audit: type=1400 audit(1788883127.483:398): avc: denied { write } for pid=8529 comm="syz.1.737" name="fs" dev="configfs" ino=13099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 372.983378][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 373.164528][ T25] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 373.187464][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 373.187541][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 373.216445][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.216560][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.294414][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.303992][ T25] usb 1-1: Product: syz [ 373.309225][ T25] usb 1-1: Manufacturer: syz [ 373.314525][ T25] usb 1-1: SerialNumber: syz [ 373.504667][ T8537] FAULT_INJECTION: forcing a failure. [ 373.504667][ T8537] name failslab, interval 1, probability 0, space 0, times 0 [ 373.504881][ T8537] CPU: 1 UID: 0 PID: 8537 Comm: syz.4.740 Not tainted syzkaller #0 PREEMPT(full) [ 373.504910][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 373.504928][ T8537] Call Trace: [ 373.504936][ T8537] [ 373.504944][ T8537] dump_stack_lvl+0x100/0x190 [ 373.504984][ T8537] should_fail_ex.cold+0x5/0xa [ 373.505013][ T8537] should_failslab+0xc2/0x120 [ 373.505046][ T8537] __kmalloc_noprof+0xfc/0x840 [ 373.505071][ T8537] ? __register_sysctl_table+0xac/0x1650 [ 373.505110][ T8537] __register_sysctl_table+0xac/0x1650 [ 373.505139][ T8537] ? trace_kmalloc+0xeb/0x110 [ 373.505163][ T8537] ? __kasan_kmalloc+0xaa/0xb0 [ 373.505186][ T8537] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 373.505210][ T8537] ? __pfx___register_sysctl_table+0x10/0x10 [ 373.505240][ T8537] ? register_pidns_sysctls+0x48/0x1c0 [ 373.505272][ T8537] ? __asan_memcpy+0x3c/0x60 [ 373.505295][ T8537] register_pidns_sysctls+0x11d/0x1c0 [ 373.505322][ T8537] ? __ns_common_init+0x299/0x4b0 [ 373.505350][ T8537] copy_pid_ns+0x680/0x10a0 [ 373.505378][ T8537] ? __pfx_copy_pid_ns+0x10/0x10 [ 373.505406][ T8537] ? __pfx_copy_mnt_ns+0x10/0x10 [ 373.505438][ T8537] ? create_new_namespaces+0x30/0xac0 [ 373.505466][ T8537] create_new_namespaces+0x2aa/0xac0 [ 373.505496][ T8537] unshare_nsproxy_namespaces+0xf2/0x220 [ 373.505522][ T8537] ksys_unshare+0x4a2/0xa70 [ 373.505546][ T8537] ? __pfx_ksys_unshare+0x10/0x10 [ 373.505582][ T8537] __x64_sys_unshare+0x31/0x40 [ 373.505605][ T8537] do_syscall_64+0x123/0x790 [ 373.505633][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.505655][ T8537] RIP: 0033:0x7fe66ab9e159 [ 373.505674][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.505693][ T8537] RSP: 002b:00007fe66ba04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 373.505720][ T8537] RAX: ffffffffffffffda RBX: 00007fe66ae25fa0 RCX: 00007fe66ab9e159 [ 373.505735][ T8537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 373.505748][ T8537] RBP: 00007fe66ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 373.505762][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.505775][ T8537] R13: 00007fe66ae26038 R14: 00007fe66ae25fa0 R15: 00007ffc71877be8 [ 373.505805][ T8537] [ 373.844435][ T25] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 375.803524][ T8552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=8552 comm=syz.2.743 [ 375.882872][ T5724] usb 1-1: USB disconnect, device number 22 [ 375.948884][ T5724] usblp0: removed [ 376.154681][ T50] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 376.245528][ T8552] netlink: 'syz.2.743': attribute type 2 has an invalid length. [ 376.281937][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.743'. [ 376.357724][ T50] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 376.359822][ T50] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 376.359887][ T50] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 376.385970][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.386375][ T50] usb 2-1: Product: syz [ 376.386826][ T50] usb 2-1: Manufacturer: syz [ 376.387019][ T50] usb 2-1: SerialNumber: syz [ 377.192386][ T50] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 377.673377][ T8570] NILFS (loop2): device size too small [ 377.749179][ T5710] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 377.925499][ T5710] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 377.932642][ T5710] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 377.932715][ T5710] usb 5-1: config 1 has no interface number 0 [ 377.991373][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.992839][ T5710] usb 5-1: Product: syz [ 377.992874][ T5710] usb 5-1: Manufacturer: syz [ 377.992907][ T5710] usb 5-1: SerialNumber: syz [ 378.965465][ T5710] usb 5-1: 3:1 : does not exist [ 378.965527][ T5710] usb 5-1: 3:2 : does not exist [ 379.041015][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.054907][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.067103][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.078074][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.081624][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.131623][ T50] usb 2-1: USB disconnect, device number 30 [ 379.308912][ T50] usblp0: removed [ 379.560185][ T5710] usb 5-1: USB disconnect, device number 27 [ 379.686536][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.991711][ T8586] siw: device registration error -23 [ 380.045680][ T190] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 380.317020][ T190] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 380.344283][ T190] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 380.344672][ T190] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 380.344829][ T190] usb 3-1: config 0 has no interface number 0 [ 380.344872][ T190] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 380.344961][ T190] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 380.345031][ T190] usb 3-1: config 0 interface 143 has no altsetting 0 [ 380.558785][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.558840][ T190] usb 3-1: Product: syz [ 380.558925][ T190] usb 3-1: Manufacturer: syz [ 380.558945][ T190] usb 3-1: SerialNumber: syz [ 380.658879][ T190] usb 3-1: config 0 descriptor?? [ 380.791452][ T8589] NILFS (loop1): device size too small [ 381.613025][ T190] usb 3-1: USB disconnect, device number 30 [ 382.941354][ T8594] netlink: 52 bytes leftover after parsing attributes in process `syz.4.755'. [ 383.162967][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.756'. [ 383.255018][ T190] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 383.463686][ T190] usb 3-1: device descriptor read/64, error -71 [ 383.744459][ T190] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 383.946123][ T190] usb 3-1: device descriptor read/64, error -71 [ 384.080541][ T190] usb usb3-port1: attempt power cycle [ 384.453540][ T190] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 384.552065][ T190] usb 3-1: device descriptor read/8, error -71 [ 386.162444][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 386.435403][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 386.714497][ T5702] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 386.893384][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 386.894016][ T5702] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 386.895929][ T5702] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 386.895960][ T5702] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.895986][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.896015][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.898523][ T5702] usb 5-1: config 0 descriptor?? [ 386.899147][ T8628] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.992404][ T8630] Need at least one configuration in g1. [ 386.992538][ T8630] udc dummy_udc.0: