last executing test programs: 15.388878416s ago: executing program 3 (id=1789): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009", @ANYRES64], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00') ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2000000000000004) 12.77067226s ago: executing program 1 (id=1797): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f0000000300)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) 12.55890683s ago: executing program 1 (id=1799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x70bd28, 0x25dfdbff, {0xa, 0x20, 0x0, 0x21, 0xfd, 0x0, 0xfd, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x341a1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5d9070a2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x744e, &(0x7f0000000000)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESDEC], 0x15) 12.443537141s ago: executing program 1 (id=1800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000002d80)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xbb74, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002d40)=@any_dev={0x4, 0x508, 0x0, 0x0, 0x1000, 0xa37, r2, 0x0, 0x2}}}, &(0x7f0000002e00)) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010400030000000000000047ff1f398b7d8d", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d80180001800900020032093f03c90000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001780)=ANY=[@ANYBLOB="000000003cdaea2155908dedc6d3f544200ecdc85182ab9704a77acdd440c5719bc0b7e865bfe31e8092077b2120c05e3866dedbc9b71e901453a3b43977746c813999e788bdeac2e32bfdbe9c3d7d7e4e70573d2003402f35aada7d09", @ANYRES16=r6, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) r7 = syz_open_dev$sndctrl(&(0x7f0000001700), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, &(0x7f0000001740)=0x1000) syz_emit_ethernet(0x48, 0x0, 0x0) 12.328212851s ago: executing program 3 (id=1801): socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x1, 0x180) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) r4 = memfd_secret(0x80000) mlockall(0x7) r5 = getpid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES64=r4, @ANYRES16, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sched_setscheduler(r5, 0x1, &(0x7f0000000780)=0x5) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000007c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000840)={0x300}, 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0) syz_pidfd_open(r5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r10], 0x2c}}, 0x0) setns(0xc9, 0x0) socket(0x22, 0x6, 0x6) 10.314103353s ago: executing program 1 (id=1804): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000453b88400819151300000000000109022d00010000000009040000496bb22b000904", @ANYRESDEC], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x20101, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'pcl816\x00', [0x300, 0x7, 0x2c1f, 0xf9bd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 10.193655941s ago: executing program 0 (id=1805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000fc0)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0, &(0x7f00000010c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000074000000060a01040000010000000000020000000900010073797a30000000000900020073797a300000000048000480440001800c0001007061796c6f6164003400028008000540000000010800024000000002080003400000000008000440000000020800074000000008"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c000000000b050000007660bbad44da3c36004d080001007533320008000340ffffffff080002"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000000a80)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000ac0)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) r12 = syz_open_dev$radio(&(0x7f0000000bc0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x9b0905, 0x1000, '\x00', @string=&(0x7f0000000c80)=0xbb}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x44, r11, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) r15 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000cc0)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x1}}}, 0x84) ptrace(0x10, r15) ptrace$setregset(0x4205, r15, 0x1, &(0x7f0000000d80)={&(0x7f0000000dc0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) 10.057168609s ago: executing program 3 (id=1806): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000002d80)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xbb74, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002d40)=@any_dev={0x4, 0x508, 0x0, 0x0, 0x1000, 0xa37, r2, 0x0, 0x2}}}, &(0x7f0000002e00)) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010400030000000000000047ff1f398b7d8d", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d80180001800900020032093f03c90000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001780)=ANY=[@ANYBLOB="000000003cdaea2155908dedc6d3f544200ecdc85182ab9704a77acdd440c5719bc0b7e865bfe31e8092077b2120c05e3866dedbc9b71e901453a3b43977746c813999e788bdeac2e32bfdbe9c3d7d7e4e70573d2003402f35aada7d09", @ANYRES16=r6, @ANYBLOB="00032bbd7000fcdbdf25680000000c009900000100003c0000002200c70008030707ee0207000307400707070500070202070805ea2feb9d5e1298b500001e00c70004070700030402000606ec050405070704026a0328de27950de300003000c700020408030803c308100408070702ff070607050405050105000090000707530708010806960abb1c67ffd5522200c700090303040203f100fb06040107060905040408000806e0d1f6e302d83b6900002c00c70006020f030205700a050181050305270504013a060400630606060701c401fc037e3859e1d677e58a1e00c700050509070b05000208010104370100000e0568c4525019b9a3750000"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) r7 = syz_open_dev$sndctrl(&(0x7f0000001700), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, &(0x7f0000001740)=0x1000) syz_emit_ethernet(0x48, 0x0, 0x0) 9.726535522s ago: executing program 0 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f00000006c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x10c, 0x1, [@m_ctinfo={0xd0, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0xa3, 0x6, "e012483a9d130f943e11746590f2e7aa4b14d38477d4fcd11b0891f1e229ba0df4000e8834b3b2de197ad078c059141d12d743d88d57ce6d95f2173e6c302af7a24c6895b946935378feba16beb7b2497160790273267c6ca5bf1093aa52f6793ce74342930214bb2afcf401bd811b94a766fd76e27835354c78a19b71fa7eb66f08458f9ab8593823c62454b1f2bebd9e992983d125a0a430dba4c146e482"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x7}}}}, @m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) 9.434127011s ago: executing program 0 (id=1809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x40000000000032a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1, 0x2}, 0x1c) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd26, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) 9.43365435s ago: executing program 4 (id=1810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x70bd28, 0x25dfdbff, {0xa, 0x20, 0x0, 0x21, 0xfd, 0x0, 0xfd, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x341a1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5d9070a2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESDEC=r1], 0x15) 8.258336842s ago: executing program 0 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000580)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f00000005c0)='0\x00', 0x2) 8.189381784s ago: executing program 4 (id=1813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400030000000000000047ff1f398b7d8d", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d80180001800900020032093f03c90000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001780)=ANY=[@ANYBLOB="000000003cdaea2155908dedc6d3f544200ecdc85182ab9704a77acdd440c5719bc0b7e865bfe31e8092077b2120c05e3866dedbc9b71e901453a3b43977746c813999e788bdeac2e32bfdbe9c3d7d7e4e70573d2003402f35aada7d09", @ANYRES16=r3, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) r4 = syz_open_dev$sndctrl(&(0x7f0000001700), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f0000001740)=0x1000) 8.107117973s ago: executing program 0 (id=1815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000002d80)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xbb74, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002d40)=@any_dev={0x4, 0x508, 0x0, 0x0, 0x1000, 0xa37, r2, 0x0, 0x2}}}, &(0x7f0000002e00)) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010400030000000000000047ff1f398b7d8d", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d80180001800900020032093f03c90000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001780)=ANY=[@ANYBLOB="000000003cdaea2155908dedc6d3f544200ecdc85182ab9704a77acdd440c5719bc0b7e865bfe31e8092077b2120c05e3866dedbc9b71e901453a3b43977746c813999e788bdeac2e32bfdbe9c3d7d7e4e70573d2003402f35aada7d09", @ANYRES16=r6, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) r7 = syz_open_dev$sndctrl(&(0x7f0000001700), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0b45545, &(0x7f0000001740)=0x1000) syz_emit_ethernet(0x48, 0x0, 0x0) 8.100465102s ago: executing program 3 (id=1816): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6e9d, &(0x7f0000000800)={0x0, 0xc89e, 0x8000, 0x4, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000a40), &(0x7f0000000a80)=0x30) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0) mkdir(&(0x7f0000000b80)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000d00)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000d40)='./file0\x00', 0x0, 0x20, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000d80)={0x0, 0x5, 0x7, '\x00', &(0x7f0000000dc0)=0x9}) openat(r4, &(0x7f0000000e00)='./file1\x00', 0x365443, 0x2f) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7000ffdbdf255200000008000300", @ANYRES32=0x0, @ANYBLOB="54002a00030130831f008a03080211000001000100000900000003000000080211000000f8ffffff3c040007b8028c18380b40791b1c4418f454278e6e50a4c8594c838ec602abf5060205007206030303030303eda0698d1b0eb19e3834683e2c154ea120435a224d35805cf6939b3e07dd4b075de857ab6453ab16f99b5260783e30637cd9b9e8bb737755506c0339adcdb58342bfa64e9b05c6a7000c6de233ef2edbb0d8af202d76fe308748beb341024bebde2e4c3ada1d704bc5a06ea897f94a2e11f572d51d08cd935ff59c231da80bf8185ca1ac12aea9c721bb287a6f4456d1287d6e2de524"], 0x70}, 0x1, 0x0, 0x0, 0x64000080}, 0x40000) 7.063527194s ago: executing program 4 (id=1817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="4a00000011007f0314066f9a70eaa1490675bc58080600", 0x17) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000000900)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019900)=0x7) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019940)={&(0x7f0000019980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000019a40)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0xe, 0x0, &(0x7f00000004c0)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 4.403048923s ago: executing program 4 (id=1818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000a40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000b80)=0x2) recvmmsg(r2, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000cc0)={@remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/anycast6\x00') read$midi(r4, &(0x7f0000000dc0)=""/70, 0xffffffd8) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) 4.393518858s ago: executing program 1 (id=1819): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0x8080) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000005c0)="520003000100b8", 0x7) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x4000010, r1, 0x85cb7000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa8685ed8be92b725) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000400), 0x9d, 0x400000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x2, 0x10000}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={r4, 0x6}, 0x8) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000540), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000640)=@filename='mtd0\x00', &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESHEX], 0x0) 3.962553087s ago: executing program 3 (id=1821): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000100)="7a1fbe9e57d90e6cd6a2e96c295a29c22b0e69e04c65eb", 0x0}, 0x20) syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f202000006000009"], 0x0) 3.039751838s ago: executing program 2 (id=1822): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x67) r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x38, 0x20000800, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x300, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 3.025029419s ago: executing program 0 (id=1823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x158}}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r3) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000090) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x4805) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000500)=0x10, 0x4) bind$xdp(r5, &(0x7f0000000580)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100d000, 0x800, 0x1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.898825578s ago: executing program 2 (id=1824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv6_newroute={0x1c, 0x18, 0x9, 0x70bd28, 0x25dfdbff, {0xa, 0x20, 0x0, 0x21, 0xfd, 0x0, 0xfd, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040044) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x341a1}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5d9070a2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESDEC=r1], 0x15) 2.857088816s ago: executing program 2 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000580)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f00000005c0)='0\x00', 0x2) (fail_nth: 2) 2.746657033s ago: executing program 2 (id=1826): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0xfeff, 0x1, 0x0, &(0x7f0000000680)) 2.666874498s ago: executing program 2 (id=1827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x11c0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400030000000000000047ff1f398b7d8d", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d80180001800900020032093f03c90000000500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001780)=ANY=[@ANYBLOB="000000003cdaea2155908dedc6d3f544200ecdc85182ab9704a77acdd440c5719bc0b7e865bfe31e8092077b2120c05e3866dedbc9b71e901453a3b43977746c813999e788bdeac2e32bfdbe9c3d7d7e4e70573d2003402f35aada7d09", @ANYRES16=r3, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004001) r4 = syz_open_dev$sndctrl(&(0x7f0000001700), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f0000001740)=0x1000) 2.622257742s ago: executing program 4 (id=1828): socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x141102) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000640)) pselect6(0x40, &(0x7f00000006c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 1.497906379s ago: executing program 2 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x4006, 0x5, 0x7, 0x7ffc0001}]}) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='100', 0x3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="be38", 0xffdf}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000a80)={'\x00', 0x5, 0x4, 0x7, 0x100, 0xfa, 0x0}) r7 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f0000001f80), 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000001fc0)=0x6) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002000)={0x750d, 0x2, {0xffffffffffffffff}, {0xee01}, 0x6, 0xc886}) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000600)={0x1d8, 0x35, 0x10, 0x70bd2c, 0x25dfdbff, "", [@generic="815b1c9c4cd07851cd76d83fa083c877af440ff73327", @nested={0x1a8, 0x166, 0x0, 0x1, [@nested={0x4, 0x120}, @generic="b227aacb385a9aad62c67383f22dcef3a26fc90ace84deb563c4c4183a567d3b5becf5e1a93ddceeb33270722c021c7916ce7f0172150a63e8c37d46f42c4d4074346dc3dc6af67c0a945c86be032718647b263ae40c685d00f2f8dfc8bd19ad2224118db55182d89ec99aaf4e3d9d00ae7facce2bd0b44334d50dde5f4520ba2cf3a13e8dcc71d5b7b1280af8bf8e8b9485b78f36cf280ea32f1631139488a34d628cd648076fce3b1ecf136e15437a276daafabe3eb60b31b601b8e850171c98877e3f827ca07f1f29035e8d8ed5827f6c91b737f13c85f54487a8", @generic="18d09ed2975c6dc726a89e0b0041f988bd4163655ef905d4c3c5bdf787d0a28a79e419b914ba14ccfa36075d83b1c316768e1b0f066e577d2ab02e66205dc9ca2294527d1ce2bb79eb667ccd3889980f6c9a10d505acd21ed88785bcc8392d014ef16ddba025685b9b0587411b895d1fda0dd51aa9e442a34274600edf846f1f16bd333c0984d2ccc753a4", @nested={0x4, 0x2b}, @generic="c7bfcfce061b824a150abbde67fe815f278175986a16dba116d7bbd75e254d7c7fdb4efda276b29904", @typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xdd}]}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1d8}, {&(0x7f0000004100)={0x2f4, 0x3b, 0x200, 0x70bd26, 0x25dfdbfb, "", [@nested={0x10f, 0xf9, 0x0, 0x1, [@generic="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", @nested={0x4, 0x12a}, @typed={0x7, 0x12, 0x0, 0x0, @str=']\\\x00'}, @typed={0x4, 0x162}]}, @generic="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"]}, 0x2f4}, {&(0x7f0000000a40)={0x10, 0x25, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000000b00)={0x1424, 0x34, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1de, 