last executing test programs: 10.753380083s ago: executing program 0 (id=896): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) r1 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6d3cbbb62532c269dca454cb53b94ab848259001ac948c5fdb400a57c261c2288359c48f8d9c550fcf34d669d822bc6192565eb908c0134e07f3dd890ca33531", 0x40}, 0x48, r1) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) acct(&(0x7f00000001c0)='./file0\x00') (fail_nth: 2) 10.192692989s ago: executing program 0 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a, 0x10610}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x181, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x25, 0x4, 0x1, 0x1, 0x173, 0x67, 0x0, 0x0, 0x2, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0xf, 0xdd, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x1e, 0x3, 0x7, [{@rand_addr=0x64010101, 0x3}, {@rand_addr=0x64010100, 0xff}, {@rand_addr=0x64010100, 0x9000000}, {@local, 0x5}]}, @generic={0x88, 0x4, "f6f4"}, @lsrr={0x83, 0x1b, 0x74, [@loopback, @empty, @multicast2, @empty, @local, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x91, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x3ff}, {@multicast2, 0x8}]}, @noop, @noop, @timestamp={0x44, 0x10, 0x79, 0x0, 0x0, [0x9, 0x10000, 0x2]}]}}, {0x11, 0x7, 0x0, @remote, "628e5c0ee3949964f3a7ac72dba093d497f018541aa54845db351d85a6f889b0ecc08b4adb8d3ce7e245495853b905363cb374d69d8b2302ba0a81cfa1629e2cc55274b4a0cd7f99b7ddf966f7c41943cebbafc1bc8197d49631751fc9e1405f74c117248cc088d312f51eb0cb9fb4125bef54aac9eab31b0bbcf97b2d279a4b267bddbb2f96ebb3850130af361ca12cedc92fa5870d9e96b3f9e253a1960105ead0ccac7301c1632f4caf8e07b132f66c3bcfbc1aeeead8a4b089313bed31f79155eddebd3f3683f645db7237365f0c352d8923b7aaf7"}}}}}, 0x0) 10.162832681s ago: executing program 2 (id=899): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 10.145186268s ago: executing program 4 (id=900): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304859) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 10.083099785s ago: executing program 2 (id=901): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) lchown(&(0x7f00000004c0)='./file1\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x80000, {0x5, 0x0, 0x8001, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f00000000c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.06443514s ago: executing program 4 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) dup3(r3, r3, 0x80000) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, 0x0, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x60, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 10.008678874s ago: executing program 0 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syslog(0x4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0xfffc}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, 0x0) 9.849173602s ago: executing program 2 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x80085610, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000000)=@overlay={0x86, 0x4, 0x4, 0x70004, 0xe, {}, {0x1, 0x0, 0x0, 0x80, 0x2, 0x0, "c0500930"}, 0x3e, 0x3, {}, 0x72}) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000240)={0x3, "2a04e427fb82dad6ee8f33bcd2c8473d4e55863e4303205656dfce110ea17948", 0x3, 0x1}) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@link_local, @broadcast, @void, {@can={0xc, {{0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "589c72282770464c"}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 7.898831931s ago: executing program 0 (id=905): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_usb_connect$uac1(0x6, 0xae, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x7, 0x0, 0x85, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x9}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x8, 0x3], 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x2, 0x1, "f9da72c3e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0xf, "90d04fdd"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x4, 0x1e, {0x7, 0x25, 0x1, 0x80, 0x1, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc, 0x2, 0xc, 0x0, '.', "6455da"}, @as_header={0x7, 0x24, 0x1, 0xd4, 0xf8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x4, {0x7, 0x25, 0x1, 0x81, 0x3, 0xa}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x0, 0x88, 0x4, 0x10, 0x81}, 0xc0, &(0x7f00000003c0)={0x5, 0xf, 0xc0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "1552d7b14b222c7528efa6ee4221eae0"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x9, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x10, 0xbf, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x2, 0x6, 0x2323, 0x2}, @generic={0x81, 0x10, 0x1, "44a3b5243f418383f9411c469482ba7ad2905d5760f8a15af7f327cef645d92006792d81cf575c4baf30e3b5546f08f6c01851c8452961c38d0e5556f86b965f154068418de23cf5ea5ebf4ff1cf39d7636368f9513c372a6bc7fa3d6a16143965ec7667b076f4a44e92aa38ee846628a9412df47dc8406c63943c9114a9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0x7f, 0xf}]}, 0x2, [{0x59, &(0x7f0000000480)=@string={0x59, 0x3, "b58d6fb5a6c1534c936602635175b4819ddc28dc5f1983d257bece34d668d621e658c0060607a8de9ef39fadd41a5b645f06fb3e7f12bde5b69b334f59ec124baa7f3e4a1701f37d4fd36b3f52356e1f5ae60bb3fbc87f"}}, {0xd7, &(0x7f0000000500)=@string={0xd7, 0x3, "1a29f18b7b7334ac8843b88f110d013b846346cf14ee46cf11d3603a1eef0f2187c742ce81c8a33e904e55670fb5354ed9eed2334cf96ae52e941dc7915d55b06fcce19f0f93d664b9ac11e6370995bb84ea368afa433fb786c1f7a343dc454f38df4d3aa53581f1ec650f7539bb6bf435dc9ebac74e309d008a65f6a36e6f38245c4be9651b018d783dfec8c5d2d73c7cf1dc350e0b3e75fa945f853cf4043f0f6249954fa64d1175ad7250522e78af461078959fd9bf55db5ee8f01bed651b9715c79a3c0a8dedc8388b6d6beb98db0795fa67ee"}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x0, 0x10, 0xc4, {0xc4, 0x8, "f6a12dc233a7c5508e793e2187dc83ae4a674042824df161290f8229280325ea8b33e85112c76d30ad53032235b303e768d137aa25b24bbfc52e7daf18200d56a5a618a06446a5a7879ef4c2e6cff7e72fc03b403edc95fbad12852bd267398b064034c188118eef6f224512fbf76a0dd5024fb9db83eaaeabbac88debae3985c23b800213ead85fffc90a70ab91052d234ce45937442f0145153c56cb3c96a68de9b0bb48acf8de782ee4759cb1aa456251054b531fbd3e6d9c913144779bed7a6a"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x18, 0x81, "8ebd448de9abfdeefc4f50b4fa29f192290971cc434057f58ebad2cd592bcdc8ff8095094240b0ff47a1aa968fe5c4ba8ee425159046e02507d641b7e53f96edaa0bb71309e5439c3d69f364f028938f15b3f4c57a8436aac6e04ec7eb4d6b2469853b6584bbd9441c0cc3ee6fd8df88c4a6ea6d9948d9147826099525b8d6851b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8e}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)={0x20, 0x81, 0x2, "af00"}, &(0x7f00000008c0)={0x20, 0x82, 0x1, 'J'}, &(0x7f0000000900)={0x20, 0x83, 0x1, "02"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "3c05"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "8d6f2b"}}) syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x48005}, 0x8080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000004085000000820000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 7.833471483s ago: executing program 4 (id=906): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) 7.580129238s ago: executing program 3 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) fgetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '\x00'}, &(0x7f0000000080)=""/14, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$key(0xf, 0x3, 0x2) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0xef5, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r9, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) 7.016338685s ago: executing program 1 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) dup3(r3, r3, 0x80000) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, 0x0, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x60, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 6.220272684s ago: executing program 3 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syslog(0x4, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) 6.039359343s ago: executing program 1 (id=912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd27, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x6, 0xfc, 0x1, 0x0, 0x6}}, 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 5.30000905s ago: executing program 3 (id=913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) 4.467973005s ago: executing program 4 (id=914): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000c0007800800124000060000050001000600", @ANYRESDEC=r0], 0x4c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESOCT=r3, @ANYRESHEX=0x0], 0x6) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) write(0xffffffffffffffff, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c", 0x89) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000400), 0x4) close(0x3) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240500000000000904020002ffffff0009050b"], 0x0) syz_emit_ethernet(0x256, &(0x7f00000020c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6043009302203afffe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000000000000220aa78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a0015b37adac15084dbaf736b41e5af0502000100000000000000000800ee000418fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbd2dcb6862b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978021d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808ab33895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d8931000000"], 0x0) 4.433604838s ago: executing program 3 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syslog(0x4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0xfffc}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, 0x0) 4.39257563s ago: executing program 2 (id=916): socket(0x10, 0x803, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0x8, 0x6, 0x4) 4.222236731s ago: executing program 0 (id=917): keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x2d, 0xfffffffffffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') r1 = timerfd_create(0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x2, 0xffffffffff800000, 0x0, 0x100, 0x4, 0x400, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x2, 0x2, 0x5, 0x20000, 0x3, 0x55d0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r8, r8, 0x0) r9 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 4.202076084s ago: executing program 1 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) fcntl$setsig(r0, 0xa, 0x2d) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0xa4}}, 0xa4}}, 0x0) 3.616810971s ago: executing program 2 (id=919): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) 3.615672527s ago: executing program 1 (id=920): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) dup(r1) ftruncate(0xffffffffffffffff, 0x2007ffc) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0xfff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.7086102s ago: executing program 1 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r7, 0x1, 0x100000000, 0x10000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01030000000000002f229c0d058be5cffc0f00003400000008000100706369001100020030eae35fc3bd3030303a30303a31302e3000000000"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x200000c0) 2.689470998s ago: executing program 2 (id=922): keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x2d, 0xfffffffffffffff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') r1 = timerfd_create(0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x2, 0xffffffffff800000, 0x0, 0x100, 0x4, 0x400, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x2, 0x2, 0x5, 0x20000, 0x3, 0x55d0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r8, r8, 0x0) r9 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r9, 0xee00, 0xffffffffffffffff) 2.667626248s ago: executing program 3 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syslog(0x4, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) 1.412565374s ago: executing program 3 (id=924): prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102505a8d500000102030109021b000101000000090400ff020701010009050102000003000065a24665df72c7ec2801ed60ed211bae09988c"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000002a00)=ANY=[@ANYBLOB="00000080e80900818e7f746a71cbe98dec77ebae2af8113ab3f6a1d49ffc3ea2ee36ccccab472924fb3f3256fdb1dd6907ca1de29e2a5052d3d26cda4d0512c1da48085418f2a4f5c6f42ef1"], 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0xfeff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x60b, 0x0) 1.275671175s ago: executing program 1 (id=925): r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0xf8, 0x5, 0x5, 0x11, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0x1400, 0x2}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYBLOB="00e827bd7000fedbdf2506000000080002000400000005000500000180080006001900000014000400200100000000000000000000000000020400068005000500b300000008000200070000005b0001801400000000000000000000000000000000000001080007006a05276fd504a05f251698901ae9d217", @ANYRES32=0x0, @ANYBLOB="089d7d8d", @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x800, 0x0) socket$inet6(0xa, 0x3, 0x1000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="0800b79f", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000140), 0x2, 0x480) ioctl$MON_IOCQ_URB_LEN(r11, 0x9201) r12 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$khugepaged_scan(r12, &(0x7f0000000040), 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.262672046s ago: executing program 0 (id=926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000000000950000000500000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c0017"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)=@generic={0x8}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r7 = timerfd_create(0x0, 0x800) r8 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x14, r11, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4084) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x18000, 0x2) lseek(r12, 0x3, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r11, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc0}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004040}, 0x885) 1.197931535s ago: executing program 4 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 0s ago: executing program 4 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x9) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="66d54a275040904df6f2b4a16a0a4fdef413cdbaf4980d14e83b75fc9caa6e0d5d89a670a58c8f380edf7ea7a79df5abfb7fbc105fbbf1851d9cfe359d2eb081510dae4be82de57da5f0fee6286fa7e117511ccd35a34ab1b54bac86"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}, 0x4801) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/48, 0x30}], 0x1}, 0x18}], 0x1, 0x101, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) kernel console output (not intermixed with test programs): ect, device number 41 [ 329.622202][ T8463] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.205629][ T973] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 330.205804][ T973] asix 2-1:0.0: probe with driver asix failed with error -71 [ 330.211586][ T973] usb 2-1: USB disconnect, device number 40 [ 332.520939][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 332.520953][ T30] audit: type=1400 audit(1751033699.998:338): avc: denied { append } for pid=8476 comm="syz.3.607" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.635581][ T8482] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 332.656136][ T8477] 9pnet_fd: Insufficient options for proto=fd [ 332.694676][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.711222][ T8482] team0: Port device bond0 added [ 332.844777][ T5923] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 333.354051][ T5933] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 333.520501][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 333.530222][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 333.537025][ T5923] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 333.563749][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.686311][ T8489] syzkaller0: entered promiscuous mode [ 333.694228][ T8489] syzkaller0: entered allmulticast mode [ 333.755913][ T5933] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 333.785135][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.799286][ T30] audit: type=1800 audit(1751033701.278:339): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.606" name="/" dev="9p" ino=2 res=0 errno=0 [ 333.838470][ T5933] usb 3-1: Product: syz [ 333.859241][ T5933] usb 3-1: Manufacturer: syz [ 333.899399][ T5923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 333.908262][ T5923] pvrusb2: ********** [ 333.913683][ T5923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 333.924760][ T5923] pvrusb2: Important functionality might not be entirely working. [ 333.958129][ T5923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 333.971162][ T5923] pvrusb2: ********** [ 334.016736][ T5933] usb 3-1: SerialNumber: syz [ 334.060264][ T48] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 334.075138][ T30] audit: type=1400 audit(1751033701.568:340): avc: denied { mount } for pid=8474 comm="syz.1.604" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.102007][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.113829][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.134577][ T2326] pvrusb2: Invalid write control endpoint [ 334.142665][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 334.262267][ T30] audit: type=1400 audit(1751033701.648:341): avc: denied { setopt } for pid=8493 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.283765][ T48] usb 4-1: Using ep0 maxpacket: 16 [ 334.369280][ T5923] usb 2-1: USB disconnect, device number 41 [ 334.788407][ T48] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.796615][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 334.820886][ T48] usb 4-1: config 0 has no interface number 0 [ 334.834306][ T48] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 334.843659][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.848524][ T2326] pvrusb2: Invalid write control endpoint [ 334.858935][ T48] usb 4-1: Product: syz [ 334.868290][ T48] usb 4-1: Manufacturer: syz [ 334.983662][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 335.000335][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.032189][ T48] usb 4-1: SerialNumber: syz [ 335.036917][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.058363][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.073145][ T5933] usb 3-1: palm_os_4_probe - error -110 getting connection info [ 335.083376][ T5933] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 335.084392][ T2326] pvrusb2: Device being rendered inoperable [ 335.093612][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 335.207952][ T48] usb 4-1: config 0 descriptor?? [ 335.217144][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.236359][ T5933] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 335.248881][ T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.260292][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.265535][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.377348][ T8506] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 335.550134][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 335.567622][ T5933] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 335.577914][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.592432][ T48] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 335.604518][ T5933] usb 3-1: USB disconnect, device number 36 [ 335.622092][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.644815][ T2326] pvrusb2: Attached sub-driver cx25840 [ 335.653322][ T5933] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 335.717101][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.728835][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.737674][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 335.744842][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.768304][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 335.777181][ T8504] net_ratelimit: 100 callbacks suppressed [ 335.777189][ T8504] openvswitch: netlink: Flow key attr not present in new flow. [ 335.813267][ T5933] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 335.823605][ T5933] visor 3-1:1.0: device disconnected [ 335.831576][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.937550][ T8506] syz.1.613 (8506) used greatest stack depth: 21080 bytes left [ 336.389394][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 336.401401][ T24] usbtmc 1-1:16.0: can't read capabilities [ 336.515874][ T30] audit: type=1400 audit(1751033704.008:342): avc: denied { ioctl } for pid=8515 comm="syz.1.616" path="socket:[20398]" dev="sockfs" ino=20398 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.516726][ T8516] netlink: 'syz.1.616': attribute type 4 has an invalid length. [ 336.628518][ T30] audit: type=1400 audit(1751033704.118:343): avc: denied { create } for pid=8515 