failed to start g1: -22 [ 386.992561][ T8630] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 387.040233][ T8630] UDC core: g1: couldn't find an available UDC or it's busy [ 387.122475][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 387.182470][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 387.387754][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.387806][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399722][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399754][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399779][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399803][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399827][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399851][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399875][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.399899][ T5702] samsung 0003:0419:0001.0004: unknown main item tag 0x0 [ 387.429173][ T5702] samsung 0003:0419:0001.0004: unknown global tag 0xd [ 387.429200][ T5702] samsung 0003:0419:0001.0004: item 0 1 1 13 parsing failed [ 387.450749][ T5702] samsung 0003:0419:0001.0004: parse failed [ 387.450813][ T5702] samsung 0003:0419:0001.0004: probe with driver samsung failed with error -22 [ 387.615444][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 387.620302][ T5702] usb 5-1: USB disconnect, device number 28 [ 388.336899][ T190] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 388.508146][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=8673 comm=syz.3.774 [ 388.527178][ T190] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 388.582045][ T190] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 388.582138][ T190] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 388.582199][ T190] usb 2-1: config 0 has no interface number 0 [ 388.582270][ T190] usb 2-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 388.582335][ T190] usb 2-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 388.582390][ T190] usb 2-1: config 0 interface 143 has no altsetting 0 [ 388.632523][ T8673] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 388.632542][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.774'. [ 388.664012][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 388.671366][ T8673] : entered promiscuous mode [ 388.783519][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.783557][ T190] usb 2-1: Product: syz [ 388.783586][ T190] usb 2-1: Manufacturer: syz [ 388.783603][ T190] usb 2-1: SerialNumber: syz [ 388.795499][ T190] usb 2-1: config 0 descriptor?? [ 389.087569][ T190] usb 2-1: USB disconnect, device number 31 [ 389.433416][ T5702] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 389.553678][ T190] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 389.590155][ T5702] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 389.596417][ T5702] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 389.596444][ T5702] usb 1-1: config 0 has no interface number 0 [ 389.596503][ T5702] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.602516][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.602542][ T5702] usb 1-1: Product: syz [ 389.602556][ T5702] usb 1-1: Manufacturer: syz [ 389.602570][ T5702] usb 1-1: SerialNumber: syz [ 389.608797][ T5702] usb 1-1: config 0 descriptor?? [ 389.619202][ T5702] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 389.708140][ T190] usb 2-1: device descriptor read/64, error -71 [ 389.744770][ T30] audit: type=1400 audit(1788883144.423:399): avc: denied { write } for pid=8697 comm="syz.3.779" name="subsystems" dev="configfs" ino=3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.785514][ T30] audit: type=1400 audit(1788883144.453:400): avc: denied { write } for pid=8697 comm="syz.3.779" name="ports" dev="configfs" ino=3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.823420][ T30] audit: type=1400 audit(1788883144.493:401): avc: denied { read } for pid=8697 comm="syz.3.779" name="addr_trtype" dev="configfs" ino=19541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 389.868296][ T30] audit: type=1400 audit(1788883144.533:402): avc: denied { write } for pid=8697 comm="syz.3.779" name="subsystems" dev="configfs" ino=19537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.868363][ T30] audit: type=1400 audit(1788883144.533:403): avc: denied { write } for pid=8697 comm="syz.3.779" name="subsystems" dev="configfs" ino=19537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 389.943487][ T8690] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 389.967177][ T190] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 389.985573][ T8690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.168595][ T190] usb 2-1: device descriptor read/64, error -71 [ 390.304526][ T190] usb usb2-port1: attempt power cycle [ 390.497518][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 390.648663][ T190] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 390.783113][ T190] usb 2-1: device descriptor read/8, error -71 [ 391.025452][ T5724] usb 1-1: USB disconnect, device number 23 [ 391.032887][ T5724] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 391.090469][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 391.256096][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 391.443257][ T5707] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 391.444805][ T5710] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 391.583096][ T5791] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 391.658342][ T5707] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 391.658520][ T5710] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 391.761899][ T5791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.761947][ T5791] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 391.781443][ T5791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.781477][ T5791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.792686][ T5707] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.792714][ T5707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 391.792751][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.834025][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.834062][ T5791] usb 3-1: Product: syz [ 391.834088][ T5791] usb 3-1: Manufacturer: syz [ 391.834104][ T5791] usb 3-1: SerialNumber: syz [ 391.866575][ T5791] usb 3-1: selecting invalid altsetting 1 [ 391.872748][ T5791] usb 3-1: unit 6 not found! [ 391.890213][ T5707] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 392.050805][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.050859][ T5710] usb 4-1: Product: syz [ 392.050872][ T5710] usb 4-1: Manufacturer: syz [ 392.050887][ T5710] usb 4-1: SerialNumber: syz [ 392.053253][ T5710] usb 4-1: config 0 descriptor?? [ 392.131640][ T8724] FAULT_INJECTION: forcing a failure. [ 392.131640][ T8724] name failslab, interval 1, probability 0, space 0, times 0 [ 392.134636][ T30] audit: type=1400 audit(1788883146.793:404): avc: denied { read write } for pid=8711 comm="syz.4.783" name="idmouse0" dev="devtmpfs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 392.168328][ T8724] CPU: 1 UID: 0 PID: 8724 Comm: syz.1.786 Not tainted syzkaller #0 PREEMPT(full) [ 392.168347][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 392.168355][ T8724] Call Trace: [ 392.168360][ T8724] [ 392.168366][ T8724] dump_stack_lvl+0x100/0x190 [ 392.168389][ T8724] should_fail_ex.cold+0x5/0xa [ 392.168409][ T8724] should_failslab+0xc2/0x120 [ 392.168424][ T8724] __kmalloc_noprof+0xfc/0x840 [ 392.168437][ T8724] ? __register_sysctl_table+0xbc8/0x1650 [ 392.168454][ T8724] ? __register_sysctl_table+0xbe4/0x1650 [ 392.168473][ T8724] __register_sysctl_table+0xbe4/0x1650 [ 392.168493][ T8724] ? __pfx___register_sysctl_table+0x10/0x10 [ 392.168509][ T8724] ? register_pidns_sysctls+0x48/0x1c0 [ 392.168527][ T8724] ? __asan_memcpy+0x3c/0x60 [ 392.168539][ T8724] register_pidns_sysctls+0x11d/0x1c0 [ 392.168555][ T8724] ? __ns_common_init+0x299/0x4b0 [ 392.168570][ T8724] copy_pid_ns+0x680/0x10a0 [ 392.168585][ T8724] ? __pfx_copy_pid_ns+0x10/0x10 [ 392.168600][ T8724] ? __pfx_copy_mnt_ns+0x10/0x10 [ 392.168618][ T8724] ? create_new_namespaces+0x30/0xac0 [ 392.168634][ T8724] create_new_namespaces+0x2aa/0xac0 [ 392.168650][ T8724] unshare_nsproxy_namespaces+0xf2/0x220 [ 392.168664][ T8724] ksys_unshare+0x4a2/0xa70 [ 392.168678][ T8724] ? __pfx_ksys_unshare+0x10/0x10 [ 392.168697][ T8724] __x64_sys_unshare+0x31/0x40 [ 392.168710][ T8724] do_syscall_64+0x123/0x790 [ 392.168726][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.168738][ T8724] RIP: 0033:0x7f95b579e159 [ 392.168749][ T8724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.168767][ T8724] RSP: 002b:00007f95b673c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 392.168780][ T8724] RAX: ffffffffffffffda RBX: 00007f95b5a25fa0 RCX: 00007f95b579e159 [ 392.168789][ T8724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 392.168797][ T8724] RBP: 00007f95b583503b R08: 0000000000000000 R09: 0000000000000000 [ 392.168804][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.168812][ T8724] R13: 00007f95b5a26038 R14: 00007f95b5a25fa0 R15: 00007ffccf56bad8 [ 392.168828][ T8724] [ 392.227787][ T8724] sysctl could not get directory: /kernel -12 [ 392.911767][ T5791] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 393.057365][ T5791] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 393.075974][ T5791] usb 3-1: USB disconnect, device number 35 [ 393.122875][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.228746][ T5707] usb 5-1: USB disconnect, device number 29 [ 393.235555][ T5707] idmouse 5-1:1.0: disconnected [ 393.643231][ T5702] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 394.175147][ T5710] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 394.176135][ T5710] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 394.176888][ T5710] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 394.394753][ T5702] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 395.921980][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.922022][ T5702] usb 1-1: Product: syz [ 395.922052][ T5702] usb 1-1: Manufacturer: syz [ 395.922070][ T5702] usb 1-1: SerialNumber: syz [ 395.967079][ T5702] usb 1-1: config 0 descriptor?? [ 396.079358][ T5791] usb 4-1: USB disconnect, device number 21 [ 396.452178][ T8757] NILFS (loop3): device size too small [ 397.244511][ T5710] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 397.466340][ T5710] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 397.477375][ T5710] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 397.477447][ T5710] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 397.477478][ T5710] usb 3-1: config 0 has no interface number 0 [ 397.477530][ T5710] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 397.477578][ T5710] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 397.477631][ T5710] usb 3-1: config 0 interface 143 has no altsetting 0 [ 397.480460][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.480512][ T5710] usb 3-1: Product: syz [ 397.480527][ T5710] usb 3-1: Manufacturer: syz [ 397.480555][ T5710] usb 3-1: SerialNumber: syz [ 397.594962][ T5710] usb 3-1: config 0 descriptor?? [ 397.717145][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 397.842020][ T5710] usb 3-1: USB disconnect, device number 36 [ 397.920996][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 398.026114][ T5702] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 398.032864][ T5702] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 398.041389][ T5702] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 398.208395][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 398.355615][ T5710] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 398.482248][ T5707] usb 1-1: USB disconnect, device number 24 [ 398.486203][ T5710] usb 3-1: device descriptor read/64, error -71 [ 398.723424][ T5710] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 398.853274][ T5710] usb 3-1: device descriptor read/64, error -71 [ 398.863125][ T5791] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 398.963546][ T5710] usb usb3-port1: attempt power cycle [ 399.015704][ T5791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.024173][ T5791] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 399.034269][ T5791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.044595][ T5791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.058152][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.066264][ T5791] usb 4-1: Product: syz [ 399.066287][ T5791] usb 4-1: Manufacturer: syz [ 399.066303][ T5791] usb 4-1: SerialNumber: syz [ 399.103946][ T5791] usb 4-1: selecting invalid altsetting 1 [ 399.111962][ T5791] usb 4-1: unit 6 not found! [ 399.304016][ T5710] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 399.877048][ T5710] usb 3-1: device descriptor read/8, error -71 [ 403.090909][ T8819] overlayfs: missing 'lowerdir' [ 404.532138][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 404.879604][ T5791] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 406.055483][ T5791] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 406.068462][ T5791] usb 4-1: USB disconnect, device number 22 [ 406.845370][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.393894][ T5724] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 407.551151][ T5724] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 407.575227][ T5724] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 407.584716][ T5724] usb 3-1: config 1 has no interface number 0 [ 407.625138][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.625190][ T5724] usb 3-1: Product: syz [ 407.633479][ T5724] usb 3-1: Manufacturer: syz [ 407.633552][ T5724] usb 3-1: SerialNumber: syz [ 407.673090][ T5791] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 407.877055][ T5724] usb 3-1: 3:1 : does not exist [ 407.882562][ T5724] usb 3-1: 3:2 : does not exist [ 407.986699][ T5791] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 408.040184][ T5791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.040233][ T5791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 408.040267][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.597642][ T5791] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 408.963360][ T8880] overlayfs: missing 'lowerdir' [ 410.085710][ T5710] usb 1-1: USB disconnect, device number 25 [ 410.101606][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.118288][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.120014][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.121769][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.122718][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.160541][ T5724] usb 3-1: USB disconnect, device number 41 [ 410.226292][ T5710] idmouse 1-1:1.0: disconnected [ 410.778381][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 410.793694][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 410.795235][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 410.796634][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 410.825692][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 411.473136][ T5724] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 411.646337][ T5724] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 411.657001][ T5724] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 411.657043][ T5724] usb 3-1: config 0 has no interface