0x4b, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @u32=0x7fff}, @typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}, @typed={0xe, 0x14e, 0x0, 0x0, @str='/dev/ptp0\x00'}, @generic="124fa2e98c6dae9a8dd13313a967ac7d248940e28bb9f3e2e6736826ca2222ab8d883a106fc881a22aee21f4c6390683db29b02dc21fc90c85f67710b3f7fd74ed1223a00f52aae49f534657b3d948294ce98fd53fb4c2a8cb55b179183f2718ce5cbe05007cd29b42f787e9d9d481860734a62aa58fee1f08ba4fbd4621b3a89bf15578fb55130d333d829ab6e71643b08b7aed279af9f886a979e5a8d215d6d0321d1b454ec60c451520", @nested={0x18, 0x27, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}]}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@local}, @generic="90c3db19b88b0c981acd93cfd7032c6ef2d9fbde469a35916f4fa33cacd53ccba8986c8a1e5ff7ffffffffffffff1c7a3647dac554e1ad7af8042fff4c98d120bf3566552ced", @generic="9b64748b87a8d82f0becf921859c3db4908e89f0189b7b450d9306116fb6196108e2aa2d6f592d082f2008fbdbe0e2c9f10b838889247371f8c4fe6876d3f5c4a3ab2f07093cd390716aeccc578e7bf8401f90311f01ff003ab62fa4075bd53068b2079dea2c4bb1831364e6b24457a6d7101e698d35ce4b7b18ea87414c7ce6b39cc896c9eefd6622d57314ed77c9fd120858a3af31d1c8df73ca20175ffdc448"]}, @generic="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", @nested={0x186, 0x108, 0x0, 0x1, [@generic="9c4da31684569ef575eb258e08450a7d2d02573071e1dbc1404e2d8282b6d24c0daaa5e216010fcbc890b7bb62234f1b662be267e0ee9b0e372043fc064d03966f3ada57a795d97c59e6324d09e8f26151d563e09422c0eb1d8b4bab595701eaf7aa9e0d4c8f5444ca9ef0b1b69f114af8d06bf322aaf9bc2313be153bc820128421bbe3ccab1b30168854469b89d6b474b022c8ab41be92a1ff527b9576173c810e492686b8d895f3c04a3f03156c271e9e1cb6bc5b62a9af26ffea0babb4810d22", @generic="347a6cb03c", @generic="f261c76589ac93543f31da9960e35e193baf37d69ef504a0e0479a89e9917e6167f37f5b24fbefa23c875847fe7ce662451e3b0f1e87ab723af75cc2943e6005e1cf", @generic="f068c38b9b4eea178f66b1c98a29988787e63d1e98e88de1f66ab5c8226e5946fbd60bfcd8bac252805e48e1e1c40b62ad4ab64a8e60ea84cb009a202593aa097617af3fb6bd7fe22984c77de61209e369c994253c2dba5f42565b9206998a1451aeaa9029955643681c4fa4881bf12bb01d8d83e13480dd4c"]}, @nested={0x10, 0xa0, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x7}]}, @generic="d9ddff066d3901dcb972a74cdb27b7556360df32345663f95f7cf3c6e20f7c5f04b69488ff98b9bd6d4505fd2af80cca5f110914698ed4f5ea74082d078d8619f30ee705f8789aaf59baceeb672265e4a042ecae26e714f36badf68b3e99e529c28a91abb624b21313c6db21f6044a3791ed026cc54de2c2e04d20fa6e4d342ba8a57132c9d2fb13156113dbab6fe67c7ce7e1c50c2edf13432ff7"]}, 0x1424}], 0x4, &(0x7f0000004080)=[@rights={{0x20, 0x1, 0x1, [r2, r7, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x24048044}, 0x0) close_range(r2, r2, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r11 = gettid() syz_open_procfs(r11, &(0x7f0000000580)='timerslack_ns\x00') 42.428161ms ago: executing program 3 (id=1830): socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x1, 0x180) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) r4 = memfd_secret(0x80000) mlockall(0x7) r5 = getpid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES64=r4, @ANYRES16, @ANYRESHEX=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sched_setscheduler(r5, 0x1, &(0x7f0000000780)=0x5) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000007c0)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000840)={0x300}, 0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0) syz_pidfd_open(r5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r10], 0x2c}}, 0x0) setns(0xc9, 0x0) socket(0x22, 0x6, 0x6) 27.63366ms ago: executing program 4 (id=1831): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0xe, 0x2f, 0x4, @dev={0xac, 0x14, 0x14, 0x25}, @remote}}}}}}, 0x0) (fail_nth: 6) 0s ago: executing program 1 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0x336a, &(0x7f00000002c0)={0x0, 0xf962, 0x100, 0x2, 0x35}, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000340), 0xa88, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000700), 0x2, 0x141102) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000800)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000840)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): has an invalid interface number: 142 but max is 2 [ 896.658889][T11359] usb 5-1: config 74 has an invalid interface number: 72 but max is 2 [ 896.658900][T11359] usb 5-1: config 74 has an invalid interface number: 97 but max is 2 [ 896.658915][T11359] usb 5-1: config 74 has no interface number 0 [ 896.658924][T11359] usb 5-1: config 74 has no interface number 1 [ 896.658933][T11359] usb 5-1: config 74 has no interface number 2 [ 896.658960][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 896.658983][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 896.659005][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 896.659028][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 896.659051][T11359] usb 5-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 896.659069][T11359] usb 5-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 896.659081][T11359] usb 5-1: config 74 interface 142 has no altsetting 0 [ 896.659090][T11359] usb 5-1: config 74 interface 72 has no altsetting 0 [ 896.659100][T11359] usb 5-1: config 74 interface 97 has no altsetting 0 [ 897.243807][T11786] FAULT_INJECTION: forcing a failure. [ 897.243807][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 897.243830][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.3.1417 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.243845][T11786] Tainted: [L]=SOFTLOCKUP [ 897.243849][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 897.243856][T11786] Call Trace: [ 897.243859][T11786] [ 897.243864][T11786] dump_stack_lvl+0x100/0x190 [ 897.243884][T11786] should_fail_ex.cold+0x5/0xa [ 897.243900][T11786] should_failslab+0xc2/0x120 [ 897.243916][T11786] __kmalloc_cache_noprof+0x91/0x6d0 [ 897.243931][T11786] ? __inet_diag_dump_start+0x8e/0x8f0 [ 897.243946][T11786] __inet_diag_dump_start+0x8e/0x8f0 [ 897.243962][T11786] __netlink_dump_start+0x60e/0x990 [ 897.243981][T11786] inet_diag_rcv_msg_compat+0x275/0x2d0 [ 897.244000][T11786] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 897.244013][T11786] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 897.244025][T11786] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 897.244037][T11786] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 897.244049][T11786] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 897.244060][T11786] ? sock_diag_rcv_msg+0x33d/0x7a0 [ 897.244073][T11786] sock_diag_rcv_msg+0x375/0x7a0 [ 897.244085][T11786] netlink_rcv_skb+0x159/0x420 [ 897.244102][T11786] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 897.244114][T11786] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 897.244135][T11786] ? netlink_deliver_tap+0x1ae/0xcc0 [ 897.244154][T11786] netlink_unicast+0x585/0x850 [ 897.244173][T11786] ? __pfx_netlink_unicast+0x10/0x10 [ 897.244194][T11786] netlink_sendmsg+0x8b0/0xda0 [ 897.244213][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.244232][T11786] ? selinux_socket_sendmsg+0x198/0x2f0 [ 897.244250][T11786] ____sys_sendmsg+0xa4d/0xbe0 [ 897.244263][T11786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.244281][T11786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.244298][T11786] ? lock_acquire+0x1d1/0x380 [ 897.244310][T11786] ? get_pid_task+0x2a/0x250 [ 897.244327][T11786] ___sys_sendmsg+0x190/0x1e0 [ 897.244342][T11786] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.244357][T11786] ? get_pid_task+0x106/0x250 [ 897.244377][T11786] ? find_held_lock+0x2b/0x80 [ 897.244402][T11786] __sys_sendmsg+0x160/0x210 [ 897.244414][T11786] ? __pfx___sys_sendmsg+0x10/0x10 [ 897.244433][T11786] do_syscall_64+0x123/0x790 [ 897.244450][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.244462][T11786] RIP: 0033:0x7fee8f79e2d9 [ 897.244471][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.244482][T11786] RSP: 002b:00007fee905fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.244495][T11786] RAX: ffffffffffffffda RBX: 00007fee8fa25fa0 RCX: 00007fee8f79e2d9 [ 897.244503][T11786] RDX: 0000000004044804 RSI: 0000200000001100 RDI: 0000000000000004 [ 897.244509][T11786] RBP: 00007fee905fd090 R08: 0000000000000000 R09: 0000000000000000 [ 897.244516][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.244522][T11786] R13: 00007fee8fa26038 R14: 00007fee8fa25fa0 R15: 00007fff95bbf6b8 [ 897.244536][T11786] [ 898.696133][T11359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.728122][T11359] usb 5-1: can't set config #74, error -71 [ 898.744505][T11359] usb 5-1: USB disconnect, device number 29 [ 898.870776][ T31] audit: type=1400 audit(1791926670.833:428): avc: denied { allowed } for pid=11792 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 899.497297][T11807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.969929][ T31] audit: type=1400 audit(1791926674.933:429): avc: denied { mounton } for pid=11835 comm="syz.3.1429" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 903.055580][T11836] FAT-fs (nullb0): bogus number of reserved sectors [ 903.055600][T11836] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 903.064106][T11837] FAT-fs (nullb0): bogus number of reserved sectors [ 903.064122][T11837] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 903.916152][T11842] syzkaller0: entered promiscuous mode [ 903.916168][T11842] syzkaller0: entered allmulticast mode [ 903.940573][T11842] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 904.133832][T11833] program syz.2.1421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 904.153252][ T5703] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 905.238792][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 905.238834][ T5703] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 905.240222][ T5703] usb 5-1: config 74 has an invalid interface number: 142 but max is 2 [ 905.240245][ T5703] usb 5-1: config 74 has an invalid interface number: 72 but max is 2 [ 905.240263][ T5703] usb 5-1: config 74 has an invalid interface number: 97 but max is 2 [ 905.240280][ T5703] usb 5-1: config 74 has no interface number 0 [ 905.240295][ T5703] usb 5-1: config 74 has no interface number 1 [ 905.240309][ T5703] usb 5-1: config 74 has no interface number 2 [ 905.240345][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 905.240359][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 905.240371][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 905.240391][ T5703] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 905.240409][ T5703] usb 5-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 905.240427][ T5703] usb 5-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 905.240439][ T5703] usb 5-1: config 74 interface 142 has no altsetting 0 [ 905.240449][ T5703] usb 5-1: config 74 interface 72 has no altsetting 0 [ 905.240458][ T5703] usb 5-1: config 74 interface 97 has no altsetting 0 [ 906.242055][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.301276][ T5703] usb 5-1: can't set config #74, error -71 [ 906.316617][ T5703] usb 5-1: USB disconnect, device number 30 [ 907.142985][ T31] audit: type=1400 audit(1791926679.103:430): avc: denied { write } for pid=11864 comm="syz.0.1430" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 908.346927][T11876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1441'. [ 908.580529][ T5703] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 908.724783][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 908.725406][ T5703] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 908.726403][ T5703] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 908.726423][ T5703] usb 1-1: config 0 has no interface number 0 [ 908.728457][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.728477][ T5703] usb 1-1: Product: syz [ 908.728490][ T5703] usb 1-1: Manufacturer: syz [ 908.728504][ T5703] usb 1-1: SerialNumber: syz [ 908.770427][T11359] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 908.796031][ T5703] usb 1-1: config 0 descriptor?? [ 908.879708][T11883] FAULT_INJECTION: forcing a failure. [ 908.879708][T11883] name failslab, interval 1, probability 0, space 0, times 0 [ 908.879741][T11883] CPU: 0 UID: 0 PID: 11883 Comm: syz.1.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.879769][T11883] Tainted: [L]=SOFTLOCKUP [ 908.879777][T11883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 908.879790][T11883] Call Trace: [ 908.879797][T11883] [ 908.879805][T11883] dump_stack_lvl+0x100/0x190 [ 908.879841][T11883] should_fail_ex.cold+0x5/0xa [ 908.879869][T11883] should_failslab+0xc2/0x120 [ 908.879899][T11883] __kmalloc_cache_noprof+0x91/0x6d0 [ 908.879919][T11883] ? __lock_acquire+0x5c0/0x1f40 [ 908.879941][T11883] ? snd_timer_instance_new+0x47/0x350 [ 908.879968][T11883] snd_timer_instance_new+0x47/0x350 [ 908.879990][T11883] snd_seq_timer_open+0x1d4/0x5c0 [ 908.880021][T11883] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 908.880049][T11883] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 908.880082][T11883] ? mark_held_locks+0x40/0x70 [ 908.880104][T11883] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 908.880134][T11883] queue_use+0xdc/0x1f0 [ 908.880159][T11883] snd_seq_queue_alloc+0x2e5/0x540 [ 908.880186][T11883] snd_seq_ioctl_create_queue+0xa9/0x370 [ 908.880219][T11883] call_seq_client_ctl+0xa3/0x130 [ 908.880251][T11883] snd_seq_kernel_client_ctl+0x35/0x50 [ 908.880271][T11883] alloc_seq_queue+0xdb/0x180 [ 908.880291][T11883] ? __pfx_alloc_seq_queue+0x10/0x10 [ 908.880332][T11883] ? find_held_lock+0x2b/0x80 [ 908.880367][T11883] ? mark_held_locks+0x40/0x70 [ 908.880395][T11883] snd_seq_oss_open+0x2b2/0xa10 [ 908.880423][T11883] odev_open+0x6f/0x90 [ 908.880441][T11883] ? __pfx_odev_open+0x10/0x10 [ 908.880460][T11883] soundcore_open+0x2e3/0x5a0 [ 908.880483][T11883] ? __pfx_soundcore_open+0x10/0x10 [ 908.880501][T11883] chrdev_open+0x234/0x6a0 [ 908.880526][T11883] ? __pfx_chrdev_open+0x10/0x10 [ 908.880551][T11883] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 908.880574][T11883] do_dentry_open+0x6ab/0x14d0 [ 908.880595][T11883] ? __pfx_chrdev_open+0x10/0x10 [ 908.880626][T11883] vfs_open+0x82/0x3f0 [ 908.880657][T11883] path_openat+0x19fa/0x2440 [ 908.880689][T11883] ? __pfx_path_openat+0x10/0x10 [ 908.880726][T11883] do_file_open+0x20e/0x430 [ 908.880756][T11883] ? __pfx_do_file_open+0x10/0x10 [ 908.880805][T11883] ? _raw_spin_unlock+0x28/0x50 [ 908.880829][T11883] ? alloc_fd+0x471/0x7a0 [ 908.880867][T11883] do_sys_openat2+0x10f/0x1e0 [ 908.880888][T11883] ? __pfx_do_sys_openat2+0x10/0x10 [ 908.880918][T11883] __x64_sys_openat+0x12d/0x210 [ 908.880939][T11883] ? __pfx___x64_sys_openat+0x10/0x10 [ 908.880971][T11883] do_syscall_64+0x123/0x790 [ 908.881000][T11883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.881020][T11883] RIP: 0033:0x7f50fc39e2d9 [ 908.881037][T11883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.881055][T11883] RSP: 002b:00007f50fd20c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 908.881074][T11883] RAX: ffffffffffffffda RBX: 00007f50fc625fa0 RCX: 00007f50fc39e2d9 [ 908.881086][T11883] RDX: 0000000000080200 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 908.881098][T11883] RBP: 00007f50fc435888 R08: 0000000000000000 R09: 0000000000000000 [ 908.881109][T11883] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000000 [ 908.881121][T11883] R13: 00007f50fc626038 R14: 00007f50fc625fa0 R15: 00007ffcad6395e8 [ 908.881148][T11883] [ 909.537722][T11359] usb 3-1: Using ep0 maxpacket: 8 [ 909.538322][T11359] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 909.551139][T11359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.934609][T11359] pvrusb2: Hardware description: Terratec Grabster AV400 [ 909.934627][T11359] pvrusb2: ********** [ 909.934632][T11359] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 909.934648][T11359] pvrusb2: Important functionality might not be entirely working. [ 909.934656][T11359] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 909.934664][T11359] pvrusb2: ********** [ 909.937892][ T2356] pvrusb2: Invalid write control endpoint [ 911.166646][ T5703] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 911.166706][ T5703] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 911.211400][ T5703] usb 1-1: USB disconnect, device number 42 [ 912.192752][ T5710] usb 3-1: USB disconnect, device number 41 [ 912.325743][ T2356] pvrusb2: Invalid write control endpoint [ 912.325758][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 912.325766][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 912.325773][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 912.325781][ T2356] pvrusb2: Device being rendered inoperable [ 912.340132][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 912.340216][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 912.366510][ T2356] pvrusb2: Attached sub-driver cx25840 [ 912.366525][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 912.366532][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 913.583128][ T5703] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 914.175573][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 914.175615][ T5703] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 914.177683][ T5703] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 914.177706][ T5703] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 914.177725][ T5703] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 914.177742][ T5703] usb 2-1: config 74 has no interface number 0 [ 914.177757][ T5703] usb 2-1: config 74 has no interface number 1 [ 914.177772][ T5703] usb 2-1: config 74 has no interface number 2 [ 914.177822][ T5703] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 914.177845][ T5703] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 914.177868][ T5703] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 914.177891][ T5703] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 914.177920][ T5703] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 914.177950][ T5703] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 914.177969][ T5703] usb 2-1: config 74 interface 142 has no altsetting 0 [ 914.177985][ T5703] usb 2-1: config 74 interface 72 has no altsetting 0 [ 914.178000][ T5703] usb 2-1: config 74 interface 97 has no altsetting 0 [ 914.698423][T11916] FAULT_INJECTION: forcing a failure. [ 914.698423][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.698480][T11916] CPU: 1 UID: 0 PID: 11916 Comm: syz.2.