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.710834][ T30] audit: type=1400 audit(1751033704.138:344): avc: denied { getopt } for pid=8515 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.592693][ T10] usb 4-1: USB disconnect, device number 57 [ 339.441929][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 339.490255][ T5933] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 339.610410][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 339.619000][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.629555][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.649530][ T24] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.664818][ T24] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.682274][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.695925][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 339.706865][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.713646][ T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 339.749006][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 339.764006][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.772243][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.792602][ T5933] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.802314][ T24] usb 5-1: config 0 descriptor?? [ 339.815560][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.821758][ T5923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 339.845680][ T5933] usb 3-1: config 0 descriptor?? [ 339.980331][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 340.006183][ T5923] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 340.017469][ T5923] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 340.033855][ T5923] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.047292][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 340.062370][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=d5a8, bcdDevice= 0.00 [ 340.071676][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.079693][ T5923] usb 2-1: Product: syz [ 340.084231][ T5923] usb 2-1: Manufacturer: syz [ 340.092654][ T5923] usb 2-1: SerialNumber: syz [ 340.240066][ T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 340.257097][ T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 340.271627][ T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 340.279748][ T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 340.292029][ T24] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 340.297812][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.314050][ T24] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 340.335837][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.336389][ T24] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 340.346204][ T5923] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 42 if 0 alt 255 proto 1 vid 0x0525 pid 0xD5A8 [ 340.448499][ T5933] usbhid 3-1:0.0: can't add hid device: -71 [ 340.448585][ T5933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.595782][ T5933] usb 3-1: USB disconnect, device number 37 [ 340.690662][ C1] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 340.899850][ T30] audit: type=1400 audit(1751033708.388:345): avc: denied { write } for pid=8528 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.920684][ T8529] sctp: [Deprecated]: syz.4.618 (pid 8529) Use of int in maxseg socket option. [ 340.920684][ T8529] Use struct sctp_assoc_value instead [ 341.840564][ T8496] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 342.900845][ T30] audit: type=1400 audit(1751033708.418:346): avc: denied { shutdown } for pid=8528 comm="syz.4.618" lport=53117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 342.935179][ T10] usb 2-1: USB disconnect, device number 42 [ 342.940604][ T5933] usb 1-1: USB disconnect, device number 46 [ 342.942960][ T10] usblp1: removed [ 343.272844][ T10] usb 5-1: USB disconnect, device number 42 [ 344.480741][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 345.680318][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 345.687720][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 345.696868][ T10] usb 2-1: config 1 has no interface number 1 [ 345.702951][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.722444][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.732362][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.771696][ T8581] overlayfs: overlapping lowerdir path [ 345.940250][ T10] usb 2-1: Product: syz [ 345.944453][ T10] usb 2-1: Manufacturer: syz [ 345.949051][ T10] usb 2-1: SerialNumber: syz [ 346.280239][ T30] audit: type=1400 audit(1751033713.768:347): avc: denied { read } for pid=8575 comm="syz.0.633" path="socket:[21251]" dev="sockfs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.308029][ T10] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 346.374628][ T30] audit: type=1400 audit(1751033713.858:348): avc: denied { create } for pid=8588 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.382966][ T8591] bpq0: entered promiscuous mode [ 346.408619][ T10] usb 2-1: USB disconnect, device number 43 [ 346.421420][ T8592] loop4: detected capacity change from 0 to 7 [ 346.454418][ T8592] Dev loop4: unable to read RDB block 7 [ 346.478767][ T8592] loop4: unable to read partition table [ 346.489756][ T30] audit: type=1400 audit(1751033713.858:349): avc: denied { ioctl } for pid=8588 comm="syz.3.636" path="socket:[21253]" dev="sockfs" ino=21253 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.519750][ T8592] loop4: partition table beyond EOD, truncated [ 346.530377][ T8592] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 346.542300][ T30] audit: type=1400 audit(1751033713.898:350): avc: denied { watch } for pid=8589 comm="syz.2.637" path="/proc/518" dev="proc" ino=21726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 346.635067][ T30] audit: type=1400 audit(1751033713.918:351): avc: denied { ioctl } for pid=8589 comm="syz.2.637" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.670261][ T5933] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 346.690262][ T30] audit: type=1400 audit(1751033714.178:352): avc: denied { read } for pid=8598 comm="syz.3.638" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.750742][ T30] audit: type=1400 audit(1751033714.178:353): avc: denied { open } for pid=8598 comm="syz.3.638" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.804935][ T30] audit: type=1400 audit(1751033714.298:354): avc: denied { nlmsg_read } for pid=8598 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.844321][ T8601] nbd: must specify at least one socket [ 347.321744][ T5933] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 347.475836][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.491010][ T30] audit: type=1400 audit(1751033714.328:355): avc: denied { ioctl } for pid=8600 comm="syz.2.639" path="socket:[21263]" dev="sockfs" ino=21263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 347.604047][ T5933] usb 5-1: config 0 descriptor?? [ 347.629029][ T5933] gspca_main: spca508-2.14.0 probing 8086:0110 [ 347.650234][ T30] audit: type=1400 audit(1751033714.598:356): avc: denied { create } for pid=8598 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.731818][ T8611] Malformed UNC in devname [ 347.731818][ T8611] [ 347.738710][ T8611] CIFS: VFS: Malformed UNC in devname [ 347.942205][ T5933] gspca_spca508: reg_read err -71 [ 347.948993][ T5933] gspca_spca508: reg_read err -71 [ 347.954401][ T5933] gspca_spca508: reg_read err -71 [ 347.964745][ T8618] netlink: 'syz.3.643': attribute type 10 has an invalid length. [ 348.414183][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.439579][ T8618] team0: Port device bond0 added [ 348.473100][ T8620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.643'. [ 348.497785][ T5933] gspca_spca508: reg_read err -71 [ 348.521206][ T5933] gspca_spca508: reg_read err -71 [ 348.586589][ T5933] gspca_spca508: reg write: error -71 [ 348.596666][ T5933] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 348.625255][ T5933] usb 5-1: USB disconnect, device number 43 [ 349.149938][ T8630] syzkaller0: entered promiscuous mode [ 349.155743][ T8630] syzkaller0: entered allmulticast mode [ 349.249961][ T8633] syzkaller0: entered promiscuous mode [ 349.249977][ T8633] syzkaller0: entered allmulticast mode [ 349.540441][ T5888] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 349.580482][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 349.707933][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.740253][ T5933] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 349.760335][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 349.760867][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 349.910020][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.925023][ T5888] usb 2-1: config 0 has no interface number 0 [ 349.943449][ T5888] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 349.955476][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.970495][ T24] usb 5-1: config 0 has no interface number 0 [ 349.981807][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 349.989506][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 350.000711][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.013371][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.019599][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.021516][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.049757][ T5933] usb 3-1: Product: syz [ 350.058005][ T5933] usb 3-1: Manufacturer: syz [ 350.064695][ T24] usb 5-1: Product: syz [ 350.069184][ T24] usb 5-1: Manufacturer: syz [ 350.073833][ T5933] usb 3-1: SerialNumber: syz [ 350.073840][ T5888] usb 2-1: Product: syz [ 350.073856][ T5888] usb 2-1: Manufacturer: syz [ 350.080875][ T5933] usb 3-1: config 0 descriptor?? [ 350.092713][ T24] usb 5-1: SerialNumber: syz [ 350.103994][ T24] usb 5-1: config 0 descriptor?? [ 350.117433][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.124469][ T5888] usb 2-1: SerialNumber: syz [ 350.130475][ T5888] usb 2-1: config 0 descriptor?? [ 350.248253][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.328755][ T5933] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.237546][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.3.658'. [ 351.272240][ T8667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.658'. [ 351.281443][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 351.291223][ T8667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.658'. [ 351.580337][ T5888] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 