number 0 [ 411.657093][ T5724] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.698525][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.698550][ T5724] usb 3-1: Product: syz [ 411.698565][ T5724] usb 3-1: Manufacturer: syz [ 411.698580][ T5724] usb 3-1: SerialNumber: syz [ 411.916195][ T5724] usb 3-1: config 0 descriptor?? [ 411.920746][ T5724] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 412.185160][ T8910] md: array md0 already has disks! [ 412.223555][ T8905] md: could not open device unknown-block(1,1). [ 412.223645][ T8905] md: error, md_import_device() returned -16 [ 412.324970][ T8905] md/raid10:md0: not enough operational mirrors. [ 412.328017][ T8886] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 412.358284][ T8905] md: pers->run() failed ... [ 412.499297][ T8886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.584541][ T5702] usb 3-1: USB disconnect, device number 42 [ 412.592149][ T5702] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 413.063354][ T30] audit: type=1400 audit(1788883167.733:405): avc: denied { write } for pid=8921 comm="syz.1.837" name="fs" dev="configfs" ino=13099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 415.013124][ T5724] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 415.175345][ T5724] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 415.179946][ T5724] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 415.182385][ T5724] usb 1-1: config 0 has no interface number 0 [ 415.185232][ T5724] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.286684][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.286737][ T5724] usb 1-1: Product: syz [ 415.286823][ T5724] usb 1-1: Manufacturer: syz [ 415.286892][ T5724] usb 1-1: SerialNumber: syz [ 415.399644][ T5724] usb 1-1: config 0 descriptor?? [ 415.872282][ T5724] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 416.109027][ T8928] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 416.249601][ T8928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.329308][ T5702] usb 1-1: USB disconnect, device number 26 [ 416.344575][ T5702] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 416.453116][ T5791] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 416.613859][ T5791] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 416.615873][ T5791] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 416.615898][ T5791] usb 2-1: config 1 has no interface number 0 [ 416.619822][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.619847][ T5791] usb 2-1: Product: syz [ 416.619861][ T5791] usb 2-1: Manufacturer: syz [ 416.619876][ T5791] usb 2-1: SerialNumber: syz [ 416.643590][ T5791] usb 2-1: 3:1 : does not exist [ 416.643615][ T5791] usb 2-1: 3:2 : does not exist [ 416.813919][ T8960] md: array md0 already has disks! [ 416.864229][ T8960] md: could not open device unknown-block(1,1). [ 416.870770][ T8960] md: error, md_import_device() returned -16 [ 417.051508][ T8962] md/raid10:md0: not enough operational mirrors. [ 417.086420][ T8962] md: pers->run() failed ... [ 417.869741][ T5605] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 417.926540][ T8984] loop9: detected capacity change from 0 to 2640 [ 417.935492][ T8984] buffer_io_error: 11 callbacks suppressed [ 417.942053][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.951583][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.959689][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967856][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967878][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967908][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967932][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967950][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 417.967965][ T8984] ldm_validate_partition_table(): Disk read failed. [ 418.018877][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 418.027677][ T8984] Buffer I/O error on dev loop9, logical block 0, async page read [ 418.037602][ T8984] Dev loop9: unable to read RDB block 0 [ 418.043549][ T8984] loop9: unable to read partition table [ 418.043745][ T8984] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 418.523445][ T5791] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 418.605715][ T8990] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 418.675228][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 418.676565][ T5791] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 418.677464][ T5791] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 418.677502][ T5791] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 418.677528][ T5791] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.677554][ T5791] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 418.680947][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.680970][ T5791] usb 1-1: Product: syz [ 418.680984][ T5791] usb 1-1: Manufacturer: syz [ 418.680999][ T5791] usb 1-1: SerialNumber: syz [ 418.689607][ T30] audit: type=1400 audit(1788883173.353:406): avc: denied { read write } for pid=8989 comm="syz.4.857" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 418.689658][ T30] audit: type=1400 audit(1788883173.353:407): avc: denied { open } for pid=8989 comm="syz.4.857" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 418.699712][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 418.717812][ T5791] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input21 [ 418.923401][ T5791] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 418.923433][ T5791] (id 0x00) [ 419.033426][ T5791] rc_core: IR keymap rc-imon-pad not found [ 419.036669][ T5791] Registered IR keymap rc-empty [ 419.036728][ T5791] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 419.036744][ T5791] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 419.114732][ T5791] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 419.121059][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=9006 comm=syz.4.860 [ 419.122554][ T5791] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input22 [ 419.138883][ T5791] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:27> initialized [ 419.209323][ T5724] usb 2-1: USB disconnect, device number 36 [ 419.256954][ T9001] netlink: 'syz.4.860': attribute type 2 has an invalid length. [ 419.256993][ T9001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.860'. [ 419.308041][ T9001] : entered promiscuous mode [ 420.989291][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 421.912342][ T9015] imon:send_packet: task interrupted [ 421.912371][ T9015] imon:send_packet: packet tx failed (-512) [ 421.912422][ T9015] imon:vfd_write: send packet #3 failed [ 422.032710][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 422.050491][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 422.061820][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 422.072556][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 422.073275][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 424.228199][ T50] usb 1-1: USB disconnect, device number 27 [ 424.428802][ T9052] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 424.552288][ T30] audit: type=1400 audit(1788883179.223:408): avc: denied { bind } for pid=9051 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 424.611386][ T9059] RDS: rds_bind could not find a transport for 75:6c6c::, load rds_tcp or rds_rdma? [ 424.783199][ T5702] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 424.814341][ T5710] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 424.934513][ T5702] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 424.947330][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 424.947375][ T5702] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 