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.698505][T11916] Tainted: [L]=SOFTLOCKUP [ 914.698512][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 914.698523][T11916] Call Trace: [ 914.698529][T11916] [ 914.698536][T11916] dump_stack_lvl+0x100/0x190 [ 914.698568][T11916] should_fail_ex.cold+0x5/0xa [ 914.698596][T11916] _copy_from_user+0x2e/0xd0 [ 914.698624][T11916] restore_sigcontext+0xcd/0x6a0 [ 914.698651][T11916] ? __pfx_restore_sigcontext+0x10/0x10 [ 914.698695][T11916] ? __pfx_restore_altstack+0x10/0x10 [ 914.698723][T11916] ? _raw_spin_unlock_irq+0x23/0x50 [ 914.698746][T11916] ? lockdep_hardirqs_on+0x7d/0x110 [ 914.698775][T11916] __do_sys_rt_sigreturn+0x229/0x2c0 [ 914.698804][T11916] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 914.698839][T11916] do_syscall_64+0x123/0x790 [ 914.698867][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.698887][T11916] RIP: 0033:0x7fcdde93f659 [ 914.698902][T11916] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 914.698920][T11916] RSP: 002b:00007fcddcbf5340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 914.698938][T11916] RAX: ffffffffffffffda RBX: 00007fcddec25fa0 RCX: 00007fcdde93f659 [ 914.698950][T11916] RDX: 00007fcddcbf5340 RSI: 00007fcddcbf5470 RDI: 0000000000000021 [ 914.698961][T11916] RBP: 00007fcddcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 914.698972][T11916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 914.698982][T11916] R13: 00007fcddec26038 R14: 00007fcddec25fa0 R15: 00007fff7abb96e8 [ 914.699007][T11916] [ 915.524498][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.532599][ T5703] usb 2-1: can't set config #74, error -71 [ 915.631252][ T5703] usb 2-1: USB disconnect, device number 48 [ 916.383009][ T5703] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 916.537594][ T5703] usb 5-1: No LPM exit latency info found, disabling LPM. [ 916.537839][ T5703] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 916.540676][ T5703] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 916.540832][ T5703] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 916.594756][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 916.596135][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.742254][ T5703] usb 5-1: low speed audio streaming not supported [ 916.742279][ T5703] usb 5-1: low speed audio streaming not supported [ 919.049668][ T5703] usb 5-1: USB disconnect, device number 31 [ 919.164899][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 923.581728][T11359] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 923.748900][T11359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 923.748944][T11359] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 923.750518][T11359] usb 1-1: config 74 has an invalid interface number: 142 but max is 2 [ 923.750544][T11359] usb 1-1: config 74 has an invalid interface number: 72 but max is 2 [ 923.750564][T11359] usb 1-1: config 74 has an invalid interface number: 97 but max is 2 [ 923.750581][T11359] usb 1-1: config 74 has no interface number 0 [ 923.750596][T11359] usb 1-1: config 74 has no interface number 1 [ 923.750609][T11359] usb 1-1: config 74 has no interface number 2 [ 923.750655][T11359] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 923.750677][T11359] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 923.750699][T11359] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 923.750723][T11359] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 923.750753][T11359] usb 1-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 923.750783][T11359] usb 1-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 923.750803][T11359] usb 1-1: config 74 interface 142 has no altsetting 0 [ 923.750818][T11359] usb 1-1: config 74 interface 72 has no altsetting 0 [ 923.750838][T11359] usb 1-1: config 74 interface 97 has no altsetting 0 [ 924.494125][T11359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.614888][T11359] usb 1-1: can't set config #74, error -71 [ 924.664042][T11359] usb 1-1: USB disconnect, device number 43 [ 925.966306][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.966357][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.628192][T11995] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 926.629531][T11995] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1471'. [ 926.632304][T11995] netlink: 'syz.3.1471': attribute type 7 has an invalid length. [ 926.641020][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 926.641038][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 926.643037][ T5703] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 926.793276][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 926.795411][ T5703] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 926.801674][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.801698][ T5703] usb 2-1: Product: syz [ 926.801712][ T5703] usb 2-1: Manufacturer: syz [ 926.801726][ T5703] usb 2-1: SerialNumber: syz [ 926.859032][ T5703] empeg 2-1:1.0: empeg converter detected [ 927.023012][ T5701] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 927.063300][ T5703] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 927.183199][ T5703] usb 2-1: USB disconnect, device number 49 [ 927.580135][ T31] audit: type=1400 audit(1791926699.543:431): avc: denied { bind } for pid=12004 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 927.580848][ T31] audit: type=1400 audit(1791926699.543:432): avc: denied { setopt } for pid=12004 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 927.581841][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 927.611997][ T31] audit: type=1400 audit(1791926699.573:433): avc: denied { cmd } for pid=12004 comm="iou-wrk-12005" path="socket:[35912]" dev="sockfs" ino=35912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 927.664244][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 927.665256][ T5701] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 927.666286][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.666321][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.715860][ T5701] usb 4-1: config 0 descriptor?? [ 928.142099][ T5701] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 928.477371][ T5703] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 929.300878][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 929.301396][ T5703] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 929.319225][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.319249][ T5703] usb 1-1: Product: syz [ 929.319258][ T5703] usb 1-1: Manufacturer: syz [ 929.319271][ T5703] usb 1-1: SerialNumber: syz [ 929.321451][ T5703] usb 1-1: config 0 descriptor?? [ 929.673006][ T5701] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 929.804369][ T5703] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 929.824636][T11359] usb 4-1: USB disconnect, device number 43 [ 930.136236][ T5701] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 930.315076][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.363755][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.389671][ T5703] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 930.389891][ T5703] usb 1-1: media controller created [ 930.452998][T12034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1576 sclass=netlink_route_socket pid=12034 comm=syz.0.1467 [ 930.560343][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 930.560520][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 930.672294][ T5701] usb 5-1: config 0 descriptor?? [ 930.700476][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 930.749104][T12034] ip6gretap0: entered promiscuous mode [ 930.784317][T12034] syz_tun: entered promiscuous mode [ 931.838879][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.839290][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.858930][ T5701] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 931.951977][ T5703] zl10353_read_register: readreg error (reg=127, ret==0) [ 931.952034][ T5703] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 931.952046][ T5703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 931.983918][ T5703] usb 1-1: USB disconnect, device number 44 [ 932.015481][ T5703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 932.070657][ T5701] [drm:udl_init] *ERROR* Selecting channel failed [ 932.117016][ T5701] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 932.117041][ T5701] [drm] Initialized udl on minor 1 [ 932.123977][ T5701] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 932.124261][ T5701] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 932.136999][ T5701] usb 5-1: USB disconnect, device number 32 [ 932.156963][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 932.157346][ T5736] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 933.868574][ T31] audit: type=1400 audit(1791926705.833:434): avc: denied { nlmsg_read } for pid=12053 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 934.038982][T12055] xt_hashlimit: size too large, truncated to 1048576 [ 934.039063][T12055] xt_hashlimit: max too large, truncated to 1048576 [ 934.040608][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.571579][T12075] FAULT_INJECTION: forcing a failure. [ 936.571579][T12075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.571613][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.0.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.571639][T12075] Tainted: [L]=SOFTLOCKUP [ 936.571645][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 936.571656][T12075] Call Trace: [ 936.571663][T12075] [ 936.571670][T12075] dump_stack_lvl+0x100/0x190 [ 936.571705][T12075] should_fail_ex.cold+0x5/0xa [ 936.571730][T12075] _copy_to_user+0x32/0xd0 [ 936.571755][T12075] simple_read_from_buffer+0xcb/0x170 [ 936.571782][T12075] proc_fail_nth_read+0x1af/0x230 [ 936.571810][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.571839][T12075] ? rw_verify_area+0xce/0x6d0 [ 936.571859][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 936.571885][T12075] vfs_read+0x1e4/0xb40 [ 936.571913][T12075] ? lock_acquire+0x1d1/0x380 [ 936.571934][T12075] ? __fget_files+0x34/0x3d0 [ 936.571959][T12075] ? __pfx_vfs_read+0x10/0x10 [ 936.571979][T12075] ? find_held_lock+0x2b/0x80 [ 936.572005][T12075] ? __fget_files+0x215/0x3d0 [ 936.572034][T12075] ? __fget_files+0x21f/0x3d0 [ 936.572066][T12075] ksys_read+0x12a/0x250 [ 936.572088][T12075] ? __pfx_ksys_read+0x10/0x10 [ 936.572118][T12075] do_syscall_64+0x123/0x790 [ 936.572148][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.572166][T12075] RIP: 0033:0x7f022895eb0e [ 936.572182][T12075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 936.572199][T12075] RSP: 002b:00007f0229874fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 936.572217][T12075] RAX: ffffffffffffffda RBX: 00007f02298756c0 RCX: 00007f022895eb0e [ 936.572229][T12075] RDX: 000000000000000f RSI: 00007f02298750a0 RDI: 0000000000000004 [ 936.572240][T12075] RBP: 00007f0229875090 R08: 0000000000000000 R09: 0000000000000000 [ 936.572251][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.572261][T12075] R13: 00007f0228c26038 R14: 00007f0228c25fa0 R15: 00007fffc8a6ec08 [ 936.572287][T12075] [ 936.623302][ T31] audit: type=1400 audit(1791926708.583:435): avc: denied { associate } for pid=12077 comm="syz.1.1482" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 939.445884][T12076] program syz.3.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.813407][ T5701] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 941.016380][ T5701] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 941.017717][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.048862][ T5701] usb 5-1: config 0 descriptor?? [ 942.190802][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.191142][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.211720][ T5701] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 942.437131][ T5701] [drm:udl_init] *ERROR* Selecting channel failed [ 942.464711][ T5701] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 942.464744][ T5701] [drm] Initialized udl on minor 1 [ 942.465794][ T5701] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.466102][ T5701] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 942.471256][ T9301] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.472006][ T9301] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 942.472162][ T9301] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 942.525459][ T5701] usb 5-1: USB disconnect, device number 33 [ 943.819779][T12139] virtio-fs: tag not found [ 943.832025][ T31] audit: type=1400 audit(1791926715.793:436): avc: denied { execute } for pid=12141 comm="syz.0.1505" dev="hugetlbfs" ino=36153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 943.832495][T12142] process 'syz.0.1505' launched '/dev/fd/5' with NULL argv: empty string added [ 943.832745][ T31] audit: type=1400 audit(1791926715.793:437): avc: denied { execute_no_trans } for pid=12141 comm="syz.0.1505" path=2F6D656D66643A2D42D54E343A29202864656C6574656429 dev="hugetlbfs" ino=36153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 943.916085][ T31] audit: type=1400 audit(1791926715.883:438): avc: denied { setopt } for pid=12141 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 944.947874][T12162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1509'. [ 945.153456][ T5703] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 945.177682][ T31] audit: type=1400 audit(1791926717.143:439): avc: denied { mount } for pid=12168 comm="syz.1.1512" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 945.179720][ T31] audit: type=1400 audit(1791926717.143:440): avc: denied { write } for pid=12168 comm="syz.1.1512" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 945.207270][ T31] audit: type=1400 audit(1791926717.153:441): avc: denied { call } for pid=12168 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 945.329416][ T31] audit: type=1400 audit(1791926717.293:442): avc: denied { sqpoll } for pid=12168 comm="syz.1.