351.731470][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 351.738649][ T5888] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 351.761176][ T5888] usb 1-1: config 0 has no interface number 0 [ 351.767414][ T5888] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.779560][ T5888] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.789816][ T5888] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 351.799451][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.811355][ T5888] usb 1-1: config 0 descriptor?? [ 352.028983][ T5923] usb 2-1: USB disconnect, device number 44 [ 352.053244][ T5933] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 352.058365][ T10] usb 5-1: USB disconnect, device number 44 [ 352.071954][ T5933] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 352.085760][ T5933] usb 3-1: media controller created [ 352.086566][ T5827] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 352.147590][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.294815][ T8676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.657'. [ 352.360455][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 352.473293][ T5933] i2c i2c-1: Added multiplexed i2c bus 2 [ 352.483673][ T5933] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 352.494585][ T5933] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 352.514688][ T5933] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 352.530259][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 352.547542][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.572581][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.582581][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 352.596258][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 352.605729][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.673579][ T5933] DVB: Unable to find symbol r820t_attach() [ 353.120770][ T24] usb 4-1: config 0 descriptor?? [ 353.255816][ T5933] usb 3-1: USB disconnect, device number 38 [ 353.333462][ T8680] kernel profiling enabled (shift: 7) [ 353.545546][ T24] sony 0003:054C:0268.0003: item fetching failed at offset 0/2 [ 353.565143][ T24] sony 0003:054C:0268.0003: parse failed [ 353.578418][ T24] sony 0003:054C:0268.0003: probe with driver sony failed with error -22 [ 354.790388][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 354.960383][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 354.976894][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 354.986054][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.006152][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 355.018307][ T10] pvrusb2: ********** [ 355.022660][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 355.033356][ T10] pvrusb2: Important functionality might not be entirely working. [ 355.042328][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 355.054169][ T10] pvrusb2: ********** [ 355.209176][ T2326] pvrusb2: Invalid write control endpoint [ 355.314708][ T2326] pvrusb2: Invalid write control endpoint [ 355.325996][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 355.340454][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 355.348063][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 355.359418][ T2326] pvrusb2: Device being rendered inoperable [ 355.370405][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 355.379427][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 355.405844][ T2326] pvrusb2: Attached sub-driver cx25840 [ 355.412278][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 355.433250][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 355.442423][ T8691] pvrusb2: Attempted to execute control transfer when device not ok [ 355.487980][ T8681] warning: `syz.2.661' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 355.527078][ T5888] usbhid 1-1:0.4: can't add hid device: -71 [ 355.560390][ T5888] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 355.569402][ T10] usb 4-1: USB disconnect, device number 58 [ 355.594839][ T5888] usb 1-1: USB disconnect, device number 47 [ 356.138542][ T24] usb 5-1: USB disconnect, device number 45 [ 356.161749][ T5827] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 356.228925][ T8708] FAULT_INJECTION: forcing a failure. [ 356.228925][ T8708] name failslab, interval 1, probability 0, space 0, times 0 [ 356.241758][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.2.666 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 356.241783][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.241793][ T8708] Call Trace: [ 356.241800][ T8708] [ 356.241806][ T8708] dump_stack_lvl+0x16c/0x1f0 [ 356.241836][ T8708] should_fail_ex+0x512/0x640 [ 356.241859][ T8708] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 356.241891][ T8708] should_failslab+0xc2/0x120 [ 356.241915][ T8708] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 356.241939][ T8708] ? __d_alloc+0x31/0xaa0 [ 356.241968][ T8708] __d_alloc+0x31/0xaa0 [ 356.241996][ T8708] d_alloc_pseudo+0x1c/0xc0 [ 356.242015][ T8708] alloc_file_pseudo+0xcf/0x230 [ 356.242035][ T8708] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 356.242052][ T8708] ? clear_nlink+0x82/0xa0 [ 356.242082][ T8708] hugetlb_file_setup+0x4cd/0x620 [ 356.242105][ T8708] ksys_mmap_pgoff+0x189/0x5c0 [ 356.242137][ T8708] __x64_sys_mmap+0x125/0x190 [ 356.242166][ T8708] do_syscall_64+0xcd/0x4c0 [ 356.242193][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.242210][ T8708] RIP: 0033:0x7f129bf8e929 [ 356.242225][ T8708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.242241][ T8708] RSP: 002b:00007f129cd8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.242258][ T8708] RAX: ffffffffffffffda RBX: 00007f129c1b6160 RCX: 00007f129bf8e929 [ 356.242270][ T8708] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 356.242280][ T8708] RBP: 00007f129cd8b090 R08: ffffffffffffffff R09: 0000000000000000 [ 356.242291][ T8708] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000001 [ 356.242302][ T8708] R13: 0000000000000001 R14: 00007f129c1b6160 R15: 00007ffe2614cd78 [ 356.242325][ T8708] [ 356.534130][ T5827] Bluetooth: hci4: Injecting HCI hardware error event [ 356.545600][ T5827] Bluetooth: hci4: hardware error 0x00 [ 356.792308][ T5933] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 356.807381][ T8712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.070240][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 357.076699][ T5933] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.096330][ T5933] usb 4-1: config 1 has no interface number 1 [ 357.542648][ T5933] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.557337][ T5933] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.574536][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.613228][ T5933] usb 4-1: Product: syz [ 357.617514][ T5933] usb 4-1: Manufacturer: syz [ 357.633964][ T5933] usb 4-1: SerialNumber: syz [ 357.864878][ T8730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.019418][ T8733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 358.163947][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.673'. [ 358.217964][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.673'. [ 358.226967][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 358.236162][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.673'. [ 358.757756][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.746532][ T5933] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 359.799346][ T5933] usb 4-1: USB disconnect, device number 59 [ 359.855055][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.697488][ T8751] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 360.853293][ T5933] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 360.861155][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 360.861188][ T30] audit: type=1400 audit(1751033728.268:359): avc: denied { create } for pid=8760 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 361.103502][ T8751] syzkaller0: entered promiscuous mode [ 361.113903][ T8751] syzkaller0: entered allmulticast mode [ 361.139775][ T30] audit: type=1400 audit(1751033728.338:360): avc: denied { ioctl } for pid=8760 comm="syz.0.675" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22326 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 361.274664][ T5888] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 361.283406][ T5933] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.294972][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.308814][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.516911][ T8771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.584625][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.596960][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.710469][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.715054][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.762000][ T5888] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.775219][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.779175][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.794224][ T8773] SELinux: security_context_str_to_sid () failed with errno=-22 [ 361.804957][ T30] audit: type=1400 audit(1751033729.278:361): avc: denied { create } for pid=8772 comm="syz.0.679" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.851412][ T5933] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.886182][ T30] audit: type=1400 audit(1751033729.288:362): avc: denied { mounton } for pid=8772 comm="syz.0.679" path="/140/file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 361.909712][ T5888] usb 5-1: config 0 descriptor?? [ 361.923133][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 361.936101][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.953352][ T5933] usb 3-1: Product: syz [ 361.966017][ T5933] usb 3-1: Manufacturer: syz [ 361.986788][ T5933] cdc_wdm 3-1:1.0: skipping garbage [ 361.997122][ T5933] cdc_wdm 3-1:1.0: skipping garbage [ 362.013736][ T5933] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 362.019897][ T5933] cdc_wdm 3-1:1.0: Unknown control protocol [ 362.084258][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.094267][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.107173][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.129529][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.149526][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.161165][ T24] usb 2-1: Product: syz [ 362.167160][ T24] usb 2-1: Manufacturer: syz [ 362.172933][ T24] usb 2-1: SerialNumber: syz [ 