424.969826][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.969865][ T5702] usb 4-1: Product: syz [ 424.969899][ T5702] usb 4-1: Manufacturer: syz [ 424.969916][ T5702] usb 4-1: SerialNumber: syz [ 424.978097][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 424.978796][ T5710] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 424.983569][ T5710] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 424.983602][ T5710] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.983629][ T5710] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.983666][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.070289][ T5710] usb 5-1: config 0 descriptor?? [ 425.070965][ T9056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 425.229314][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'. [ 425.242586][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 425.272925][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3092 sclass=netlink_route_socket pid=9069 comm=syz.0.878 [ 425.344312][ T9069] netlink: 'syz.0.878': attribute type 2 has an invalid length. [ 425.352899][ T9069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.878'. [ 425.376117][ T9070] NILFS (loop2): device size too small [ 426.346243][ T5710] hid_parser_main: 384 callbacks suppressed [ 426.346292][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346321][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346348][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346374][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346400][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346425][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346450][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346474][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346500][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.346526][ T5710] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 426.349805][ T5710] samsung 0003:0419:0001.0005: unknown global tag 0xd [ 426.349833][ T5710] samsung 0003:0419:0001.0005: item 0 1 1 13 parsing failed [ 426.350460][ T5710] samsung 0003:0419:0001.0005: parse failed [ 426.350525][ T5710] samsung 0003:0419:0001.0005: probe with driver samsung failed with error -22 [ 426.353228][ T5710] usb 5-1: USB disconnect, device number 30 [ 426.711287][ T9083] IPv6: addrconf: prefix option has invalid lifetime [ 426.925241][ T50] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 426.957588][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 427.034749][ T5710] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 427.092598][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 427.121109][ T50] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 427.129666][ T50] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 427.129777][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.129851][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.131535][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 427.131859][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.131918][ T50] usb 5-1: config 0 has no interface number 0 [ 427.132066][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 427.132211][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 427.132396][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.132662][ T50] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.132730][ T50] usb 5-1: config 0 interface 125 has no altsetting 0 [ 427.132792][ T50] usb 5-1: config 0 interface 125 has no altsetting 2 [ 427.329100][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.329172][ T50] usb 5-1: Product: syz [ 427.329338][ T50] usb 5-1: Manufacturer: syz [ 427.329413][ T50] usb 5-1: SerialNumber: syz [ 427.499322][ T50] usb 5-1: config 0 descriptor?? [ 427.532683][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 427.532738][ T5710] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 427.556750][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.556775][ T5710] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.623827][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.623866][ T5710] usb 2-1: Product: syz [ 427.623896][ T5710] usb 2-1: Manufacturer: syz [ 427.623913][ T5710] usb 2-1: SerialNumber: syz [ 427.770215][ T50] usb 5-1: selecting invalid altsetting 2 [ 428.164715][ T5710] usb 2-1: selecting invalid altsetting 1 [ 428.165353][ T5710] usb 2-1: unit 6 not found! [ 428.481434][ T5702] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 428.502026][ T5702] usb 4-1: USB disconnect, device number 23 [ 428.513443][ T190] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 428.526696][ T5702] usblp0: removed [ 428.694950][ T190] usb 1-1: Using ep0 maxpacket: 32 [ 428.695932][ T190] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 428.697836][ T190] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 428.697938][ T190] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.697989][ T190] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.698057][ T190] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 428.704020][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.704058][ T190] usb 1-1: Product: syz [ 428.704086][ T190] usb 1-1: Manufacturer: syz [ 428.704113][ T190] usb 1-1: SerialNumber: syz [ 428.758111][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 428.802659][ T190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input23 [ 428.893437][ T50] get_1284_register timeout [ 428.893609][ C1] usb 5-1: async_complete: urb error -104 [ 428.893742][ C1] usb 5-1: async_complete: urb error -104 [ 428.983946][ T190] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 428.984002][ T190] (id 0x00) [ 429.124475][ T190] rc_core: IR keymap rc-imon-pad not found [ 429.124515][ T190] Registered IR keymap rc-empty [ 429.124675][ T190] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 429.124720][ T190] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 429.156593][ T5710] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 429.184475][ T190] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 429.198222][ T190] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input24 [ 429.214460][ T190] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:28> initialized [ 429.364540][ T5710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 429.379787][ T5710] usb 2-1: USB disconnect, device number 37 [ 431.397673][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.425290][ T5710] usb 5-1: USB disconnect, device number 31 [ 431.570024][ T5791] usb 1-1: USB disconnect, device number 28 [ 431.706248][ T9115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.890'. [ 431.718932][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 433.520905][ T9133] FAULT_INJECTION: forcing a failure. [ 433.520905][ T9133] name failslab, interval 1, probability 0, space 0, times 0 [ 433.533978][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.4.897 Not tainted syzkaller #0 PREEMPT(full) [ 433.534009][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 433.534023][ T9133] Call Trace: [ 433.534030][ T9133] [ 433.534039][ T9133] dump_stack_lvl+0x100/0x190 [ 433.534076][ T9133] should_fail_ex.cold+0x5/0xa [ 433.534106][ T9133] should_failslab+0xc2/0x120 [ 433.534132][ T9133] __kmalloc_noprof+0xfc/0x840 [ 433.534153][ T9133] ? __register_sysctl_table+0xbc8/0x1650 [ 433.534184][ T9133] ? __register_sysctl_table+0xbe4/0x1650 [ 433.534219][ T9133] __register_sysctl_table+0xbe4/0x1650 [ 433.534255][ T9133] ? __pfx___register_sysctl_table+0x10/0x10 [ 433.534284][ T9133] ? register_pidns_sysctls+0x48/0x1c0 [ 433.534316][ T9133] ? __asan_memcpy+0x3c/0x60 [ 433.534338][ T9133] register_pidns_sysctls+0x11d/0x1c0 [ 433.534366][ T9133] ? __ns_common_init+0x299/0x4b0 [ 433.534393][ T9133] copy_pid_ns+0x680/0x10a0 [ 433.534421][ T9133] ? __pfx_copy_pid_ns+0x10/0x10 [ 433.534448][ T9133] ? __pfx_copy_mnt_ns+0x10/0x10 [ 433.534481][ T9133] ? create_new_namespaces+0x30/0xac0 [ 433.534509][ T9133] create_new_namespaces+0x2aa/0xac0 [ 433.534539][ T9133] unshare_nsproxy_namespaces+0xf2/0x220 [ 433.534566][ T9133] ksys_unshare+0x4a2/0xa70 [ 433.534589][ T9133] ? __pfx_ksys_unshare+0x10/0x10 [ 433.534623][ T9133] __x64_sys_unshare+0x31/0x40 [ 433.534645][ T9133] do_syscall_64+0x123/0x790 [ 433.534674][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.534696][ T9133] RIP: 0033:0x7fe66ab9e159 [ 433.534714][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.534733][ T9133] RSP: 002b:00007fe66ba04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 433.534753][ T9133] RAX: ffffffffffffffda RBX: 00007fe66ae25fa0 RCX: 00007fe66ab9e159 [ 433.534767][ T9133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 433.534780][ T9133] RBP: 00007fe66ac3503b R08: 0000000000000000 R09: 0000000000000000 [ 433.534794][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.534806][ T9133] R13: 00007fe66ae26038 R14: 00007fe66ae25fa0 R15: 00007ffc71877be8 [ 433.534836][ T9133] [ 433.534844][ T9133] sysctl could not get directory: /kernel -12 [ 433.789231][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 433.808171][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 433.809247][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 433.810135][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 433.819749][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 434.658534][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.658603][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.265621][ T9181] md: array md0 already has disks! [ 438.314233][ T9179] md: could not open device unknown-block(1,1). [ 438.314300][ T9179] md: error, md_import_device() returned -16 [ 438.383168][ T50] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 438.472893][ T9179] md/raid10:md0: not enough operational mirrors. [ 438.506890][ T9179] md: pers->run() failed ... [ 438.543255][ T50] usb 4-1: Using ep0 maxpacket: 16 [ 438.551769][ T50] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 438.565187][ T50] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 438.565234][ T50] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.565276][ T50] usb 4-1: config 0 interface 0 has no altsetting 0 [ 438.565311][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.611412][ T50] usb 4-1: config 0 descriptor?? [ 438.622051][ T9177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.066076][ T50] hid_parser_main: 384 callbacks suppressed [ 439.073526][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073576][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073619][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073648][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073686][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073710][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073734][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073759][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073784][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.073808][ T50] samsung 0003:0419:0001.0006: unknown main item tag 0x0 [ 439.155506][ T50] samsung 0003:0419:0001.0006: unknown global tag 0xd [ 439.162426][ T50] samsung 0003:0419:0001.0006: item 0 1 1 13 parsing failed [ 439.170582][ T50] samsung 0003:0419:0001.0006: parse failed [ 439.176723][ T50] samsung 0003:0419:0001.0006: probe with driver samsung failed with error -22 [ 439.277414][ T50] usb 4-1: USB disconnect, device number 24 [ 439.993119][ T50] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 440.170484][ T50] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 440.187380][ T50] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 440.187428][ T50] usb 2-1: config 1 has no interface number 0 [ 440.217408][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.217516][ T50] usb 2-1: Product: syz [ 440.217567][ T50] usb 2-1: Manufacturer: syz [ 440.217629][ T50] usb 2-1: SerialNumber: syz [ 440.891424][ T50] usb 2-1: 3:1 : does not exist [ 440.891543][ T50] usb 2-1: 3:2 : does not exist [ 441.902291][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 442.826467][ T50] usb 2-1: USB disconnect, device number 38 [ 445.404119][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 446.147057][ T9229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 446.165915][ T9229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 446.188904][ T9229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.188996][ T9229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.206576][ T9229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.093426][ T9256] siw: device registration error -23 [ 448.206944][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 448.206999][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.263320][ T5605] Bluetooth: hci2: command 0x0c1a tx timeout [ 448.263375][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.263436][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 448.431486][ T9262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.931'. [ 448.503317][ T9262] Need at least one configuration in g1. [ 448.503440][ T9262] udc dummy_udc.0: failed to start g1: -22 [ 448.503478][ T9262] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 448.504208][ T9262] UDC core: g1: couldn't find an available UDC or it's busy [ 448.776285][ T9275] md: array md0 already has disks! [ 448.795389][ T9270] md: could not open device unknown-block(1,1). [ 448.795452][ T9270] md: error, md_import_device() returned -16 [ 448.945138][ T9270] md/raid10:md0: not enough operational mirrors. [ 448.996471][ T9270] md: pers->run() failed ... [ 449.111924][ T30] audit: type=1400 audit(1788883203.783:409): avc: denied { write } for pid=9260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.355703][ T30] audit: type=1400 audit(1788883204.033:410): avc: denied { write } for pid=9290 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.558117][ T30] audit: type=1400 audit(1788883204.233:411): avc: denied { write } for pid=9293 comm="syz.2.935" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 449.586745][ T30] audit: type=1400 audit(1788883204.263:412): avc: denied { open } for pid=9293 comm="syz.2.935" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 449.625144][ T30] audit: type=1400 audit(1788883204.293:413): avc: denied { ioctl } for pid=9293 comm="syz.2.935" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 450.014685][ T9307] md: array md0 already has disks! [ 450.065424][ T9303] md: could not open device unknown-block(1,1). [ 450.066710][ T9303] md: error, md_import_device() returned -16 [ 450.232885][ T30] audit: type=1400 audit(1788883204.903:414): avc: denied { read write } for pid=9313 comm="syz.0.939" name="sg0" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 450.232955][ T30] audit: type=1400 audit(1788883204.903:415): avc: denied { open } for pid=9313 comm="syz.0.939" path="/dev/sg0" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 450.242395][ T9316] tmpfs: Unknown parameter 'nrÿXÿå“Vvp<ü' [ 450.293355][ T25] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 450.298806][ T9303] md/raid10:md0: not enough operational mirrors. [ 450.419801][ T9303] md: pers->run() failed ... [ 450.453825][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 450.457474][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.457498][ T25] usb 3-1: Product: syz [ 450.457512][ T25] usb 3-1: Manufacturer: syz [ 450.457527][ T25] usb 3-1: SerialNumber: syz [ 450.462747][ T25] usb 3-1: config 0 descriptor?? [ 450.490547][ T9316] RDS: rds_bind could not find a transport for 6e75:6c6c::, load rds_tcp or rds_rdma? [ 450.529610][ T30] audit: type=1400 audit(1788883205.203:416): avc: denied { ioctl } for pid=9313 comm="syz.0.939" path="/dev/sg0" dev="devtmpfs" ino=994 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 450.581952][ T30] audit: type=1400 audit(1788883205.253:417): avc: denied { write } for pid=9296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.278628][ T30] audit: type=1400 audit(1788883206.953:418): avc: denied { write } for pid=9332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.360861][ T9330] loop9: detected capacity change from 0 to 2640 [ 452.361362][ T9330] buffer_io_error: 11 callbacks suppressed [ 452.361399][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361430][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361476][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361502][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361528][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361568][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361632][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361658][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361672][ T9330] ldm_validate_partition_table(): Disk read failed. [ 452.361696][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361723][ T9330] Buffer I/O error on dev loop9, logical block 0, async page read [ 452.361781][ T9330] Dev loop9: unable to read RDB block 0 [ 452.361930][ T9330] loop9: unable to read partition table [ 452.362105][ T9330] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 452.510334][ T25] usb 3-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 452.510360][ T25] f81604 3-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 452.510386][ T25] f81604 3-1:0.0: probe with driver f81604 failed with error -110 [ 452.604980][ T9328] ================================================================== [ 452.605011][ T9328] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x1c7/0x200 [ 452.605044][ T9328] Write of size 8 at addr ffff88807ebbf2c8 by task syz.2.938/9328 [ 452.605069][ T9328] [ 452.605080][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT(full) [ 452.605103][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 452.605116][ T9328] Call Trace: [ 452.605123][ T9328] [ 452.605130][ T9328] dump_stack_lvl+0x100/0x190 [ 452.605161][ T9328] print_report+0x13d/0x4b0 [ 452.605188][ T9328] ? __virt_addr_valid+0x239/0x430 [ 452.605210][ T9328] ? mini_qdisc_pair_swap+0x1c7/0x200 [ 452.605233][ T9328] kasan_report+0xdf/0x1c0 [ 452.605258][ T9328] ? mini_qdisc_pair_swap+0x1c7/0x200 [ 452.605283][ T9328] mini_qdisc_pair_swap+0x1c7/0x200 [ 452.605305][ T9328] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 452.605326][ T9328] tcf_chain0_head_change.isra.0+0xc5/0x130 [ 452.605352][ T9328] tc_new_tfilter+0x205a/0x24c0 [ 452.605382][ T9328] ? avc_has_perm_noaudit+0x50/0x3b0 [ 452.605407][ T9328] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 452.605434][ T9328] ? __pfx_tc_new_tfilter+0x10/0x10 [ 452.605466][ T9328] ? __lock_acquire+0x5c0/0x1f40 [ 452.605493][ T9328] ? lock_acquire+0x1d1/0x380 [ 452.605513][ T9328] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 452.605534][ T9328] ? find_held_lock+0x2b/0x80 [ 452.605560][ T9328] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 452.605583][ T9328] ? __pfx_tc_new_tfilter+0x10/0x10 [ 452.605611][ T9328] rtnetlink_rcv_msg+0x95e/0xe90 [ 452.605633][ T9328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.605658][ T9328] ? ref_tracker_free+0x37e/0x6c0 [ 452.605683][ T9328] netlink_rcv_skb+0x159/0x420 [ 452.605702][ T9328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.605725][ T9328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.605749][ T9328] ? netlink_deliver_tap+0x1ae/0xcc0 [ 452.605780][ T9328] netlink_unicast+0x585/0x850 [ 452.605801][ T9328] ? __pfx_netlink_unicast+0x10/0x10 [ 452.605819][ T9328] ? __pfx_sock_has_perm+0x10/0x10 [ 452.605848][ T9328] netlink_sendmsg+0x8b0/0xda0 [ 452.605868][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.605888][ T9328] ? selinux_socket_sendmsg+0x198/0x2f0 [ 452.605919][ T9328] ____sys_sendmsg+0xa4d/0xbe0 [ 452.605944][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.605963][ T9328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.605994][ T9328] ___sys_sendmsg+0x190/0x1e0 [ 452.606022][ T9328] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.606050][ T9328] ? find_held_lock+0x2b/0x80 [ 452.606096][ T9328] __sys_sendmsg+0x160/0x210 [ 452.606117][ T9328] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.606146][ T9328] do_syscall_64+0x123/0x790 [ 452.606173][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.606195][ T9328] RIP: 0033:0x7f4356b9e159 [ 452.606213][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.606232][ T9328] RSP: 002b:00007f4357a34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.606252][ T9328] RAX: ffffffffffffffda RBX: 00007f4356e26090 RCX: 00007f4356b9e159 [ 452.606267][ T9328] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 000000000000000a [ 452.606281][ T9328] RBP: 00007f4356c3503b R08: 0000000000000000 R09: 0000000000000000 [ 452.606295][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.606309][ T9328] R13: 00007f4356e26128 R14: 00007f4356e26090 R15: 00007ffdf322da38 [ 452.606331][ T9328] [ 452.606338][ T9328] [ 452.606343][ T9328] Allocated by task 6338: [ 452.606363][ T9328] kasan_save_stack+0x30/0x50 [ 452.606386][ T9328] kasan_save_track+0x14/0x30 [ 452.606407][ T9328] __kasan_kmalloc+0xaa/0xb0 [ 452.606426][ T9328] __kmalloc_node_noprof+0x342/0x880 [ 452.606447][ T9328] qdisc_alloc+0xbb/0xb30 [ 452.606471][ T9328] qdisc_create+0x70/0x1060 [ 452.606489][ T9328] tc_modify_qdisc+0x1350/0x2120 [ 452.606507][ T9328] rtnetlink_rcv_msg+0x3c9/0xe90 [ 452.606528][ T9328] netlink_rcv_skb+0x159/0x420 [ 452.606544][ T9328] netlink_unicast+0x585/0x850 [ 452.606559][ T9328] netlink_sendmsg+0x8b0/0xda0 [ 452.606575][ T9328] ____sys_sendmsg+0xa4d/0xbe0 [ 452.606597][ T9328] ___sys_sendmsg+0x190/0x1e0 [ 452.606620][ T9328] __sys_sendmsg+0x160/0x210 [ 452.606638][ T9328] do_syscall_64+0x123/0x790 [ 452.606658][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.606680][ T9328] [ 452.606685][ T9328] Freed by task 9328: [ 452.606694][ T9328] kasan_save_stack+0x30/0x50 [ 452.606714][ T9328] kasan_save_track+0x14/0x30 [ 452.606735][ T9328] kasan_save_free_info+0x3b/0x70 [ 452.606764][ T9328] __kasan_slab_free+0x5f/0x80 [ 452.606785][ T9328] kfree+0x22b/0x6d0 [ 452.606807][ T9328] rcu_core+0x5f0/0x1260 [ 452.606828][ T9328] handle_softirqs+0x1e6/0x9d0 [ 452.606847][ T9328] __irq_exit_rcu+0x16a/0x210 [ 452.606864][ T9328] irq_exit_rcu+0x9/0x30 [ 452.606881][ T9328] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 452.606902][ T9328] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.606922][ T9328] [ 452.606934][ T9328] Last potentially related work creation: [ 452.606942][ T9328] kasan_save_stack+0x30/0x50 [ 452.606962][ T9328] kasan_record_aux_stack+0xa7/0xc0 [ 452.606990][ T9328] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 452.607013][ T9328] qdisc_destroy+0x4f/0x70 [ 452.607037][ T9328] qdisc_graft+0xd7d/0x19c0 [ 452.607061][ T9328] tc_modify_qdisc+0x10df/0x2120 [ 452.607080][ T9328] rtnetlink_rcv_msg+0x3c9/0xe90 [ 452.607103][ T9328] netlink_rcv_skb+0x159/0x420 [ 452.607119][ T9328] netlink_unicast+0x585/0x850 [ 452.607136][ T9328] netlink_sendmsg+0x8b0/0xda0 [ 452.607153][ T9328] ____sys_sendmsg+0xa4d/0xbe0 [ 452.607177][ T9328] ___sys_sendmsg+0x190/0x1e0 [ 452.607200][ T9328] __sys_sendmsg+0x160/0x210 [ 452.607218][ T9328] do_syscall_64+0x123/0x790 [ 452.607238][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.607257][ T9328] [ 452.607261][ T9328] The buggy address belongs to the object at ffff88807ebbf000 [ 452.607261][ T9328] which belongs to the cache kmalloc-1k of size 1024 [ 452.607276][ T9328] The buggy address is located 712 bytes inside of [ 452.607276][ T9328] freed 1024-byte region [ffff88807ebbf000, ffff88807ebbf400) [ 452.607296][ T9328] [ 452.607300][ T9328] The buggy address belongs to the physical page: [ 452.607309][ T9328] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ebb9000 pfn:0x7ebb8 [ 452.607332][ T9328] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 452.607349][ T9328] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 452.607373][ T9328] page_type: f5(slab) [ 452.607391][ T9328] raw: 00fff00000000240 ffff88801c02fdc0 ffffea0001e84e10 ffffea0001633a10 [ 452.607413][ T9328] raw: ffff88807ebb9000 0000000000100006 00000000f5000000 0000000000000000 [ 452.607434][ T9328] head: 00fff00000000240 ffff88801c02fdc0 ffffea0001e84e10 ffffea0001633a10 [ 452.607452][ T9328] head: ffff88807ebb9000 0000000000100006 00000000f5000000 0000000000000000 [ 452.607470][ T9328] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 452.607488][ T9328] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 452.607498][ T9328] page dumped because: kasan: bad access detected [ 452.607511][ T9328] page_owner tracks the page as allocated [ 452.607517][ T9328] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1439, tgid 1439 (kworker/u8:12), ts 132495464594 [ 452.607547][ T9328] post_alloc_hook+0xfd/0x120 [ 452.607572][ T9328] get_page_from_freelist+0x110d/0x35d0 [ 452.607599][ T9328] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 452.607627][ T9328] new_slab+0xa9/0x6e0 [ 452.607652][ T9328] refill_objects+0xe3/0x410 [ 452.607678][ T9328] __pcs_replace_empty_main+0x35e/0x650 [ 452.607703][ T9328] __kmalloc_noprof+0x67c/0x840 [ 452.607721][ T9328] ieee802_11_parse_elems_full+0x17c/0x3c90 [ 452.607740][ T9328] ieee80211_inform_bss+0x159/0x1170 [ 452.607768][ T9328] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 452.607794][ T9328] cfg80211_inform_bss_data+0x230/0x3c20 [ 452.607819][ T9328] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 452.607844][ T9328] ieee80211_bss_info_update+0x310/0xab0 [ 452.607870][ T9328] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 452.607897][ T9328] ieee80211_iface_work+0xa9a/0x1070 [ 452.607926][ T9328] cfg80211_wiphy_work+0x2b7/0x550 [ 452.607951][ T9328] page last free pid 5611 tgid 5611 ts 131445364414 stack trace: [ 452.607964][ T9328] __free_frozen_pages+0x79f/0x10f0 [ 452.607987][ T9328] qlist_free_all+0x47/0xf0 [ 452.608004][ T9328] kasan_quarantine_reduce+0x1a0/0x1f0 [ 452.608023][ T9328] __kasan_slab_alloc+0x69/0x90 [ 452.608043][ T9328] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 452.608069][ T9328] alloc_vmap_area+0x640/0x2bb0 [ 452.608091][ T9328] __get_vm_area_node+0x1ed/0x350 [ 452.608113][ T9328] __vmalloc_node_range_noprof+0x268/0x1420 [ 452.608138][ T9328] __vmalloc_node_noprof+0xad/0xf0 [ 452.608162][ T9328] do_ip6t_get_ctl+0x7e0/0xc30 [ 452.608180][ T9328] nf_getsockopt+0x7c/0xe0 [ 452.608199][ T9328] ipv6_getsockopt+0x207/0x2a0 [ 452.608218][ T9328] tcp_getsockopt+0xa1/0x110 [ 452.608247][ T9328] do_sock_getsockopt+0x50a/0x6e0 [ 452.608270][ T9328] __sys_getsockopt+0x148/0x260 [ 452.608287][ T9328] __x64_sys_getsockopt+0xbd/0x160 [ 452.608306][ T9328] [ 452.608310][ T9328] Memory state around the buggy address: [ 452.608319][ T9328] ffff88807ebbf180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.608333][ T9328] ffff88807ebbf200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.608346][ T9328] >ffff88807ebbf280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.608357][ T9328] ^ [ 452.608368][ T9328] ffff88807ebbf300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.608381][ T9328] ffff88807ebbf380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.608392][ T9328] ================================================================== [ 452.966251][ T9328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 453.635296][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.2.938 Not tainted syzkaller #0 PREEMPT(full) [ 453.644495][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 453.654546][ T9328] Call Trace: [ 453.657816][ T9328] [ 453.660737][ T9328] dump_stack_lvl+0x100/0x190 [ 453.665424][ T9328] vpanic+0x553/0x970 [ 453.669402][ T9328] ? __pfx_vpanic+0x10/0x10 [ 453.673899][ T9328] ? mini_qdisc_pair_swap+0x1c7/0x200 [ 453.679267][ T9328] panic+0xd1/0xe0 [ 453.682973][ T9328] ? __pfx_panic+0x10/0x10 [ 453.687380][ T9328] ? mini_qdisc_pair_swap+0x1c7/0x200 [ 453.692755][ T9328] ? preempt_schedule_common+0x3c/0xb0 [ 453.698218][ T9328] check_panic_on_warn.cold+0x19/0x34 [ 453.703596][ T9328] end_report.part.0+0x3a/0x90 [ 453.708365][ T9328] kasan_report.cold+0xe/0x18 [ 453.713043][ T9328] ? mini_qdisc_pair_swap+0x1c7/0x200 [ 453.718411][ T9328] mini_qdisc_pair_swap+0x1c7/0x200 [ 453.723602][ T9328] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 453.729660][ T9328] tcf_chain0_head_change.isra.0+0xc5/0x130 [ 453.735552][ T9328] tc_new_tfilter+0x205a/0x24c0 [ 453.740415][ T9328] ? avc_has_perm_noaudit+0x50/0x3b0 [ 453.745693][ T9328] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 453.751056][ T9328] ? __pfx_tc_new_tfilter+0x10/0x10 [ 453.756249][ T9328] ? __lock_acquire+0x5c0/0x1f40 [ 453.761181][ T9328] ? lock_acquire+0x1d1/0x380 [ 453.765842][ T9328] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 453.770949][ T9328] ? find_held_lock+0x2b/0x80 [ 453.775626][ T9328] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 453.780728][ T9328] ? __pfx_tc_new_tfilter+0x10/0x10 [ 453.785929][ T9328] rtnetlink_rcv_msg+0x95e/0xe90 [ 453.790867][ T9328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.796320][ T9328] ? ref_tracker_free+0x37e/0x6c0 [ 453.801334][ T9328] netlink_rcv_skb+0x159/0x420 [ 453.806086][ T9328] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.811541][ T9328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.816817][ T9328] ? netlink_deliver_tap+0x1ae/0xcc0 [ 453.822100][ T9328] netlink_unicast+0x585/0x850 [ 453.826854][ T9328] ? __pfx_netlink_unicast+0x10/0x10 [ 453.832124][ T9328] ? __pfx_sock_has_perm+0x10/0x10 [ 453.837234][ T9328] netlink_sendmsg+0x8b0/0xda0 [ 453.842030][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.847304][ T9328] ? selinux_socket_sendmsg+0x198/0x2f0 [ 453.852848][ T9328] ____sys_sendmsg+0xa4d/0xbe0 [ 453.857603][ T9328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.862874][ T9328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.868158][ T9328] ___sys_sendmsg+0x190/0x1e0 [ 453.872833][ T9328] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.878046][ T9328] ? find_held_lock+0x2b/0x80 [ 453.882728][ T9328] __sys_sendmsg+0x160/0x210 [ 453.887310][ T9328] ? __pfx___sys_sendmsg+0x10/0x10 [ 453.892422][ T9328] do_syscall_64+0x123/0x790 [ 453.897008][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.902887][ T9328] RIP: 0033:0x7f4356b9e159 [ 453.907285][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.926877][ T9328] RSP: 002b:00007f4357a34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.935283][ T9328] RAX: ffffffffffffffda RBX: 00007f4356e26090 RCX: 00007f4356b9e159 [ 453.943265][ T9328] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 000000000000000a [ 453.951226][ T9328] RBP: 00007f4356c3503b R08: 0000000000000000 R09: 0000000000000000 [ 453.959182][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.967138][ T9328] R13: 00007f4356e26128 R14: 00007f4356e26090 R15: 00007ffdf322da38 [ 453.975111][ T9328] [ 453.978352][ T9328] Kernel Offset: disabled [ 453.982662][ T9328] Rebooting in 86400 seconds..