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 945.393082][ T9301] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 945.712968][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 945.714768][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 945.714792][ T5703] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=89.bd [ 945.715645][ T5703] usb 1-1: config 4 has an invalid interface number: 219 but max is 0 [ 945.715660][ T5703] usb 1-1: config 4 has no interface number 0 [ 945.715678][ T5703] usb 1-1: config 4 interface 219 has no altsetting 0 [ 945.717350][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.717364][ T5703] usb 1-1: Product: syz [ 945.717372][ T5703] usb 1-1: Manufacturer: syz [ 945.717380][ T5703] usb 1-1: SerialNumber: syz [ 945.803710][ T9301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 945.804953][ T9301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 945.807833][ T9301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 945.807854][ T9301] usb 5-1: SerialNumber: syz [ 946.670268][ T31] audit: type=1400 audit(1791926718.573:443): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 946.836147][ T31] audit: type=1400 audit(1791926718.803:444): avc: denied { read } for pid=12159 comm="syz.0.1508" name="nullb" dev="configfs" ino=3448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 946.836189][ T31] audit: type=1400 audit(1791926718.803:445): avc: denied { read open } for pid=12159 comm="syz.0.1508" path="/290/my_configfs/nullb" dev="configfs" ino=3448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 948.116643][T11359] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 948.134558][ T9301] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 948.146793][ T9301] usb 5-1: USB disconnect, device number 34 [ 949.024306][T11359] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 949.025270][T11359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.060587][T11359] usb 4-1: config 0 descriptor?? [ 949.397606][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.398032][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.440857][T11359] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 949.522925][ T5703] ttusb_dec_send_command: command bulk message failed: error -22 [ 949.524736][ T5703] ttusb-dec 1-1:4.219: probe with driver ttusb-dec failed with error -22 [ 949.530311][ T5703] usb 1-1: USB disconnect, device number 45 [ 949.542033][T12198] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 949.542457][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 949.542469][ T31] audit: type=1400 audit(1791926721.503:448): avc: denied { append } for pid=12197 comm="syz.2.1519" name="context-info" dev="tracefs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 949.599266][T12199] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 949.632610][T11359] [drm:udl_init] *ERROR* Selecting channel failed [ 949.666729][T11359] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 949.666754][T11359] [drm] Initialized udl on minor 1 [ 949.667786][T11359] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 949.668138][T11359] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 949.670603][T11359] usb 4-1: USB disconnect, device number 44 [ 954.584972][T12234] netlink: 'syz.3.1527': attribute type 4 has an invalid length. [ 954.584994][T12234] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1527'. [ 954.585010][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 954.588077][ T31] audit: type=1400 audit(1791926726.553:449): avc: denied { setopt } for pid=12233 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 954.589923][ T31] audit: type=1400 audit(1791926726.553:450): avc: denied { bind } for pid=12233 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 954.590187][ T31] audit: type=1400 audit(1791926726.553:451): avc: denied { write } for pid=12233 comm="syz.3.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 957.225475][T11359] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 957.374853][T11359] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 957.377695][T11359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.451820][T11359] usb 2-1: config 0 descriptor?? [ 958.652365][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.652700][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.758764][T11359] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 958.961288][T11359] [drm:udl_init] *ERROR* Selecting channel failed [ 959.024413][T11359] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 959.024438][T11359] [drm] Initialized udl on minor 1 [ 959.025436][T11359] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 959.025740][T11359] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 959.028351][T11359] usb 2-1: USB disconnect, device number 50 [ 959.067845][ T5703] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 959.130007][ T31] audit: type=1400 audit(1791926731.093:452): avc: denied { recv } for pid=4972 comm="udevd" saddr=10.128.0.169 src=39374 daddr=10.128.0.217 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 959.180184][T12262] syz_tun: entered promiscuous mode [ 959.180360][T12262] macvtap1: entered promiscuous mode [ 959.180543][T12262] macvtap1: entered allmulticast mode [ 959.180556][T12262] syz_tun: entered allmulticast mode [ 959.211993][T12262] syz_tun: left allmulticast mode [ 959.212169][T12262] syz_tun: left promiscuous mode [ 959.303530][ T31] audit: type=1400 audit(1791926731.273:453): avc: denied { recv } for pid=12258 comm="syz.0.1533" saddr=10.128.0.169 src=30006 daddr=10.128.0.217 dest=34282 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 961.212981][ T31] audit: type=1400 audit(1791926732.893:454): avc: denied { setopt } for pid=12267 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 961.350032][ T31] audit: type=1400 audit(1791926733.313:455): avc: denied { map } for pid=12273 comm="syz.1.1538" path="socket:[36316]" dev="sockfs" ino=36316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 961.350475][ T31] audit: type=1400 audit(1791926733.313:456): avc: denied { block_suspend } for pid=12273 comm="syz.1.1538" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 961.532998][ T9301] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 962.162984][ T9301] usb 1-1: Using ep0 maxpacket: 8 [ 962.166344][ T9301] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 962.167902][ T9301] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 962.167945][ T9301] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.167966][ T9301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.167986][ T9301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 962.168015][ T9301] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.168046][ T9301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.372042][ T9301] usb 1-1: usb_control_msg returned -71 [ 962.372092][ T9301] usbtmc 1-1:16.0: can't read capabilities [ 962.408012][ T9301] usb 1-1: USB disconnect, device number 46 [ 964.116686][T11359] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 964.381812][T11359] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 964.395976][T11359] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 964.396049][T11359] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.428279][T11359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.428415][T11359] usb 5-1: Product: syz [ 964.428662][T11359] usb 5-1: Manufacturer: syz [ 964.428842][T11359] usb 5-1: SerialNumber: syz [ 964.625163][T11359] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 964.625188][T11359] usb 5-1: no configuration chosen from 1 choice [ 965.151407][ T31] audit: type=1400 audit(1791926737.113:457): avc: denied { create } for pid=12311 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 965.152586][ T31] audit: type=1400 audit(1791926737.113:458): avc: denied { connect } for pid=12311 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 965.940589][T12315] syz_tun: entered promiscuous mode [ 965.941331][T12315] macvtap1: entered promiscuous mode [ 965.941538][T12315] macvtap1: entered allmulticast mode [ 965.941552][T12315] syz_tun: entered allmulticast mode [ 965.969600][T12315] syz_tun: left allmulticast mode [ 965.970326][T12315] syz_tun: left promiscuous mode [ 966.199570][ T5710] usb 5-1: USB disconnect, device number 35 [ 967.735192][T12330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1549'. [ 968.373321][ T9301] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 968.533902][ T9301] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 968.534743][ T9301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.539373][ T9301] usb 5-1: config 0 descriptor?? [ 968.759188][T11359] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 968.778300][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.778710][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.802758][ T9301] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 968.903570][T11359] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 968.904346][T11359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.904369][T11359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.906159][T11359] usb 3-1: config 0 descriptor?? [ 968.911610][T11359] pwc: Askey VC010 type 2 USB webcam detected. [ 969.214563][T12334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.216856][T12334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.255015][T11359] pwc: send_video_command error -71 [ 969.255032][T11359] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 969.255106][T11359] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 969.260815][T11359] usb 3-1: USB disconnect, device number 42 [ 969.276382][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 969.287544][ T9301] [drm:udl_init] *ERROR* Selecting channel failed [ 969.385791][ T9301] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 969.385816][ T9301] [drm] Initialized udl on minor 1 [ 969.387451][ T9301] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 969.390390][ T9301] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 969.392426][ T9301] usb 5-1: USB disconnect, device number 36 [ 969.448438][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 969.448762][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 969.448916][ T5736] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 969.847602][T11359] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 969.949715][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 969.950344][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 969.952440][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 969.952476][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.952503][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.952523][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.952544][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.952576][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.051381][T11359] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 970.052657][T11359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.052697][T11359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.575832][T12355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1555'. [ 971.036423][ T10] usb 4-1: usb_control_msg returned -32 [ 971.036465][ T10] usbtmc 4-1:16.0: can't read capabilities [ 971.041754][T11359] usb 3-1: config 0 descriptor?? [ 971.083912][T11359] pwc: Askey VC010 type 2 USB webcam detected. [ 972.093026][T12364] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 972.122511][ T30] usb 4-1: USB disconnect, device number 45 [ 972.160578][T11359] pwc: send_video_command error -71 [ 972.160596][T11359] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 972.160672][T11359] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 972.203150][T11359] usb 3-1: USB disconnect, device number 43 [ 974.115565][T12381] ovs-system: entered promiscuous mode [ 974.143115][T12379] 9pnet: p9_errstr2errno: server reported unknown error 000 [ 974.444588][T12349] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 975.363019][T12349] usb 2-1: Using ep0 maxpacket: 16 [ 975.364611][T12349] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 975.424577][T12349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.424614][T12349] usb 2-1: Product: syz [ 975.424656][T12349] usb 2-1: Manufacturer: syz [ 975.424670][T12349] usb 2-1: SerialNumber: syz [ 975.497654][T12349] usb 2-1: config 0 descriptor?? [ 975.653012][ T5703] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 975.722119][ T31] audit: type=1400 audit(1791926747.683:459): avc: denied { write } for pid=12388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.815772][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 975.815815][ T5703] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 975.817890][ T5703] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 975.817913][ T5703] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 975.817931][ T5703] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 975.817949][ T5703] usb 3-1: config 74 has no interface number 0 [ 975.817963][ T5703] usb 3-1: config 74 has no interface number 1 [ 975.817977][ T5703] usb 3-1: config 74 has no interface number 2 [ 975.818014][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 975.818027][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 975.818040][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 975.818052][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 975.818075][ T5703] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 975.818105][ T5703] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 975.818125][ T5703] usb 3-1: config 74 interface 142 has no altsetting 0 [ 975.818142][ T5703] usb 3-1: config 74 interface 72 has no altsetting 0 [ 975.818154][ T5703] usb 3-1: config 74 interface 97 has no altsetting 0 [ 975.921091][T12349] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 976.058291][T12349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.061555][T12349] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 976.061697][T12349] usb 2-1: media controller created [ 976.303606][T12414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1576 sclass=netlink_route_socket pid=12414 comm=syz.1.1563 [ 976.367960][T12349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.368874][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1563'. [ 976.368951][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1563'. [ 976.457828][T12415] dtv5100: wlen = 0, aborting. [ 976.766993][T12414] bridge0: entered promiscuous mode [ 976.887190][T12414] ip6gretap0: entered promiscuous mode [ 976.981423][T12414] debugfs: 'hsr1' already exists in 'hsr' [ 976.981502][T12414] Cannot create hsr debugfs directory [ 977.018920][ T31] audit: type=1400 audit(1791926748.983:460): avc: denied { write } for pid=12416 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.099359][T12349] zl10353_read_register: readreg error (reg=127, ret==0) [ 977.099405][T12349] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 977.099417][T12349] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 977.134906][T12349] usb 2-1: USB disconnect, device number 51 [ 977.361794][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.403613][ T5703] usb 3-1: can't set config #74, error -71 [ 977.412857][ T5703] usb 3-1: USB disconnect, device number 44 [ 977.471356][T12349] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 979.619035][ T31] audit: type=1400 audit(1791926751.583:461): avc: denied { write } for pid=12429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.576987][ T31] audit: type=1400 audit(1791926752.543:462): avc: denied { write } for pid=12455 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 980.743077][T12431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1568'. [ 981.753036][ T5703] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 981.764513][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 981.953122][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 981.955488][ T5703] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 981.959615][ T5703] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 981.959665][ T5703] usb 4-1: config 179 has no interface number 0 [ 981.959825][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 981.959863][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 981.959916][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 981.959968][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 981.960019][ T5703] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 981.960058][ T5703] usb 4-1: config 179 interface 65 has no altsetting 0 [ 981.960140][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.103477][ T5703] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36 [ 982.143069][ T4957] input input36: unable to receive magic message: -110 [ 982.148127][ T4957] input input36: unable to receive magic message: -32 [ 982.148928][ T4957] input input36: unable to receive magic message: -32 [ 982.160412][ T4957] input input36: unable to receive magic message: -32 [ 982.299918][T12260] input input36: unable to receive magic message: -32 [ 982.321004][ T4957] input input36: unable to receive magic message: -32 [ 982.332976][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 982.352732][ T4957] input input36: unable to receive magic message: -32 [ 982.380338][ T4957] input input36: unable to receive magic message: -32 [ 982.459922][ T4957] input input36: unable to receive magic message: -32 [ 982.497073][T12349] usb 4-1: USB disconnect, device number 46 [ 982.497203][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 982.509588][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 982.518373][ T25] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 982.533324][ T25] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 982.533349][ T25] usb 5-1: config 179 has no interface number 0 [ 982.533372][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 982.533387][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 982.533402][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 982.533417][ T25] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 982.533431][ T25] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 982.533446][ T25] usb 5-1: config 179 interface 65 has no altsetting 0 [ 982.533462][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.659765][ T25] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input37 [ 983.513809][ T4957] input input37: unable to receive magic message: -110 [ 983.750406][ T4957] input input37: unable to receive magic message: -71 [ 983.782184][ T4957] input input37: unable to receive magic message: -71 [ 983.807425][ T4957] input input37: unable to