362.193539][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 362.213666][ T30] audit: type=1400 audit(1751033729.708:363): avc: denied { getopt } for pid=8759 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 362.215128][ T8761] syz.2.676: attempt to access beyond end of device [ 362.215128][ T8761] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 362.247015][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 362.255188][ T8761] befs: (nbd2): unable to read superblock [ 362.619264][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.636433][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.650595][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.664761][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.676905][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.687774][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.697532][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.710916][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.719571][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.732195][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.745310][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.754126][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.755471][ T24] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 362.762383][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.781403][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.793134][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.812014][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.830058][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.862942][ T30] audit: type=1400 audit(1751033730.358:364): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.868972][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.905911][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.916809][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.928702][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.965962][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.995280][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.004129][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.012526][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.022195][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.032303][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.041305][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.049452][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.061925][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.069456][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.079543][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.088813][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.101662][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.109082][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.119318][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.127402][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.135384][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.142913][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.150369][ T5888] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.162242][ T24] usb 2-1: USB disconnect, device number 45 [ 363.186483][ T24] usblp1: removed [ 363.196541][ T5888] plantronics 0003:047F:FFFF.0004: hiddev2,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 363.221175][ T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 363.229863][ T5888] usb 5-1: USB disconnect, device number 46 [ 363.323719][ T8781] fido_id[8781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 363.375633][ T10] usb 1-1: config 8 has an invalid interface number: 22 but max is 0 [ 363.386779][ T10] usb 1-1: config 8 has no interface number 0 [ 363.393587][ T10] usb 1-1: config 8 interface 22 has no altsetting 0 [ 363.403043][ T10] usb 1-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 363.419791][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.433366][ T10] usb 1-1: Product: syz [ 363.437753][ T10] usb 1-1: Manufacturer: syz [ 363.445954][ T10] usb 1-1: SerialNumber: syz [ 363.532292][ T5923] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 363.737148][ T30] audit: type=1400 audit(1751033731.228:365): avc: denied { mounton } for pid=8778 comm="syz.0.680" path="/proc/554/task" dev="proc" ino=22562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 363.961539][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.300356][ T5923] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.374834][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.400821][ T10] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 364.435413][ T10] usb 1-1: USB disconnect, device number 48 [ 364.485697][ T5923] usb 2-1: string descriptor 0 read error: -71 [ 364.503938][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 364.519767][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.538543][ T5923] usb 2-1: can't set config #1, error -71 [ 364.546095][ T5923] usb 2-1: USB disconnect, device number 46 [ 364.866939][ T8790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.037222][ T5933] usb 3-1: USB disconnect, device number 39 [ 365.140230][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 365.266685][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 365.312289][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.322037][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.356584][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.377756][ T5923] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 365.409667][ T8802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.686'. [ 365.422184][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.686'. [ 365.431187][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 365.440968][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.686'. [ 365.512343][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 365.724908][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.745038][ T24] usb 2-1: Product: syz [ 365.749343][ T24] usb 2-1: Manufacturer: syz [ 365.880258][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 365.893537][ T5923] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.903714][ T5923] usb 5-1: config 1 has no interface number 1 [ 365.909807][ T5923] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.922974][ T24] usb 2-1: SerialNumber: syz [ 366.480640][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 366.481923][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.486592][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 366.539535][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.557830][ T5923] usb 5-1: Product: syz [ 366.572402][ T5923] usb 5-1: Manufacturer: syz [ 366.584372][ T5923] usb 5-1: SerialNumber: syz [ 366.755138][ T30] audit: type=1400 audit(1751033734.228:366): avc: denied { listen } for pid=8807 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.521589][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 367.539818][ T30] audit: type=1400 audit(1751033734.228:367): avc: denied { accept } for pid=8807 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.560517][ T30] audit: type=1400 audit(1751033734.298:368): avc: denied { create } for pid=8807 comm="syz.2.688" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 368.314520][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 368.331527][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.332495][ T30] audit: type=1400 audit(1751033735.818:369): avc: denied { read write } for pid=8787 comm="syz.1.682" name="lp0" dev="devtmpfs" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 368.382714][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.391343][ T30] audit: type=1400 audit(1751033735.818:370): avc: denied { open } for pid=8787 comm="syz.1.682" path="/dev/usb/lp0" dev="devtmpfs" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 368.474146][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 368.481091][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.496554][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.522701][ T24] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 368.547286][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.579649][ T24] usb 4-1: config 0 descriptor?? [ 368.819344][ T30] audit: type=1326 audit(1751033736.308:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db5b8e929 code=0x7ffc0000 [ 368.889272][ T30] audit: type=1326 audit(1751033736.368:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db5b8e929 code=0x7ffc0000 [ 369.248072][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 369.272575][ T30] audit: type=1326 audit(1751033736.368:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1db5b8e929 code=0x7ffc0000 [ 369.296495][ T30] audit: type=1326 audit(1751033736.368:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db5b8e929 code=0x7ffc0000 [ 369.320800][ T30] audit: type=1326 audit(1751033736.368:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8812 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db5b8e929 code=0x7ffc0000 [ 369.370256][ T5923] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 369.416390][ T5923] usb 5-1: USB disconnect, device number 47 [ 369.431107][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 369.522372][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 369.660764][ T5933] usb 2-1: USB disconnect, device number 47 [ 369.668004][ T5933] usblp0: removed [ 370.053890][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 370.080496][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.090102][ T10] usb 3-1: Product: syz [ 370.094584][ T10] usb 3-1: Manufacturer: syz [ 370.099500][ T10] usb 3-1: SerialNumber: syz [ 370.119352][ T10] usb 3-1: config 0 descriptor?? [ 370.188480][ T8838] syzkaller0: entered promiscuous mode [ 370.199357][ T8838] syzkaller0: entered allmulticast mode [ 370.247861][ T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 370.645445][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.685423][ T5933] usb 4-1: USB disconnect, device number 60 [ 370.702805][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.875516][ T10] usb 3-1: USB disconnect, device number 40 [ 370.887370][ T59] usb 3-1: Failed to submit usb control message: -71 [ 370.900563][ T5888] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 371.316513][ T59] usb 3-1: unable to send the bmi data to the device: -71 [ 371.323750][ T59] usb 3-1: unable to get target info from device [ 371.386904][ T59] usb 3-1: could not get target info (-71) [ 371.414691][ T59] usb 3-1: could not probe fw (-71) [ 371.520348][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 371.529568][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.538307][ T5888] usb 2-1: config 0 has no interface number 0 [ 371.552959][ T5888] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 371.609793][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.620247][ T5888] usb 2-1: Product: syz [ 371.624426][ T5888] usb 2-1: Manufacturer: syz [ 371.638476][ T5888] usb 2-1: SerialNumber: syz [ 371.652866][ T5888] usb 2-1: config 0 descriptor?? [ 371.691114][ T5933] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 371.714629][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.931910][ T8864] syzkaller0: entered promiscuous mode [ 371.946345][ T8864] syzkaller0: entered allmulticast mode [ 372.191619][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 372.191633][ T30] audit: type=1326 audit(1751033739.688:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129bf8e929 code=0x7fc00000 [ 372.251036][ T30] audit: type=1326 audit(1751033739.728:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129bf8e929 code=0x7fc00000 [ 372.338167][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.350221][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 372.437582][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.452582][ T5933] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 372.490878][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.590780][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 372.604838][ T30] audit: type=1326 audit(1751033740.098:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.2.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f129bf2ab19 code=0x7fc00000 [ 372.645629][ T5933] usb 1-1: config 0 descriptor?? [ 372.662176][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.722471][ T24] usb 4-1: config 0 has no interface number 0 [ 372.930794][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 373.409287][ T30] audit: type=1400 audit(1751033740.898:386): avc: denied { create } for pid=8853 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 373.428755][ T5933] usbhid 1-1:0.0: can't add hid device: -71 [ 373.441953][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.456368][ T30] audit: type=1400 audit(1751033740.898:387): avc: denied { read write } for pid=8853 comm="syz.0.698" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 373.458343][ T5933] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.491178][ T24] usb 4-1: Product: syz [ 373.495439][ T24] usb 4-1: Manufacturer: syz [ 373.505230][ T24] usb 4-1: SerialNumber: syz [ 373.512725][ T24] usb 4-1: config 0 descriptor?? [ 373.520239][ T30] audit: type=1400 audit(1751033740.898:388): avc: denied { open } for pid=8853 comm="syz.0.698" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 373.521513][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.572834][ T30] audit: type=1400 audit(1751033740.898:389): avc: denied { ioctl } for pid=8853 comm="/dev/input/even" path="socket:[22508]" dev="sockfs" ino=22508 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 373.598393][ T5933] usb 1-1: USB disconnect, device number 49 [ 373.705384][ T24] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 373.800768][ T10] usb 2-1: USB disconnect, device number 48 [ 373.800977][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 374.054519][ T30] audit: type=1400 audit(1751033741.548:390): avc: denied { create } for pid=8879 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 374.186845][ T8878] kvm: pic: non byte read [ 374.191533][ T8878] kvm: pic: non byte read [ 374.196079][ T8878] kvm: pic: non byte read [ 374.203532][ T8878] kvm: pic: non byte read [ 374.208093][ T8878] kvm: pic: non byte read [ 374.217021][ T8878] kvm: pic: level sensitive irq not supported [ 374.217076][ T8878] kvm: pic: non byte read [ 374.231061][ T8878] kvm: pic: non byte read [ 374.235727][ T8878] kvm: pic: non byte read [ 374.240659][ T8878] kvm: pic: non byte read [ 374.430263][ T5933] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 374.615703][ T5933] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 374.626116][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.634929][ T5933] usb 5-1: Product: syz [ 374.639441][ T5933] usb 5-1: Manufacturer: syz [ 374.645074][ T5933] usb 5-1: SerialNumber: syz [ 374.653357][ T5933] usb 5-1: config 0 descriptor?? [ 374.665430][ T5933] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 374.987839][ T24] usb 4-1: USB disconnect, device number 61 [ 375.236865][ T5933] gspca_sunplus: reg_r err -110 [ 375.994228][ T30] audit: type=1400 audit(1751033743.488:391): avc: denied { remount } for pid=8897 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 376.610963][ T5888] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 376.638814][ T30] audit: type=1800 audit(1751033744.128:392): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.707" name="/newroot/142/file0" dev="tmpfs" ino=753 res=0 errno=0 [ 377.022224][ T5888] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 377.088338][ T5933] usb 5-1: USB disconnect, device number 48 [ 377.168218][ T5888] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.507790][ T5888] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 377.801299][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.876195][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 377.895253][ T5888] usb 3-1: SerialNumber: syz [ 378.163383][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.535533][ T5888] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 378.569797][ T5888] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 378.599225][ T8925] capability: warning: `syz.0.713' uses deprecated v2 capabilities in a way that may be insecure [ 378.610272][ T5888] usb 3-1: USB disconnect, device number 41 [ 378.899901][ T30] audit: type=1400 audit(1751033746.388:393): avc: denied { write } for pid=8926 comm="syz.0.714" path="socket:[23672]" dev="sockfs" ino=23672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 379.135073][ T5888] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 379.149008][ T8934] netlink: 348 bytes leftover after parsing attributes in process `syz.1.717'. [ 379.272041][ T5923] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 379.279641][ T5888] usb 3-1: device descriptor read/64, error -71 [ 379.500215][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 379.967998][ T5923] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 380.000708][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.010820][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.020908][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.035936][ T8938] Cannot find add_set index 0 as target [ 380.079994][ T30] audit: type=1400 audit(1751033747.568:394): avc: denied { read append } for pid=8937 comm="syz.2.718" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 380.080259][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.119634][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.128859][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.151675][ T30] audit: type=1400 audit(1751033747.568:395): avc: denied { open } for pid=8937 comm="syz.2.718" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 380.427473][ T5923] usb 5-1: GET_CAPABILITIES returned 0 [ 380.448061][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 382.229793][ T8955] FAULT_INJECTION: forcing a failure. [ 382.229793][ T8955] name failslab, interval 1, probability 0, space 0, times 0 [ 382.243113][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.0.721 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 382.243138][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.243148][ T8955] Call Trace: [ 382.243154][ T8955] [ 382.243161][ T8955] dump_stack_lvl+0x16c/0x1f0 [ 382.243195][ T8955] should_fail_ex+0x512/0x640 [ 382.243217][ T8955] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 382.243240][ T8955] should_failslab+0xc2/0x120 [ 382.243265][ T8955] __kmalloc_cache_noprof+0x6a/0x3e0 [ 382.243285][ T8955] ? __inet_diag_dump_start+0x8f/0x7f0 [ 382.243308][ T8955] __inet_diag_dump_start+0x8f/0x7f0 [ 382.243332][ T8955] __netlink_dump_start+0x60e/0x990 [ 382.243354][ T8955] inet_diag_handler_cmd+0x282/0x2e0 [ 382.243373][ T8955] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 382.243391][ T8955] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 382.243407][ T8955] ? __pfx_inet_diag_dump+0x10/0x10 [ 382.243423][ T8955] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 382.243445][ T8955] ? __rcu_read_unlock+0x2b4/0x580 [ 382.243475][ T8955] sock_diag_rcv_msg+0x435/0x790 [ 382.243500][ T8955] netlink_rcv_skb+0x155/0x420 [ 382.243517][ T8955] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 382.243541][ T8955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.243556][ T8955] ? rcu_is_watching+0x12/0xc0 [ 382.243594][ T8955] netlink_unicast+0x53d/0x7f0 [ 382.243615][ T8955] ? __pfx_netlink_unicast+0x10/0x10 [ 382.243640][ T8955] netlink_sendmsg+0x8d1/0xdd0 [ 382.243662][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.243681][ T8955] ? security_socket_sendmsg+0x65/0x240 [ 382.243702][ T8955] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 382.243732][ T8955] sock_write_iter+0x4ff/0x5b0 [ 382.243751][ T8955] ? __pfx_sock_write_iter+0x10/0x10 [ 382.243782][ T8955] ? rcu_is_watching+0x12/0xc0 [ 382.243805][ T8955] do_iter_readv_writev+0x654/0x950 [ 382.243828][ T8955] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 382.243852][ T8955] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 382.243874][ T8955] ? rw_verify_area+0xcf/0x680 [ 382.243895][ T8955] vfs_writev+0x35f/0xde0 [ 382.243922][ T8955] ? __pfx_vfs_writev+0x10/0x10 [ 382.243948][ T8955] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 382.243983][ T8955] ? do_writev+0xd1/0x340 [ 382.244005][ T8955] ? do_writev+0x28c/0x340 [ 382.244022][ T8955] do_writev+0x28c/0x340 [ 382.244042][ T8955] ? __pfx_do_writev+0x10/0x10 [ 382.244069][ T8955] do_syscall_64+0xcd/0x4c0 [ 382.244097][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.244114][ T8955] RIP: 0033:0x7feee038e929 [ 382.244128][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.244144][ T8955] RSP: 002b:00007feee1156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 382.244162][ T8955] RAX: ffffffffffffffda RBX: 00007feee05b6160 RCX: 00007feee038e929 [ 382.244174][ T8955] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 000000000000000a [ 382.244184][ T8955] RBP: 00007feee1156090 R08: 0000000000000000 R09: 0000000000000000 [ 382.244195][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.244206][ T8955] R13: 0000000000000000 R14: 00007feee05b6160 R15: 00007fffd00c41d8 [ 382.244230][ T8955] [ 382.970605][ T8961] /dev/nullb0: Can't open blockdev [ 383.150335][ T5933] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 383.322957][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.350242][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.374581][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 383.400257][ T5933] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.430226][ T24] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 383.440127][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.459936][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.479680][ T5933] usb 3-1: Product: syz [ 383.484635][ T5933] usb 3-1: Manufacturer: syz [ 383.489254][ T5933] usb 3-1: SerialNumber: syz [ 383.511681][ T8957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.601859][ T24] usb 2-1: config 0 has an invalid interface number: 139 but max is 0 [ 383.611334][ T24] usb 2-1: config 0 has no interface number 0 [ 383.618635][ T24] usb 2-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.644800][ T24] usb 2-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 383.670831][ T24] usb 2-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 383.695689][ T24] usb 2-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 383.729174][ T24] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 383.738527][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.746643][ T24] usb 2-1: Product: syz [ 383.751880][ T24] usb 2-1: Manufacturer: syz [ 383.765064][ T24] usb 2-1: SerialNumber: syz [ 383.793746][ T24] usb 2-1: config 0 descriptor?? [ 383.825431][ T8970] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 383.833903][ T8970] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 383.928752][ T5933] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 383.942864][ T5933] cdc_ncm 3-1:1.0: bind() failure [ 384.060810][ T24] mct_u232 2-1:0.139: MCT U232 converter detected [ 384.075035][ T24] usb 2-1: MCT U232 converter now attached to ttyUSB0 [ 384.092450][ T24] usb 2-1: USB disconnect, device number 49 [ 384.116673][ T24] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 384.134469][ T24] mct_u232 2-1:0.139: device disconnected [ 384.170720][ T48] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 384.350468][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 384.402041][ T48] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 384.417150][ T48] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.430553][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.443819][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.455376][ T48] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.470212][ T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.479605][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.877336][ T48] usb 4-1: GET_CAPABILITIES returned 0 [ 384.915472][ T48] usbtmc 4-1:16.0: can't read capabilities [ 384.964820][ T24] usb 3-1: USB disconnect, device number 44 [ 385.022031][ T8978] delete_channel: no stack [ 385.028326][ T8978] delete_channel: no stack [ 385.034254][ T8978] delete_channel: no stack [ 385.040191][ T8978] delete_channel: no stack [ 385.045695][ T8978] delete_channel: no stack [ 385.052385][ T8978] delete_channel: no stack [ 385.059851][ T8978] delete_channel: no stack [ 385.065925][ T8978] delete_channel: no stack [ 385.071453][ T8978] delete_channel: no stack [ 385.221779][ T8978] delete_channel: no stack [ 385.228024][ T8978] delete_channel: no stack [ 385.234628][ T8978] delete_channel: no stack [ 385.240394][ T8978] delete_channel: no stack [ 385.246351][ T8978] delete_channel: no stack [ 385.252318][ T8978] delete_channel: no stack [ 385.259334][ T8978] delete_channel: no stack [ 385.265563][ T8978] delete_channel: no stack [ 385.367341][ T8991] netlink: 96 bytes leftover after parsing attributes in process `syz.2.729'. [ 385.692964][ T8930] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 385.773385][ T8978] delete_channel: no stack [ 385.780852][ T8978] delete_channel: no stack [ 385.787337][ T8978] delete_channel: no stack [ 385.798631][ T8978] delete_channel: no stack [ 385.803884][ T8978] delete_channel: no stack [ 385.807835][ T8978] delete_channel: no stack [ 385.810633][ T8978] delete_channel: no stack [ 385.813471][ T8978] delete_channel: no stack [ 385.816536][ T8978] delete_channel: no stack [ 385.820208][ T8978] delete_channel: no stack [ 386.222187][ T30] audit: type=1400 audit(1751033753.708:396): avc: denied { read } for pid=8987 comm="syz.1.730" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.222235][ T30] audit: type=1400 audit(1751033753.708:397): avc: denied { open } for pid=8987 comm="syz.1.730" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.222272][ T30] audit: type=1400 audit(1751033753.718:398): avc: denied { ioctl } for pid=8987 comm="syz.1.730" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.347843][ T8979] delete_channel: no stack [ 386.347937][ T8979] delete_channel: no stack [ 386.348007][ T8979] delete_channel: no stack [ 386.348122][ T8979] delete_channel: no stack [ 386.348194][ T8979] delete_channel: no stack [ 386.348263][ T8979] delete_channel: no stack [ 386.410215][ T30] audit: type=1400 audit(1751033753.898:399): avc: denied { bind } for pid=8998 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.504428][ T5888] usb 5-1: USB disconnect, device number 49 [ 386.510442][ T30] audit: type=1400 audit(1751033753.998:400): avc: denied { setattr } for pid=9004 comm="syz.2.735" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 386.513286][ T9007] FAULT_INJECTION: forcing a failure. [ 386.513286][ T9007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.562960][ T30] audit: type=1400 audit(1751033754.048:401): avc: denied { connect } for pid=9002 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.642535][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.2.735 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 386.642562][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.642572][ T9007] Call Trace: [ 386.642578][ T9007] [ 386.642586][ T9007] dump_stack_lvl+0x16c/0x1f0 [ 386.642616][ T9007] should_fail_ex+0x512/0x640 [ 386.642645][ T9007] should_fail_alloc_page+0xe7/0x130 [ 386.642677][ T9007] prepare_alloc_pages+0x3c2/0x610 [ 386.642701][ T9007] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 386.642728][ T9007] ? mark_held_locks+0x49/0x80 [ 386.642755][ T9007] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 386.642779][ T9007] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.642803][ T9007] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 386.642827][ T9007] ? stack_depot_save_flags+0x3e0/0xa40 [ 386.642853][ T9007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.642879][ T9007] ? kasan_save_stack+0x42/0x60 [ 386.642900][ T9007] ? kasan_save_stack+0x33/0x60 [ 386.642920][ T9007] ? kasan_save_track+0x14/0x30 [ 386.642940][ T9007] ? __kasan_kmalloc+0xaa/0xb0 [ 386.642960][ T9007] ? netfs_folioq_alloc+0x9e/0x3b0 [ 386.642989][ T9007] ? v9fs_file_write_iter+0x9b/0x100 [ 386.643013][ T9007] ? do_iter_readv_writev+0x654/0x950 [ 386.643032][ T9007] ? vfs_writev+0x35f/0xde0 [ 386.643055][ T9007] ? __lock_acquire+0x622/0x1c90 [ 386.643081][ T9007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.643104][ T9007] ? policy_nodemask+0xea/0x4e0 [ 386.643132][ T9007] alloc_pages_mpol+0x1fb/0x550 [ 386.643159][ T9007] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 386.643186][ T9007] ? filemap_get_entry+0x1a7/0x3b0 [ 386.643215][ T9007] folio_alloc_noprof+0x20/0x2d0 [ 386.643233][ T9007] filemap_alloc_folio_noprof+0x3a1/0x470 [ 386.643255][ T9007] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 386.643276][ T9007] ? iov_iter_folio_queue+0x3e/0x1f0 [ 386.643298][ T9007] ? fault_in_readable+0x179/0x1d0 [ 386.643328][ T9007] __filemap_get_folio+0x5e1/0xc30 [ 386.643360][ T9007] netfs_perform_write+0x3d2/0x2060 [ 386.643400][ T9007] ? __pfx_netfs_perform_write+0x10/0x10 [ 386.643422][ T9007] ? __pfx_timestamp_truncate+0x10/0x10 [ 386.643479][ T9007] ? __mark_inode_dirty+0x2a7/0xe50 [ 386.643501][ T9007] ? generic_update_time+0xcf/0xf0 [ 386.643531][ T9007] ? mnt_put_write_access_file+0x45/0xf0 [ 386.643558][ T9007] netfs_file_write_iter+0x495/0x570 [ 386.643584][ T9007] v9fs_file_write_iter+0x9b/0x100 [ 386.643609][ T9007] do_iter_readv_writev+0x654/0x950 [ 386.643631][ T9007] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 386.643671][ T9007] vfs_writev+0x35f/0xde0 [ 386.643700][ T9007] ? __pfx_vfs_writev+0x10/0x10 [ 386.643741][ T9007] ? __fget_files+0x20e/0x3c0 [ 386.643763][ T9007] ? _mutex_trylock_nest_lock+0xc0/0x140 [ 386.643796][ T9007] ? do_pwritev+0x1a6/0x270 [ 386.643814][ T9007] do_pwritev+0x1a6/0x270 [ 386.643835][ T9007] ? __pfx_do_pwritev+0x10/0x10 [ 386.643856][ T9007] ? ksys_write+0x1ac/0x250 [ 386.643877][ T9007] ? __pfx_ksys_write+0x10/0x10 [ 386.643903][ T9007] __x64_sys_pwritev2+0xef/0x160 [ 386.643930][ T9007] do_syscall_64+0xcd/0x4c0 [ 386.643958][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.643977][ T9007] RIP: 0033:0x7f129bf8e929 [ 386.643992][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.644009][ T9007] RSP: 002b:00007f129cdcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 386.644026][ T9007] RAX: ffffffffffffffda RBX: 00007f129c1b5fa0 RCX: 00007f129bf8e929 [ 386.644037][ T9007] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 386.644048][ T9007] RBP: 00007f129cdcd090 R08: 0000000000008000 R09: 0000000000000004 [ 386.644058][ T9007] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 386.644068][ T9007] R13: 0000000000000000 R14: 00007f129c1b5fa0 R15: 00007ffe2614cd78 [ 386.644092][ T9007] [ 387.334104][ T30] audit: type=1400 audit(1751033754.828:402): avc: denied { read } for pid=9015 comm="syz.2.739" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.364559][ T30] audit: type=1400 audit(1751033754.858:403): avc: denied { open } for pid=9015 comm="syz.2.739" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.548215][ T8984] usb 4-1: USB disconnect, device number 62 [ 387.560241][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 387.567957][ T48] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 387.728242][ T30] audit: type=1400 audit(1751033755.218:404): avc: denied { read } for pid=9030 comm="syz.3.