receive magic message: -71 [ 983.824089][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 983.824135][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 983.824157][ T25] usb 5-1: USB disconnect, device number 37 [ 984.441382][ T5703] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 984.525356][T12492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1578'. [ 984.864648][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 984.864710][ T5703] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 984.934939][ T5703] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 984.936299][ T5703] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 984.936324][ T5703] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 984.936354][ T5703] usb 3-1: config 74 has no interface number 0 [ 984.936369][ T5703] usb 3-1: config 74 has no interface number 1 [ 984.936383][ T5703] usb 3-1: config 74 has no interface number 2 [ 984.936455][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 984.936481][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 984.936502][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 984.936524][ T5703] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 984.936553][ T5703] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 984.936580][ T5703] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 984.936599][ T5703] usb 3-1: config 74 interface 142 has no altsetting 0 [ 984.936615][ T5703] usb 3-1: config 74 interface 72 has no altsetting 0 [ 984.936631][ T5703] usb 3-1: config 74 interface 97 has no altsetting 0 [ 986.122975][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.204485][ T5703] usb 3-1: can't set config #74, error -71 [ 986.206752][ T5703] usb 3-1: USB disconnect, device number 45 [ 987.463385][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.463436][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.697035][T12520] virtio-fs: tag not found [ 989.780094][ T31] audit: type=1400 audit(1791926761.743:463): avc: denied { read append } for pid=12528 comm="syz.3.1588" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 989.780142][ T31] audit: type=1400 audit(1791926761.743:464): avc: denied { open } for pid=12528 comm="syz.3.1588" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 989.925399][T12529] /dev/sg0: Can't lookup blockdev [ 989.929278][ T31] audit: type=1400 audit(1791926761.893:465): avc: denied { write } for pid=12528 comm="syz.3.1588" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 992.281216][T12545] syz_tun: entered promiscuous mode [ 992.281378][T12545] macvtap1: entered promiscuous mode [ 992.281517][T12545] macvtap1: entered allmulticast mode [ 992.281530][T12545] syz_tun: entered allmulticast mode [ 992.329420][T12545] syz_tun: left allmulticast mode [ 992.329600][T12545] syz_tun: left promiscuous mode [ 992.710210][ T31] audit: type=1400 audit(1791926764.673:466): avc: denied { write } for pid=12543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.214020][ T31] audit: type=1400 audit(1791926765.183:467): avc: denied { write } for pid=12568 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.766081][T12574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 994.851949][ T31] audit: type=1400 audit(1791926766.813:468): avc: denied { read } for pid=12569 comm="syz.4.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 998.778439][ T31] audit: type=1400 audit(1791926770.743:469): avc: denied { write } for pid=12600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.755363][ T31] audit: type=1400 audit(1791926771.723:470): avc: denied { write } for pid=12629 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.166611][ T30] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 1004.325087][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1004.325137][ T30] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1004.326875][ T30] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 1004.326900][ T30] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 1004.326919][ T30] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 1004.326938][ T30] usb 3-1: config 74 has no interface number 0 [ 1004.326954][ T30] usb 3-1: config 74 has no interface number 1 [ 1004.326968][ T30] usb 3-1: config 74 has no interface number 2 [ 1004.327016][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1004.327041][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1004.327063][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1004.327085][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1004.327123][ T30] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1004.327154][ T30] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1004.327174][ T30] usb 3-1: config 74 interface 142 has no altsetting 0 [ 1004.327192][ T30] usb 3-1: config 74 interface 72 has no altsetting 0 [ 1004.327208][ T30] usb 3-1: config 74 interface 97 has no altsetting 0 [ 1004.491754][ T31] audit: type=1400 audit(1791926776.453:471): avc: denied { mount } for pid=12657 comm="syz.0.1608" name="/" dev="autofs" ino=37917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1004.739079][T12644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1606'. [ 1004.831630][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.846968][ T30] usb 3-1: can't set config #74, error -71 [ 1004.849969][ T30] usb 3-1: USB disconnect, device number 46 [ 1007.987958][T11359] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1008.193973][T11359] usb 1-1: Using ep0 maxpacket: 32 [ 1008.196262][T11359] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1008.314092][T11359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.387104][T11359] usb 1-1: Product: syz [ 1008.387304][T11359] usb 1-1: Manufacturer: syz [ 1008.387473][T11359] usb 1-1: SerialNumber: syz [ 1008.520967][T11359] usb 1-1: config 0 descriptor?? [ 1008.536572][T11359] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1008.536645][T11359] dvb-usb: bulk message failed: -22 (4/0) [ 1008.536653][T11359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1008.536700][T11359] dvb-usb: bulk message failed: -22 (5/0) [ 1008.536707][T11359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1008.589020][T11359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1008.590129][T11359] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1008.590172][T11359] usb 1-1: media controller created [ 1008.633950][T11359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.658658][T11359] usb 1-1: selecting invalid altsetting 3 [ 1008.658676][T11359] ttusb2: set interface to alts=3 failed [ 1008.716380][T11359] DVB: Unable to find symbol tda10086_attach() [ 1008.716396][T11359] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1008.718758][T11359] dvb-usb: bulk message failed: -22 (4/0) [ 1008.718777][T11359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1008.718872][T11359] dvb-usb: bulk message failed: -22 (5/0) [ 1008.718884][T11359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1008.718942][T11359] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1009.682747][T11359] usb 1-1: USB disconnect, device number 47 [ 1009.731702][T11359] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1009.955750][T12698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12698 comm=syz.4.1618 [ 1010.463032][ T31] audit: type=1400 audit(1791926782.213:472): avc: denied { append } for pid=12697 comm="syz.4.1618" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1010.463089][ T31] audit: type=1400 audit(1791926782.213:473): avc: denied { bind } for pid=12697 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1010.463124][ T31] audit: type=1400 audit(1791926782.213:474): avc: denied { getopt } for pid=12697 comm="syz.4.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1013.142032][T12728] syz.1.1622 uses obsolete (PF_INET,SOCK_PACKET) [ 1013.243043][T11359] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 1015.737172][T11359] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1015.737214][T11359] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1015.737936][T11359] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1015.737965][T11359] usb 5-1: can't read configurations, error -71 [ 1016.785249][ T31] audit: type=1400 audit(1791926788.753:475): avc: denied { write } for pid=12737 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1018.233068][T12349] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1018.467140][T12749] smc: net device team0 applied user defined pnetid SYZ2 [ 1018.669078][T12349] usb 1-1: Using ep0 maxpacket: 8 [ 1018.670156][T12349] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1018.671719][T12349] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1018.671767][T12349] usb 1-1: config 179 has no interface number 0 [ 1018.671888][T12349] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1018.671938][T12349] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1018.671989][T12349] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1018.672025][T12349] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1018.672113][T12349] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1018.672162][T12349] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1018.672239][T12349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.890148][T12749] smc: removing net device team0 with user defined pnetid SYZ2 [ 1019.007923][T12749] team0 (unregistering): Port device team_slave_0 removed [ 1019.017060][T12749] team0 (unregistering): Port device team_slave_1 removed [ 1019.046583][T12349] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 1019.113159][ T4957] input input38: unable to receive magic message: -110 [ 1019.168861][ T4957] input input38: unable to receive magic message: -32 [ 1019.186194][ T4957] input input38: unable to receive magic message: -32 [ 1019.229244][ T4957] input input38: unable to receive magic message: -32 [ 1019.251924][ T4957] input input38: unable to receive magic message: -32 [ 1019.277758][ T4957] input input38: unable to receive magic message: -32 [ 1019.497782][T12349] usb 1-1: USB disconnect, device number 48 [ 1019.497885][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1023.943040][T12349] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1024.032993][T11359] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 1024.092079][T12783] FAULT_INJECTION: forcing a failure. [ 1024.092079][T12783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.092112][T12783] CPU: 1 UID: 0 PID: 12783 Comm: syz.1.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1024.092137][T12783] Tainted: [L]=SOFTLOCKUP [ 1024.092143][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.092154][T12783] Call Trace: [ 1024.092160][T12783] [ 1024.092168][T12783] dump_stack_lvl+0x100/0x190 [ 1024.092198][T12783] should_fail_ex.cold+0x5/0xa [ 1024.092225][T12783] strncpy_from_user+0x3b/0x2d0 [ 1024.092258][T12783] bpf_prog_load+0x1502/0x2ab0 [ 1024.092292][T12783] ? __pfx_bpf_prog_load+0x10/0x10 [ 1024.092339][T12783] __sys_bpf+0x1f46/0x4a30 [ 1024.092366][T12783] ? __pfx___sys_bpf+0x10/0x10 [ 1024.092385][T12783] ? find_held_lock+0x2b/0x80 [ 1024.092411][T12783] ? get_pid_task+0xfc/0x250 [ 1024.092434][T12783] ? get_pid_task+0xfc/0x250 [ 1024.092467][T12783] ? find_held_lock+0x2b/0x80 [ 1024.092499][T12783] ? rcu_read_lock_any_held+0x6a/0x90 [ 1024.092527][T12783] ? find_held_lock+0x2b/0x80 [ 1024.092553][T12783] ? ksys_write+0x190/0x250 [ 1024.092575][T12783] ? ksys_write+0x190/0x250 [ 1024.092596][T12783] ? lock_acquire+0x1d1/0x380 [ 1024.092634][T12783] ? fput+0x7c/0x100 [ 1024.092660][T12783] ? ksys_write+0x1ac/0x250 [ 1024.092684][T12783] ? __x64_sys_bpf+0xce/0x140 [ 1024.092709][T12783] __x64_sys_bpf+0xce/0x140 [ 1024.092730][T12783] ? do_syscall_64+0xae/0x790 [ 1024.092757][T12783] do_syscall_64+0x123/0x790 [ 1024.092784][T12783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.092803][T12783] RIP: 0033:0x7f50fc39e2d9 [ 1024.092818][T12783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.092834][T12783] RSP: 002b:00007f50fd20c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1024.092852][T12783] RAX: ffffffffffffffda RBX: 00007f50fc625fa0 RCX: 00007f50fc39e2d9 [ 1024.092863][T12783] RDX: 0000000000000052 RSI: 000020000000e000 RDI: 0000000000000005 [ 1024.092872][T12783] RBP: 00007f50fd20c090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.092883][T12783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.092893][T12783] R13: 00007f50fc626038 R14: 00007f50fc625fa0 R15: 00007ffcad6395e8 [ 1024.092918][T12783] [ 1024.184818][T11359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1024.184862][T11359] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1024.187087][T11359] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 1024.187107][T11359] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 1024.187124][T11359] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 1024.187139][T11359] usb 3-1: config 74 has no interface number 0 [ 1024.187153][T11359] usb 3-1: config 74 has no interface number 1 [ 1024.187166][T11359] usb 3-1: config 74 has no interface number 2 [ 1024.187208][T11359] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1024.187230][T11359] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1024.187251][T11359] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1024.187271][T11359] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1024.187297][T11359] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1024.187323][T11359] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1024.187339][T11359] usb 3-1: config 74 interface 142 has no altsetting 0 [ 1024.187354][T11359] usb 3-1: config 74 interface 72 has no altsetting 0 [ 1024.187368][T11359] usb 3-1: config 74 interface 97 has no altsetting 0 [ 1024.237263][T12349] usb 1-1: not running at top speed; connect to a high speed hub [ 1024.237294][T12349] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1024.305267][T12349] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.305446][T12349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.536887][T12349] ljca 1-1:1.0: bulk endpoints not found [ 1024.813754][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.819729][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.917265][T12349] usb 1-1: USB disconnect, device number 49 [ 1025.205800][T11359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.210527][T11359] usb 3-1: can't set config #74, error -71 [ 1025.211763][T11359] usb 3-1: USB disconnect, device number 47 [ 1030.361401][ T31] audit: type=1400 audit(1791926802.323:476): avc: denied { bind } for pid=12821 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1030.385944][ T31] audit: type=1400 audit(1791926802.353:477): avc: denied { listen } for pid=12821 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1030.387458][ T31] audit: type=1400 audit(1791926802.353:478): avc: denied { connect } for pid=12821 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1030.448798][ T31] audit: type=1400 audit(1791926802.413:479): avc: denied { accept } for pid=12821 comm="syz.2.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1030.669225][T12828] jffs2: notice: (12828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1031.785995][ T5710] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 1031.938707][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1031.938861][ T5710] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1031.942129][ T5710] usb 1-1: config 74 has an invalid interface number: 142 but max is 2 [ 1031.942186][ T5710] usb 1-1: config 74 has an invalid interface number: 72 but max is 2 [ 1031.942229][ T5710] usb 1-1: config 74 has an invalid interface number: 97 but max is 2 [ 1031.942255][ T5710] usb 1-1: config 74 has no interface number 0 [ 1031.942345][ T5710] usb 1-1: config 74 has no interface number 1 [ 1031.942411][ T5710] usb 1-1: config 74 has no interface number 2 [ 1031.942564][ T5710] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1031.942615][ T5710] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1031.942657][ T5710] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1031.942719][ T5710] usb 1-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1031.975005][ T5710] usb 1-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1032.045493][ T5710] usb 1-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1032.045558][ T5710] usb 1-1: config 74 interface 142 has no altsetting 0 [ 1032.045949][ T5710] usb 1-1: config 74 interface 72 has no altsetting 0 [ 1032.047603][ T5710] usb 1-1: config 74 interface 97 has no altsetting 0 [ 1033.822675][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.058852][ T5710] usb 1-1: can't set config #74, error -71 [ 1034.069341][ T31] audit: type=1400 audit(1791926806.033:480): avc: denied { append } for pid=12847 comm="syz.3.1653" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1034.082467][T11359] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1034.091233][ T5710] usb 1-1: USB disconnect, device number 50 [ 1034.163145][T12857] loop9: detected capacity change from 0 to 524287998 [ 1034.323185][T11359] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1034.326546][T11359] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1034.326585][T11359] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1034.326600][T11359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 1034.326616][T11359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.336861][T11359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.336885][T11359] usb 2-1: Product: syz [ 1034.336898][T11359] usb 2-1: Manufacturer: syz [ 1034.336911][T11359] usb 2-1: SerialNumber: syz [ 1034.357733][T11359] usb 2-1: config 0 descriptor?? [ 1034.652432][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1034.812959][T11359] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1035.088446][T11359] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1035.125223][T11359] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1035.125256][T11359] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1035.125287][T11359] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.167383][T11359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.167411][T11359] usb 4-1: Product: syz [ 1035.167424][T11359] usb 4-1: Manufacturer: syz [ 1035.167439][T11359] usb 4-1: SerialNumber: syz [ 1035.188410][T12857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1035.188472][T12857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1035.247908][T11359] ims_pcu 4-1:1.1: Control endpoint is not INTERRUPT IN [ 1035.247953][T11359] ims_pcu 4-1:1.1: probe with driver ims_pcu failed with error -22 [ 1035.867399][T12357] usb 4-1: USB disconnect, device number 47 [ 1037.138731][T10881] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1038.610097][ T25] usb 2-1: USB disconnect, device number 52 [ 1038.610782][ T31] audit: type=1400 audit(1791926810.573:481): avc: denied { egress } for pid=12357 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1038.610825][ T31] audit: type=1400 audit(1791926810.573:482): avc: denied { sendto } for pid=12357 comm="kworker/0:3" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1041.062338][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 1041.100997][T12881] program syz.1.1660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1043.835043][T11359] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1043.871440][T12915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.987849][T11359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1043.987877][T11359] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1043.992266][T11359] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 1043.992284][T11359] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 1043.992295][T11359] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 1043.992306][T11359] usb 2-1: config 74 has no interface number 0 [ 1043.992316][T11359] usb 2-1: config 74 has no interface number 1 [ 1043.992325][T11359] usb 2-1: config 74 has no interface number 2 [ 1043.992351][T11359] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1043.992367][T11359] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1043.992381][T11359] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1043.992395][T11359] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1043.992414][T11359] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1043.992432][T11359] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1043.992444][T11359] usb 2-1: config 74 interface 142 has no altsetting 0 [ 1043.992453][T11359] usb 2-1: config 74 interface 72 has no altsetting 0 [ 1043.992461][T11359] usb 2-1: config 74 interface 97 has no altsetting 0 [ 1044.014320][ T31] audit: type=1400 audit(1791926815.973:483): avc: denied { ioctl } for pid=12916 comm="syz.4.1668" path="socket:[39328]" dev="sockfs" ino=39328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.927646][T11359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.948370][T11359] usb 2-1: can't set config #74, error -71 [ 1045.963601][T11359] usb 2-1: USB disconnect, device number 53 [ 1047.282945][T12349] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1048.175595][T12349] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1048.176514][T12349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.182816][T12349] usb 5-1: config 0 descriptor?? [ 1049.444689][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.444723][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.540919][T12349] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1049.551463][T12349] [drm:udl_init] *ERROR* Selecting channel failed [ 1049.573583][T12349] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1049.573608][T12349] [drm] Initialized udl on minor 1 [ 1049.574605][T12349] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1049.574929][T12349] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1049.578459][T12349] usb 5-1: USB disconnect, device number 40 [ 1049.578580][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1049.578850][ T5736] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1049.579007][ T5736] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1051.165901][ T31] audit: type=1400 audit(1791926823.123:484): avc: denied { bind } for pid=12956 comm="syz.2.1682" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1051.166084][ T31] audit: type=1400 audit(1791926823.123:485): avc: denied { name_bind } for pid=12956 comm="syz.2.1682" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1051.166226][ T31] audit: type=1400 audit(1791926823.123:486): avc: denied { node_bind } for pid=12956 comm="syz.2.1682" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1052.453715][ T31] audit: type=1400 audit(1791926824.423:487): avc: denied { read } for pid=12959 comm="syz.2.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1054.238389][T12981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.414249][T11359] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1054.564695][T11359] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1054.564733][T11359] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1054.570030][T11359] usb 5-1: config 74 has an invalid interface number: 142 but max is 2 [ 1054.570056][T11359] usb 5-1: config 74 has an invalid interface number: 72 but max is 2 [ 1054.570067][T11359] usb 5-1: config 74 has an invalid interface number: 97 but max is 2 [ 1054.570077][T11359] usb 5-1: config 74 has no interface number 0 [ 1054.570086][T11359] usb 5-1: config 74 has no interface number 1 [ 1054.570095][T11359] usb 5-1: config 74 has no interface number 2 [ 1054.570121][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1054.570136][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1054.570150][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1054.570164][T11359] usb 5-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1054.570181][T11359] usb 5-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1054.570197][T11359] usb 5-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1054.570208][T11359] usb 5-1: config 74 interface 142 has no altsetting 0 [ 1054.570217][T11359] usb 5-1: config 74 interface 72 has no altsetting 0 [ 1054.570226][T11359] usb 5-1: config 74 interface 97 has no altsetting 0 [ 1055.034381][ T31] audit: type=1400 audit(1791926827.003:488): avc: denied { module_request } for pid=12979 comm="syz.3.1680" kmod="net-pf-34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1056.786010][T11359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.958109][T11359] usb 5-1: can't set config #74, error -71 [ 1056.959496][T11359] usb 5-1: USB disconnect, device number 41 [ 1057.623058][T11359] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1057.775076][T11359] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1057.777855][T11359] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1057.777910][T11359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1057.777964][T11359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1057.828842][T11359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.828869][T11359] usb 3-1: Product: syz [ 1057.828883][T11359] usb 3-1: Manufacturer: syz [ 1057.828897][T11359] usb 3-1: SerialNumber: syz [ 1057.862389][T11359] usb 3-1: config 0 descriptor?? [ 1058.038807][ T31] audit: type=1400 audit(1791926830.003:489): avc: denied { write } for pid=13011 comm="syz.3.1695" name="ports" dev="configfs" ino=3458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1058.080367][ T1504] Bluetooth: hci5: Frame reassembly failed (-84) [ 1058.096422][ T31] audit: type=1400 audit(1791926830.063:490): avc: denied { write } for pid=13011 comm="syz.3.1695" name="addr_trtype" dev="configfs" ino=39536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1058.097843][ T31] audit: type=1400 audit(1791926830.063:491): avc: denied { open } for pid=13011 comm="syz.3.1695" path="/343/config/nvmet/ports/1/addr_trtype" dev="configfs" ino=39536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1058.162772][T13013] nvmet: Invalid value 't' for trtype [ 1058.437837][T13026] ip6t_REJECT: ECHOREPLY is not supported [ 1058.703719][T12349] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1058.853813][T12349] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 1058.856873][T12349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1058.856889][T12349] usb 5-1: Product: syz [ 1058.856897][T12349] usb 5-1: Manufacturer: syz [ 1059.950893][T13028] fuse: Unknown parameter '0x00000000000000040000000000000000000400000000000000000000' [ 1059.956968][T13028] fuse: Bad value for 'user_id' [ 1059.956984][T13028] fuse: Bad value for 'user_id' [ 1060.059842][T12349] logitech-djreceiver 0003:046D:C52B.0002: hiddev0,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 1060.059903][T12349] logitech-djreceiver 0003:046D:C52B.0002: logi_dj_recv_send_report: unable to find dj report [ 1060.059944][T12349] logitech-djreceiver 0003:046D:C52B.0002: logi_dj_recv_switch_to_dj_mode error:-19 [ 1060.123638][T10881] Bluetooth: hci5: command 0x1003 tx timeout [ 1060.124668][T10666] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1060.274670][T11359] usb 3-1: USB disconnect, device number 48 [ 1060.291763][ T5736] logitech-djreceiver 0003:046D:C52B.0002: logi_dj_recv_destroy_djhid_device: can't destroy a NULL device [ 1060.984446][T11359] usb 5-1: USB disconnect, device number 42 [ 1061.963134][ T5710] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1062.119087][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1062.119224][ T5710] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1062.121528][ T5710] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 1062.121559][ T5710] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 1062.121636][ T5710] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 1062.121732][ T5710] usb 2-1: config 74 has no interface number 0 [ 1062.121772][ T5710] usb 2-1: config 74 has no interface number 1 [ 1062.121806][ T5710] usb 2-1: config 74 has no interface number 2 [ 1062.122014][ T5710] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1062.122046][ T5710] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1062.122073][ T5710] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1062.122141][ T5710] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1062.122269][ T5710] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1062.122304][ T5710] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1062.122370][ T5710] usb 2-1: config 74 interface 142 has no altsetting 0 [ 1062.122412][ T5710] usb 2-1: config 74 interface 72 has no altsetting 0 [ 1062.122438][ T5710] usb 2-1: config 74 interface 97 has no altsetting 0 [ 1063.081585][T13071] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1712'. [ 1063.122902][ T25] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1063.269366][ T31] audit: type=1400 audit(1791926835.234:492): avc: denied { read write } for pid=13073 comm="syz.4.1713" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1063.300054][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1063.313706][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.314581][ T31] audit: type=1400 audit(1791926835.234:493): avc: denied { open } for pid=13073 comm="syz.4.1713" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1063.385890][ T25] usb 1-1: config 0 descriptor?? [ 1063.701323][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.753049][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.776992][ T25] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1063.848920][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.007139][ T5710] usb 2-1: can't set config #74, error -71 [ 1064.068655][ T5710] usb 2-1: USB disconnect, device number 54 [ 1064.097263][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 1064.842575][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1064.842743][ T25] [drm] Initialized udl on minor 1 [ 1065.307741][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1065.378359][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1065.584599][ T25] usb 1-1: USB disconnect, device number 51 [ 1065.677272][T13078] syzkaller0: entered promiscuous mode [ 1065.677294][T13078] syzkaller0: entered allmulticast mode [ 1065.701293][ T31] audit: type=1400 audit(1791926837.654:494): avc: denied { ioctl } for pid=13077 comm="syz.4.1715" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1065.832167][T13082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1065.900581][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1070.382862][T13108] FAULT_INJECTION: forcing a failure. [ 1070.382862][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.383015][T13108] CPU: 1 UID: 0 PID: 13108 Comm: syz.4.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.383042][T13108] Tainted: [L]=SOFTLOCKUP [ 1070.383048][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.383059][T13108] Call Trace: [ 1070.383066][T13108] [ 1070.383073][T13108] dump_stack_lvl+0x100/0x190 [ 1070.383105][T13108] should_fail_ex.cold+0x5/0xa [ 1070.383133][T13108] should_failslab+0xc2/0x120 [ 1070.383159][T13108] __kmalloc_noprof+0xfc/0x840 [ 1070.383184][T13108] ? rcu_is_watching+0x13/0xc0 [ 1070.383211][T13108] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1070.383252][T13108] tomoyo_realpath_from_path+0xb6/0x690 [ 1070.383286][T13108] tomoyo_path_number_perm+0x23c/0x580 [ 1070.383310][T13108] ? tomoyo_path_number_perm+0x22e/0x580 [ 1070.383337][T13108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1070.383371][T13108] ? __lock_acquire+0x5c0/0x1f40 [ 1070.383413][T13108] ? __fget_files+0x34/0x3d0 [ 1070.383440][T13108] ? find_held_lock+0x2b/0x80 [ 1070.383467][T13108] ? hook_file_ioctl_common+0x140/0x440 [ 1070.383493][T13108] ? __fget_files+0x21f/0x3d0 [ 1070.383523][T13108] security_file_ioctl+0xd3/0x230 [ 1070.383550][T13108] __x64_sys_ioctl+0xb7/0x210 [ 1070.383576][T13108] do_syscall_64+0x123/0x790 [ 1070.383606][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.383625][T13108] RIP: 0033:0x7ff65cf9e2d9 [ 1070.383641][T13108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.383659][T13108] RSP: 002b:00007ff65dea9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.383679][T13108] RAX: ffffffffffffffda RBX: 00007ff65d225fa0 RCX: 00007ff65cf9e2d9 [ 1070.383690][T13108] RDX: 00002000000000c0 RSI: 000000004020565a RDI: 0000000000000003 [ 1070.383702][T13108] RBP: 00007ff65dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.383713][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.383723][T13108] R13: 00007ff65d226038 R14: 00007ff65d225fa0 R15: 00007ffca5f943b8 [ 1070.383746][T13108] [ 1070.387326][T13108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1071.096017][ T31] audit: type=1400 audit(1791926843.064:495): avc: denied { write } for pid=13117 comm="syz.0.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1071.161786][T13120] 9p: Bad value for 'wfdno' [ 1071.406679][T13122] MTD: Couldn't look up 'mtd0/file0': -2 [ 1072.175806][ T31] audit: type=1400 audit(1791926843.374:496): avc: denied { getopt } for pid=13119 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1073.325991][T13131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1727'. [ 1073.893401][ T5736] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1075.946367][ T5736] usb 5-1: device not accepting address 43, error -71 [ 1077.118724][T13153] 9p: Bad value for 'wfdno' [ 1077.472223][T13155] MTD: Couldn't look up 'mtd0/file0': -2 [ 1079.929540][T10666] Bluetooth: hci4: Unknown advertising packet type: 0x19 [ 1079.929556][T10666] Bluetooth: hci4: Unknown advertising packet type: 0x1f [ 1082.289887][T13169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1739'. [ 1082.357537][ T30] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 1082.546620][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1082.546664][ T30] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1082.548242][ T30] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 1082.548257][ T30] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 1082.548269][ T30] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 1082.548280][ T30] usb 2-1: config 74 has no interface number 0 [ 1082.548288][ T30] usb 2-1: config 74 has no interface number 1 [ 1082.548296][ T30] usb 2-1: config 74 has no interface number 2 [ 1082.548322][ T30] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1082.548337][ T30] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1082.548351][ T30] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1082.548365][ T30] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1082.548384][ T30] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1082.548401][ T30] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1082.548412][ T30] usb 2-1: config 74 interface 142 has no altsetting 0 [ 1082.548421][ T30] usb 2-1: config 74 interface 72 has no altsetting 0 [ 1082.548430][ T30] usb 2-1: config 74 interface 97 has no altsetting 0 [ 1082.996611][T13191] 9p: Bad value for 'wfdno' [ 1083.246611][T13195] MTD: Couldn't look up 'mtd0/file0': -2 [ 1083.880586][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.082414][ T30] usb 2-1: can't set config #74, error -71 [ 1084.102675][ T30] usb 2-1: USB disconnect, device number 55 [ 1084.525935][T13208] syz_tun: entered promiscuous mode [ 1084.526083][T13208] macvtap1: entered promiscuous mode [ 1084.528134][T13208] macvtap1: entered allmulticast mode [ 1084.528150][T13208] syz_tun: entered allmulticast mode [ 1084.542422][ T5973] IPVS: starting estimator thread 0... [ 1084.542769][T13213] IPVS: set_ctl: invalid protocol: 12078 118.0.0.0:256 [ 1084.571137][T13208] syz_tun: left allmulticast mode [ 1084.571298][T13208] syz_tun: left promiscuous mode [ 1084.642481][T13216] IPVS: using max 43 ests per chain, 103200 per kthread [ 1085.279221][T13238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.525196][T13237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1754'. [ 1087.635203][T13256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.961404][ T30] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1088.339217][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1088.339264][ T30] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 1088.648341][ T30] usb 3-1: config 74 has an invalid interface number: 142 but max is 2 [ 1088.648365][ T30] usb 3-1: config 74 has an invalid interface number: 72 but max is 2 [ 1088.648381][ T30] usb 3-1: config 74 has an invalid interface number: 97 but max is 2 [ 1088.648391][ T30] usb 3-1: config 74 has no interface number 0 [ 1088.648400][ T30] usb 3-1: config 74 has no interface number 1 [ 1088.648410][ T30] usb 3-1: config 74 has no interface number 2 [ 1088.648937][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 1088.648960][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 1088.648982][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 1088.649002][ T30] usb 3-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 1088.649030][ T30] usb 3-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 1088.649057][ T30] usb 3-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 1088.649075][ T30] usb 3-1: config 74 interface 142 has no altsetting 0 [ 1088.649089][ T30] usb 3-1: config 74 interface 72 has no altsetting 0 [ 1088.649102][ T30] usb 3-1: config 74 interface 97 has no altsetting 0 [ 1089.639227][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.645588][ T30] usb 3-1: can't set config #74, error -71 [ 1089.679397][ T30] usb 3-1: USB disconnect, device number 49 [ 1090.899710][T13285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.769272][T12349] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1091.770483][T13289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1770'. [ 1091.829912][ T5703] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1091.854346][T13306] FAULT_INJECTION: forcing a failure. [ 1091.854346][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.854368][T13306] CPU: 0 UID: 0 PID: 13306 Comm: syz.2.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.854383][T13306] Tainted: [L]=SOFTLOCKUP [ 1091.854387][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1091.854393][T13306] Call Trace: [ 1091.854397][T13306] [ 1091.854402][T13306] dump_stack_lvl+0x100/0x190 [ 1091.854423][T13306] should_fail_ex.cold+0x5/0xa [ 1091.854440][T13306] should_failslab+0xc2/0x120 [ 1091.854457][T13306] __kmalloc_cache_noprof+0x91/0x6d0 [ 1091.854470][T13306] ? snd_seq_queue_alloc+0x56/0x540 [ 1091.854487][T13306] snd_seq_queue_alloc+0x56/0x540 [ 1091.854503][T13306] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1091.854522][T13306] call_seq_client_ctl+0xa3/0x130 [ 1091.854553][T13306] snd_seq_kernel_client_ctl+0x35/0x50 [ 1091.854565][T13306] alloc_seq_queue+0xdb/0x180 [ 1091.854577][T13306] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1091.854595][T13306] ? find_held_lock+0x2b/0x80 [ 1091.854613][T13306] ? mark_held_locks+0x40/0x70 [ 1091.854627][T13306] snd_seq_oss_open+0x2b2/0xa10 [ 1091.854642][T13306] odev_open+0x6f/0x90 [ 1091.854652][T13306] ? __pfx_odev_open+0x10/0x10 [ 1091.854665][T13306] soundcore_open+0x2e3/0x5a0 [ 1091.854677][T13306] ? __pfx_soundcore_open+0x10/0x10 [ 1091.854688][T13306] chrdev_open+0x234/0x6a0 [ 1091.854704][T13306] ? __pfx_chrdev_open+0x10/0x10 [ 1091.854721][T13306] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1091.854736][T13306] do_dentry_open+0x6ab/0x14d0 [ 1091.854750][T13306] ? __pfx_chrdev_open+0x10/0x10 [ 1091.854768][T13306] vfs_open+0x82/0x3f0 [ 1091.854790][T13306] path_openat+0x19fa/0x2440 [ 1091.854812][T13306] ? __pfx_path_openat+0x10/0x10 [ 1091.854832][T13306] do_file_open+0x20e/0x430 [ 1091.854850][T13306] ? __pfx_do_file_open+0x10/0x10 [ 1091.854876][T13306] ? _raw_spin_unlock+0x28/0x50 [ 1091.854889][T13306] ? alloc_fd+0x471/0x7a0 [ 1091.854909][T13306] do_sys_openat2+0x10f/0x1e0 [ 1091.854919][T13306] ? __pfx_do_sys_openat2+0x10/0x10 [ 1091.854930][T13306] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1091.854947][T13306] ? __fget_files+0x21f/0x3d0 [ 1091.854965][T13306] __x64_sys_openat+0x12d/0x210 [ 1091.854976][T13306] ? __pfx___x64_sys_openat+0x10/0x10 [ 1091.854986][T13306] ? ksys_write+0x1ac/0x250 [ 1091.855004][T13306] do_syscall_64+0x123/0x790 [ 1091.855021][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.855032][T13306] RIP: 0033:0x7fcdde99e2d9 [ 1091.855042][T13306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.855052][T13306] RSP: 002b:00007fcddcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1091.855063][T13306] RAX: ffffffffffffffda RBX: 00007fcddec25fa0 RCX: 00007fcdde99e2d9 [ 1091.855070][T13306] RDX: 0000000000080200 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1091.855077][T13306] RBP: 00007fcddcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.855084][T13306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.855090][T13306] R13: 00007fcddec26038 R14: 00007fcddec25fa0 R15: 00007fff7abb96e8 [ 1091.855105][T13306] [ 1091.911867][T12349] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1091.912687][T12349] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1091.912706][T12349] usb 2-1: config 1 has no interface number 0 [ 1091.914416][T12349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.914435][T12349] usb 2-1: Product: syz [ 1091.914447][T12349] usb 2-1: Manufacturer: syz [ 1091.914459][T12349] usb 2-1: SerialNumber: syz [ 1091.945063][T12349] usb 2-1: 3:1 : does not exist [ 1091.945084][T12349] usb 2-1: 3:2 : does not exist [ 1091.994114][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 1091.998945][ T31] audit: type=1400 audit(1791926863.955:497): avc: denied { bind } for pid=13303 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1092.004358][ T31] audit: type=1400 audit(1791926863.965:498): avc: denied { listen } for pid=13303 comm="syz.2.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1092.004563][ T5703] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1092.026114][ T5703] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1092.026141][ T5703] usb 4-1: config 179 has no interface number 0 [ 1092.026174][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1092.026199][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1092.026225][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1092.026248][ T5703] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1092.026269][ T5703] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1092.026294][ T5703] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1092.026336][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.354105][ T5703] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 1094.599486][ T5703] usb 4-1: USB disconnect, device number 48 [ 1094.599598][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1095.849813][T13321] netlink: 'syz.2.1777': attribute type 2 has an invalid length. [ 1095.998145][ T5710] usb 2-1: USB disconnect, device number 56 [ 1099.917874][T13352] 9p: Bad value for 'wfdno' [ 1100.082928][ T31] audit: type=1400 audit(1791926872.046:499): avc: denied { ioctl } for pid=13346 comm="syz.3.1786" path="socket:[41112]" dev="sockfs" ino=41112 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1100.086664][T13351] syzkaller1: entered promiscuous mode [ 1100.086687][T13351] syzkaller1: entered allmulticast mode [ 1100.703752][ T9301] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1100.880925][ T30] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1101.032052][ T30] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1101.034055][ T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1101.034111][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1101.034165][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.038708][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.038762][ T30] usb 4-1: Product: syz [ 1101.038807][ T30] usb 4-1: Manufacturer: syz [ 1101.038851][ T30] usb 4-1: SerialNumber: syz [ 1101.116827][ T30] usb 4-1: config 0 descriptor?? [ 1101.240677][ T9301] usb 2-1: Using ep0 maxpacket: 8 [ 1101.253314][ T31] audit: type=1400 audit(1791926873.206:500): avc: denied { ioctl } for pid=13359 comm="syz.1.1788" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1101.254041][ T9301] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1101.282373][ T31] audit: type=1400 audit(1791926873.246:501): avc: denied { read } for pid=13365 comm="syz.4.1790" name="video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1101.282415][ T31] audit: type=1400 audit(1791926873.246:502): avc: denied { open } for pid=13365 comm="syz.4.1790" path="/dev/video7" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1101.338513][ T31] audit: type=1400 audit(1791926873.296:503): avc: denied { prog_load } for pid=13369 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1101.338840][ T31] audit: type=1400 audit(1791926873.296:504): avc: denied { bpf } for pid=13369 comm="syz.2.1791" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1101.360905][ T9301] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1101.360932][ T9301] usb 2-1: config 179 has no interface number 0 [ 1101.360969][ T9301] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1101.360993][ T9301] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1101.361017][ T9301] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1101.361039][ T9301] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1101.361057][ T9301] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1101.361077][ T9301] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1101.361102][ T9301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.361551][ T31] audit: type=1400 audit(1791926873.326:505): avc: denied { execmem } for pid=13361 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1101.364096][ T31] audit: type=1400 audit(1791926873.326:506): avc: denied { read } for pid=13361 comm="syz.3.1789" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1101.364133][ T31] audit: type=1400 audit(1791926873.326:507): avc: denied { open } for pid=13361 comm="syz.3.1789" path="net:[4026532905]" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1101.364163][ T31] audit: type=1400 audit(1791926873.326:508): avc: denied { create } for pid=13361 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1101.426427][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1101.722414][ T9301] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 1101.919834][ T9301] usb 2-1: USB disconnect, device number 57 [ 1101.921238][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1102.550564][ T9301] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1102.700556][ T9301] usb 3-1: Using ep0 maxpacket: 32 [ 1102.701039][ T9301] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1102.701786][ T9301] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1102.701821][ T9301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.701938][ T9301] usb 3-1: config 0 has no interface number 0 [ 1102.701964][ T9301] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.701976][ T9301] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1102.701990][ T9301] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1102.702004][ T9301] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1102.702017][ T9301] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1102.702030][ T9301] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1102.702042][ T9301] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1102.703793][ T9301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.703807][ T9301] usb 3-1: Product: syz [ 1102.703816][ T9301] usb 3-1: Manufacturer: syz [ 1102.703824][ T9301] usb 3-1: SerialNumber: syz [ 1102.707917][ T9301] usb 3-1: config 0 descriptor?? [ 1102.708424][T13382] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1102.709578][ T9301] usb 3-1: expecting 3 got 2 endpoints! Bailing out. [ 1102.957957][T11359] usb 3-1: USB disconnect, device number 50 [ 1103.489892][T10666] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1103.544393][ T5710] usb 4-1: USB disconnect, device number 49 [ 1104.076599][T13404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.124371][T13406] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1105.296334][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 1105.296352][ T31] audit: type=1400 audit(1791926877.256:563): avc: denied { create } for pid=13405 comm="syz.2.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1105.296755][ T31] audit: type=1400 audit(1791926877.256:564): avc: denied { module_request } for pid=13405 comm="syz.2.1802" kmod="net-pf-34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1105.779782][ T31] audit: type=1400 audit(1791926877.736:565): avc: denied { create } for pid=13421 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1105.790157][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 1105.844515][T13422] nft_compat: unsupported protocol 60 [ 1105.858244][ T31] audit: type=1400 audit(1791926877.816:566): avc: denied { write } for pid=13421 comm="syz.0.1805" name="radio1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1105.859559][ T31] audit: type=1400 audit(1791926877.816:567): avc: denied { ioctl } for pid=13421 comm="syz.0.1805" path="/dev/radio1" dev="devtmpfs" ino=957 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1105.862639][ T31] audit: type=1400 audit(1791926877.826:568): avc: denied { ioctl } for pid=13421 comm="syz.0.1805" path="socket:[40408]" dev="sockfs" ino=40408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1105.863869][ T31] audit: type=1400 audit(1791926877.826:569): avc: denied { ioctl } for pid=13421 comm="syz.0.1805" path="socket:[40400]" dev="sockfs" ino=40400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1105.870399][ T5710] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1106.050943][ T5710] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1106.051876][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.054892][ T5710] usb 2-1: config 0 descriptor?? [ 1106.176843][ T31] audit: type=1400 audit(1791926878.136:570): avc: denied { map_create } for pid=13428 comm="syz.0.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1106.266248][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.266499][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.343821][ T5710] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1106.395520][ T31] audit: type=1400 audit(1791926878.356:571): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1106.545195][ T5710] [drm:udl_init] *ERROR* Selecting channel failed [ 1106.568374][ T31] audit: type=1400 audit(1791926878.526:572): avc: denied { mounton } for pid=13437 comm="syz.4.1810" path="/349/file0" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1106.570068][ T5710] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1106.570087][ T5710] [drm] Initialized udl on minor 1 [ 1106.573631][ T5710] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1106.573905][ T5710] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1106.579925][ T5710] usb 2-1: USB disconnect, device number 58 [ 1106.587799][ T5718] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1107.546891][ T5718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1107.669996][T13445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.749677][T13451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.282883][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.282932][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.304518][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1110.304534][ T31] audit: type=1400 audit(1791926882.266:577): avc: denied { map_read map_write } for pid=13461 comm="syz.4.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1110.322118][ T31] audit: type=1400 audit(1791926882.286:578): avc: denied { bind } for pid=13461 comm="syz.4.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1110.323517][ T31] audit: type=1400 audit(1791926882.286:579): avc: denied { write } for pid=13461 comm="syz.4.1817" path="socket:[40479]" dev="sockfs" ino=40479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1111.373451][ T31] audit: type=1400 audit(1791926882.766:580): avc: denied { read } for pid=13461 comm="syz.4.1817" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1111.373501][ T31] audit: type=1400 audit(1791926882.766:581): avc: denied { open } for pid=13461 comm="syz.4.1817" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1111.531430][T13469] Bluetooth: MGMT ver 1.23 [ 1111.534075][ T31] audit: type=1400 audit(1791926883.496:582): avc: denied { map } for pid=13468 comm="syz.1.1819" path="socket:[40484]" dev="sockfs" ino=40484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1111.534392][ T31] audit: type=1400 audit(1791926883.496:583): avc: denied { read accept } for pid=13468 comm="syz.1.1819" path="socket:[40484]" dev="sockfs" ino=40484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1111.614103][T13469] jffs2: notice: (13469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1111.642088][ T31] audit: type=1400 audit(1791926883.606:584): avc: denied { setattr } for pid=13468 comm="syz.1.1819" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1111.955937][ T30] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1112.080943][ T30] usb 2-1: device descriptor read/64, error -71 [ 1112.310027][T11359] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1112.328431][ T30] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1112.460047][ T30] usb 2-1: device descriptor read/64, error -71 [ 1112.460124][T11359] usb 4-1: Using ep0 maxpacket: 32 [ 1112.486856][T11359] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1112.588017][ T30] usb usb2-port1: attempt power cycle [ 1112.597366][T11359] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1112.597394][T11359] usb 4-1: config 0 has no interface number 0 [ 1112.597427][T11359] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.597448][T11359] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1112.597473][T11359] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1112.597498][T11359] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1112.597522][T11359] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1112.597544][T11359] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1112.597570][T11359] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1112.701397][T11359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.701424][T11359] usb 4-1: Product: syz [ 1112.701440][T11359] usb 4-1: Manufacturer: syz [ 1112.701455][T11359] usb 4-1: SerialNumber: syz [ 1112.728954][T11359] usb 4-1: config 0 descriptor?? [ 1112.742616][T13479] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1112.747469][T11359] usb 4-1: expecting 3 got 2 endpoints! Bailing out. [ 1112.858119][ T31] audit: type=1400 audit(1791926884.816:585): avc: denied { create } for pid=13483 comm="syz.2.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1112.882647][ T31] audit: type=1400 audit(1791926884.846:586): avc: denied { setopt } for pid=13483 comm="syz.2.1822" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1112.897528][T13484] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.948122][ T9301] usb 4-1: USB disconnect, device number 50 [ 1113.028802][T13491] FAULT_INJECTION: forcing a failure. [ 1113.028802][T13491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.028824][T13491] CPU: 1 UID: 0 PID: 13491 Comm: syz.2.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.028840][T13491] Tainted: [L]=SOFTLOCKUP [ 1113.028845][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1113.028851][T13491] Call Trace: [ 1113.028855][T13491] [ 1113.028860][T13491] dump_stack_lvl+0x100/0x190 [ 1113.028881][T13491] should_fail_ex.cold+0x5/0xa [ 1113.028898][T13491] _copy_to_user+0x32/0xd0 [ 1113.028916][T13491] simple_read_from_buffer+0xcb/0x170 [ 1113.028935][T13491] proc_fail_nth_read+0x1af/0x230 [ 1113.028952][T13491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.028970][T13491] ? rw_verify_area+0xce/0x6d0 [ 1113.028983][T13491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.029000][T13491] vfs_read+0x1e4/0xb40 [ 1113.029014][T13491] ? lock_acquire+0x1d1/0x380 [ 1113.029027][T13491] ? __fget_files+0x34/0x3d0 [ 1113.029043][T13491] ? __pfx_vfs_read+0x10/0x10 [ 1113.029060][T13491] ? find_held_lock+0x2b/0x80 [ 1113.029077][T13491] ? __fget_files+0x215/0x3d0 [ 1113.029096][T13491] ? __fget_files+0x21f/0x3d0 [ 1113.029115][T13491] ksys_read+0x12a/0x250 [ 1113.029129][T13491] ? __pfx_ksys_read+0x10/0x10 [ 1113.029146][T13491] do_syscall_64+0x123/0x790 [ 1113.029164][T13491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.029176][T13491] RIP: 0033:0x7fcdde95eb0e [ 1113.029186][T13491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1113.029196][T13491] RSP: 002b:00007fcddcbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.029208][T13491] RAX: ffffffffffffffda RBX: 00007fcddcbf66c0 RCX: 00007fcdde95eb0e [ 1113.029215][T13491] RDX: 000000000000000f RSI: 00007fcddcbf60a0 RDI: 0000000000000005 [ 1113.029222][T13491] RBP: 00007fcddcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.029229][T13491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.029236][T13491] R13: 00007fcddec26038 R14: 00007fcddec25fa0 R15: 00007fff7abb96e8 [ 1113.029251][T13491] [ 1113.083045][ T30] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1113.139733][ T30] usb 2-1: device descriptor read/8, error -71 [ 1114.325303][ T30] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1114.350604][ T30] usb 2-1: device descriptor read/8, error -71 [ 1115.810159][ T30] usb usb2-port1: unable to enumerate USB device [ 1115.876359][ T5602] ------------[ cut here ]------------ [ 1115.876372][ T5602] kernel BUG at fs/jffs2/nodelist.c:462! [ 1115.876393][ T5602] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1115.893851][ T5602] CPU: 1 UID: 0 PID: 5602 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.904861][ T5602] Tainted: [L]=SOFTLOCKUP [ 1115.909164][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1115.919196][ T5602] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 1115.925085][ T5602] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 45 80 fe 90 <0f> 0b e8 8a 87 f4 fe e9 5b fe ff ff e8 50 87 f4 fe e9 59 ff ff ff [ 1115.944679][ T5602] RSP: 0018:ffffc90002f0fab8 EFLAGS: 00010293 [ 1115.950731][ T5602] RAX: 0000000000000000 RBX: ffff88802d6d0000 RCX: 0000000000000000 [ 1115.958686][ T5602] RDX: ffff888034e64b00 RSI: ffffffff838c009e RDI: ffff8880743dbea0 [ 1115.966663][ T5602] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1005ada06c [ 1115.974624][ T5602] R10: ffff88802d6d0363 R11: 0000000000000000 R12: ffff88803f6e3700 [ 1115.982578][ T5602] R13: dffffc0000000000 R14: ffff8880743dbe80 R15: ffff88803f6e37b0 [ 1115.990531][ T5602] FS: 000055556b4b9500(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 1115.999450][ T5602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.006027][ T5602] CR2: 000055556b4d4a48 CR3: 000000005bb7f000 CR4: 00000000003526f0 [ 1116.013993][ T5602] Call Trace: [ 1116.017253][ T5602] [ 1116.020166][ T5602] jffs2_do_clear_inode+0x3ca/0x470 [ 1116.025349][ T5602] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 1116.030803][ T5602] evict+0x3c2/0xad0 [ 1116.034689][ T5602] ? list_lru_del+0xba/0x2f0 [ 1116.039257][ T5602] ? list_lru_del+0xba/0x2f0 [ 1116.043834][ T5602] ? __pfx_evict+0x10/0x10 [ 1116.048226][ T5602] ? do_raw_spin_unlock+0x145/0x1e0 [ 1116.053409][ T5602] ? find_held_lock+0x2b/0x80 [ 1116.058068][ T5602] ? find_held_lock+0x2b/0x80 [ 1116.062730][ T5602] dispose_list+0x117/0x1e0 [ 1116.067212][ T5602] evict_inodes+0x473/0x710 [ 1116.071694][ T5602] ? __pfx_evict_inodes+0x10/0x10 [ 1116.076697][ T5602] ? sync_blockdev+0x51/0x70 [ 1116.081277][ T5602] generic_shutdown_super+0xc8/0x360 [ 1116.086558][ T5602] kill_mtd_super+0x1d/0x80 [ 1116.091058][ T5602] jffs2_kill_sb+0x7c/0xb0 [ 1116.095480][ T5602] deactivate_locked_super+0xbd/0x130 [ 1116.100842][ T5602] deactivate_super+0xea/0x110 [ 1116.105608][ T5602] cleanup_mnt+0xb7/0x160 [ 1116.109919][ T5602] task_work_run+0x150/0x240 [ 1116.114505][ T5602] ? __pfx_task_work_run+0x10/0x10 [ 1116.119603][ T5602] exit_to_user_mode_loop+0x1d8/0x700 [ 1116.124970][ T5602] ? rcu_is_watching+0x13/0xc0 [ 1116.129719][ T5602] do_syscall_64+0x661/0x790 [ 1116.134299][ T5602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.140172][ T5602] RIP: 0033:0x7f50fc39f517 [ 1116.144574][ T5602] Code: a2 c7 05 dc 61 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1116.164196][ T5602] RSP: 002b:00007ffcad638858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1116.172602][ T5602] RAX: 0000000000000000 RBX: 00007f50fc434ccb RCX: 00007f50fc39f517 [ 1116.180552][ T5602] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcad638910 [ 1116.188531][ T5602] RBP: 00007ffcad638910 R08: 00007ffcad639910 R09: 00000000ffffffff [ 1116.196499][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcad6399a0 [ 1116.204476][ T5602] R13: 00007f50fc434ccb R14: 000000000010f65a R15: 00007ffcad6399e0 [ 1116.212448][ T5602] [ 1116.215481][ T5602] Modules linked in: [ 1116.219918][ T5602] ---[ end trace 0000000000000000 ]--- [ 1116.222146][T13505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1116.243562][T13502] FAULT_INJECTION: forcing a failure. [ 1116.243562][T13502] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.243594][T13502] CPU: 1 UID: 0 PID: 13502 Comm: syz.2.1829 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1116.243623][T13502] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1116.243632][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.243645][T13502] Call Trace: [ 1116.243652][T13502] [ 1116.243660][T13502] dump_stack_lvl+0x100/0x190 [ 1116.243693][T13502] should_fail_ex.cold+0x5/0xa [ 1116.243716][T13502] ? kmem_cache_alloc_node_noprof+0x6e/0x6e0 [ 1116.243745][T13502] should_failslab+0xc2/0x120 [ 1116.243772][T13502] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1116.243796][T13502] ? __alloc_skb+0x5b7/0x710 [ 1116.243828][T13502] ? __alloc_skb+0x140/0x710 [ 1116.243857][T13502] __alloc_skb+0x140/0x710 [ 1116.243884][T13502] ? __alloc_skb+0x5b7/0x710 [ 1116.243913][T13502] ? __pfx___alloc_skb+0x10/0x10 [ 1116.243944][T13502] ? raw_getfrag+0x23c/0x2a0 [ 1116.243971][T13502] __ip_append_data+0x2c95/0x44d0 [ 1116.243993][T13502] ? __pfx_raw_getfrag+0x10/0x10 [ 1116.244018][T13502] ? __pfx___ip_append_data+0x10/0x10 ** replaying previous printk message ** [ 1116.244018][T13502] ? __pfx___ip_append_data+0x10/0x10 [ 1116.244038][T13502] ? __asan_memcpy+0x3c/0x60 [ 1116.244057][T13502] ip_append_data+0x10f/0x1a0 [ 1116.244079][T13502] ? __pfx_raw_getfrag+0x10/0x10 [ 1116.244103][T13502] raw_sendmsg+0xcc0/0x3770 [ 1116.244130][T13502] ? __pfx_raw_sendmsg+0x10/0x10 [ 1116.244155][T13502] ? avc_has_perm+0x135/0x1e0 [ 1116.244175][T13502] ? __pfx_avc_has_perm+0x10/0x10 [ 1116.244193][T13502] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 1116.244239][T13502] ? __pfx_raw_sendmsg+0x10/0x10 [ 1116.244266][T13502] inet_sendmsg+0x11c/0x140 [ 1116.244296][T13502] ____sys_sendmsg+0x9c9/0xbe0 [ 1116.244318][T13502] ? __pfx_inet_sendmsg+0x10/0x10 [ 1116.244346][T13502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.244375][T13502] ___sys_sendmsg+0x190/0x1e0 [ 1116.244400][T13502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.244423][T13502] ? futex_wait+0x11e/0x370 [ 1116.244444][T13502] ? rcu_is_watching+0x13/0xc0 [ 1116.244475][T13502] __sys_sendmsg+0x160/0x210 [ 1116.244492][T13502] ? __pfx___sys_sendmsg+0x10/0x10 [ 1116.244522][T13502] do_syscall_64+0x123/0x790 [ 1116.244550][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.244571][T13502] RIP: 0033:0x7fcdde99e2d9 [ 1116.244586][T13502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.244603][T13502] RSP: 002b:00007fcddcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.244622][T13502] RAX: ffffffffffffffda RBX: 00007fcddec25fa0 RCX: 00007fcdde99e2d9 [ 1116.244633][T13502] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 1116.244645][T13502] RBP: 00007fcddea35888 R08: 0000000000000000 R09: 0000000000000000 [ 1116.244656][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.244670][T13502] R13: 00007fcddec26038 R14: 00007fcddec25fa0 R15: 00007fff7abb96e8 [ 1116.244686][T13502] [ 1116.246976][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1116.246990][ T31] audit: type=1400 audit(1791926888.206:589): avc: denied { write } for pid=13501 comm="syz.2.1829" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1116.252878][T13508] FAULT_INJECTION: forcing a failure. [ 1116.252878][T13508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.252902][T13508] CPU: 0 UID: 0 PID: 13508 Comm: syz.4.1831 Tainted: G D L syzkaller #0 PREEMPT(full) [ 1116.252925][T13508] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 1116.252931][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1116.252940][T13508] Call Trace: [ 1116.252945][T13508] [ 1116.252952][T13508] dump_stack_lvl+0x100/0x190 [ 1116.252978][T13508] should_fail_ex.cold+0x5/0xa [ 1116.252999][T13508] _copy_to_user+0x32/0xd0 [ 1116.253027][T13508] simple_read_from_buffer+0xcb/0x170 [ 1116.253050][T13508] proc_fail_nth_read+0x1af/0x230 [ 1116.253074][T13508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1116.253097][T13508] ? security_file_permission+0x76/0x210 [ 1116.253120][T13508] ? rw_verify_area+0xce/0x6d0 [ 1116.253136][T13508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1116.253158][T13508] vfs_read+0x1e4/0xb40 [ 1116.253177][T13508] ? __pfx_vfs_read+0x10/0x10 [ 1116.253194][T13508] ? rcu_is_watching+0x13/0xc0 [ 1116.253218][T13508] ? __fget_files+0x21f/0x3d0 [ 1116.253241][T13508] ksys_read+0x12a/0x250 [ 1116.253259][T13508] ? __pfx_ksys_read+0x10/0x10 [ 1116.253278][T13508] ? rcu_is_watching+0x13/0xc0 [ 1116.253299][T13508] do_syscall_64+0x123/0x790 [ 1116.253322][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.253338][T13508] RIP: 0033:0x7ff65cf5eb0e [ 1116.253350][T13508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1116.253364][T13508] RSP: 002b:00007ff65dea8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.253380][T13508] RAX: ffffffffffffffda RBX: 00007ff65dea96c0 RCX: 00007ff65cf5eb0e [ 1116.253391][T13508] RDX: 000000000000000f RSI: 00007ff65dea90a0 RDI: 0000000000000003 [ 1116.253400][T13508] RBP: 00007ff65dea9090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.253409][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.253419][T13508] R13: 00007ff65d226038 R14: 00007ff65d225fa0 R15: 00007ffca5f943b8 [ 1116.253434][T13508] [ 1116.341296][ T31] audit: type=1400 audit(1791926888.306:590): avc: denied { read append } for pid=13501 comm="syz.2.1829" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1116.341362][ T31] audit: type=1400 audit(1791926888.306:591): avc: denied { open } for pid=13501 comm="syz.2.1829" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1116.357321][ T31] audit: type=1400 audit(1791926888.316:592): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1116.382844][ T5602] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 1116.382872][ T5602] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 f2 45 80 fe 90 <0f> 0b e8 8a 87 f4 fe e9 5b fe ff ff e8 50 87 f4 fe e9 59 ff ff ff [ 1116.382888][ T5602] RSP: 0018:ffffc90002f0fab8 EFLAGS: 00010293 [ 1116.382902][ T5602] RAX: 0000000000000000 RBX: ffff88802d6d0000 RCX: 0000000000000000 [ 1116.382912][ T5602] RDX: ffff888034e64b00 RSI: ffffffff838c009e RDI: ffff8880743dbea0 [ 1116.382923][ T5602] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1005ada06c [ 1116.382933][ T5602] R10: ffff88802d6d0363 R11: 0000000000000000 R12: ffff88803f6e3700 [ 1116.382943][ T5602] R13: dffffc0000000000 R14: ffff8880743dbe80 R15: ffff88803f6e37b0 [ 1116.382953][ T5602] FS: 000055556b4b9500(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1116.382969][ T5602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1116.382980][ T5602] CR2: 00007fee8f9f12f8 CR3: 000000005bb7f000 CR4: 00000000003526f0 [ 1116.382992][ T5602] Kernel panic - not syncing: Fatal exception [ 1116.971234][ T5602] Kernel Offset: disabled [ 1116.975536][ T5602] Rebooting in 86400 seconds..