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 387.800234][ T24] usb 1-1: device descriptor read/64, error -71 [ 387.840277][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 387.892845][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.923448][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.972498][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.070461][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 388.109410][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.231510][ T48] usb 5-1: Product: syz [ 388.245182][ T9032] netlink: 96 bytes leftover after parsing attributes in process `syz.1.741'. [ 388.257722][ T48] usb 5-1: Manufacturer: syz [ 388.266543][ T48] usb 5-1: SerialNumber: syz [ 388.330967][ T24] usb 1-1: device descriptor read/64, error -71 [ 388.731035][ T24] usb usb1-port1: attempt power cycle [ 389.222260][ T48] usb 5-1: cannot find UAC_HEADER [ 389.245647][ T48] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 389.257289][ T48] usb 5-1: USB disconnect, device number 50 [ 389.278545][ T6091] udevd[6091]: setting mode of /dev/bus/usb/005/050 to 020664 failed: No such file or directory [ 389.317753][ T6091] udevd[6091]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 389.338996][ T30] audit: type=1400 audit(1751033756.828:405): avc: denied { read } for pid=9043 comm="syz.1.745" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 389.378759][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.423828][ T9045] md2: using deprecated bitmap file support [ 389.429905][ T9045] md2: error: bitmap file must be a regular file [ 389.498226][ T9055] kvm: pic: non byte read [ 389.503638][ T9055] kvm: pic: non byte read [ 389.515510][ T9055] kvm: pic: non byte read [ 389.524453][ T9055] kvm: pic: non byte read [ 389.532106][ T9055] kvm: pic: non byte read [ 389.537911][ T9055] kvm: pic: level sensitive irq not supported [ 389.538452][ T9055] kvm: pic: non byte read [ 389.653040][ T9055] kvm: pic: non byte read [ 389.677149][ T9055] kvm: pic: non byte read [ 389.700260][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 389.708868][ T9055] kvm: pic: non byte read [ 390.006387][ T24] usb 1-1: device descriptor read/8, error -71 [ 390.684860][ T9049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.777189][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.752'. [ 391.187996][ T9089] netlink: 96 bytes leftover after parsing attributes in process `syz.3.755'. [ 391.878703][ T48] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 392.130489][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 392.166648][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.200123][ T48] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.221437][ T48] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 393.254793][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.283849][ T48] usb 5-1: config 0 descriptor?? [ 393.299915][ T9102] FAULT_INJECTION: forcing a failure. [ 393.299915][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.314698][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.1.760 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 393.314722][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.314732][ T9102] Call Trace: [ 393.314738][ T9102] [ 393.314745][ T9102] dump_stack_lvl+0x16c/0x1f0 [ 393.314775][ T9102] should_fail_ex+0x512/0x640 [ 393.314802][ T9102] _copy_to_user+0x32/0xd0 [ 393.314828][ T9102] simple_read_from_buffer+0xcb/0x170 [ 393.314845][ T9102] proc_fail_nth_read+0x197/0x270 [ 393.314859][ T9102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.314874][ T9102] ? rw_verify_area+0xcf/0x680 [ 393.314885][ T9102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.314898][ T9102] vfs_read+0x1e1/0xc60 [ 393.314913][ T9102] ? __pfx___mutex_lock+0x10/0x10 [ 393.314932][ T9102] ? __pfx_vfs_read+0x10/0x10 [ 393.314958][ T9102] ? __fget_files+0x20e/0x3c0 [ 393.314988][ T9102] ksys_read+0x12a/0x250 [ 393.315006][ T9102] ? __pfx_ksys_read+0x10/0x10 [ 393.315019][ T9102] ? _raw_read_unlock+0x28/0x50 [ 393.315033][ T9102] ? ptrace_check_attach+0xa1/0x3f0 [ 393.315049][ T9102] do_syscall_64+0xcd/0x4c0 [ 393.315065][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.315077][ T9102] RIP: 0033:0x7f211cf8d33c [ 393.315086][ T9102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.315096][ T9102] RSP: 002b:00007f211ddb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.315107][ T9102] RAX: ffffffffffffffda RBX: 00007f211d1b5fa0 RCX: 00007f211cf8d33c [ 393.315113][ T9102] RDX: 000000000000000f RSI: 00007f211ddb60a0 RDI: 0000000000000003 [ 393.315120][ T9102] RBP: 00007f211ddb6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.315126][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.315132][ T9102] R13: 0000000000000000 R14: 00007f211d1b5fa0 R15: 00007ffec698f0e8 [ 393.315145][ T9102] [ 393.555426][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 393.555441][ T30] audit: type=1326 audit(1751033761.048:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ed18e929 code=0x7ffc0000 [ 393.629292][ T30] audit: type=1326 audit(1751033761.048:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f62ed18e929 code=0x7ffc0000 [ 393.670378][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 393.687023][ T30] audit: type=1326 audit(1751033761.048:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ed18e929 code=0x7ffc0000 [ 393.777454][ T30] audit: type=1326 audit(1751033761.048:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9090 comm="syz.4.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f62ed18e929 code=0x7ffc0000 [ 393.930261][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 393.939191][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 393.948217][ T9118] netlink: 'syz.2.764': attribute type 7 has an invalid length. [ 393.972382][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 393.976946][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 393.981422][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 394.001767][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 394.199900][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8447, setting to 1024 [ 394.240703][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.266733][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.278336][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.295017][ T24] usb 4-1: config 0 descriptor?? [ 395.038545][ T48] usb 5-1: USB disconnect, device number 51 [ 395.225035][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 395.346114][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 395.861858][ T9146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.774'. [ 396.582308][ T24] usb 4-1: USB disconnect, device number 63 [ 396.813682][ T9164] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 396.924091][ T9166] FAULT_INJECTION: forcing a failure. [ 396.924091][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 397.055533][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.1.777 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 397.055561][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.055571][ T9166] Call Trace: [ 397.055577][ T9166] [ 397.055583][ T9166] dump_stack_lvl+0x16c/0x1f0 [ 397.055603][ T9166] should_fail_ex+0x512/0x640 [ 397.055617][ T9166] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 397.055636][ T9166] should_failslab+0xc2/0x120 [ 397.055651][ T9166] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 397.055665][ T9166] ? __alloc_skb+0x2b2/0x380 [ 397.055682][ T9166] __alloc_skb+0x2b2/0x380 [ 397.055695][ T9166] ? __pfx___alloc_skb+0x10/0x10 [ 397.055710][ T9166] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 397.055725][ T9166] netlink_alloc_large_skb+0x69/0x130 [ 397.055737][ T9166] netlink_sendmsg+0x6a1/0xdd0 [ 397.055749][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.055765][ T9166] ____sys_sendmsg+0xa95/0xc70 [ 397.055777][ T9166] ? copy_msghdr_from_user+0x10a/0x160 [ 397.055792][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.055809][ T9166] ___sys_sendmsg+0x134/0x1d0 [ 397.055824][ T9166] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.055838][ T9166] ? __lock_acquire+0x622/0x1c90 [ 397.055871][ T9166] __sys_sendmsg+0x16d/0x220 [ 397.055886][ T9166] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.055909][ T9166] do_syscall_64+0xcd/0x4c0 [ 397.055926][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.055938][ T9166] RIP: 0033:0x7f211cf8e929 [ 397.055947][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.055957][ T9166] RSP: 002b:00007f211ddb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.055968][ T9166] RAX: ffffffffffffffda RBX: 00007f211d1b5fa0 RCX: 00007f211cf8e929 [ 397.055975][ T9166] RDX: 0000000028008840 RSI: 0000200000000480 RDI: 0000000000000003 [ 397.055981][ T9166] RBP: 00007f211ddb6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.055987][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.055993][ T9166] R13: 0000000000000000 R14: 00007f211d1b5fa0 R15: 00007ffec698f0e8 [ 397.056006][ T9166] [ 397.493411][ T30] audit: type=1400 audit(1751033764.988:413): avc: denied { connect } for pid=9178 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.609989][ T30] audit: type=1400 audit(1751033765.038:414): avc: denied { setopt } for pid=9178 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.647729][ T9181] netlink: 72 bytes leftover after parsing attributes in process `syz.3.783'. [ 399.201731][ T30] audit: type=1800 audit(1751033766.698:415): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.785" name="/newroot/168/file0" dev="tmpfs" ino=883 res=0 errno=0 [ 400.080813][ T30] audit: type=1400 audit(1751033767.578:416): avc: denied { create } for pid=9205 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 400.104911][ T9208] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 400.112881][ T9208] audit: out of memory in audit_log_start [ 400.387172][ T9206] ptrace attach of ""[9210] was attempted by "./syz-executor exec"[9206] [ 400.942317][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 400.988103][ T9218] FAULT_INJECTION: forcing a failure. [ 400.988103][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.016105][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.3.792 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 401.016132][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.016142][ T9218] Call Trace: [ 401.016148][ T9218] [ 401.016156][ T9218] dump_stack_lvl+0x16c/0x1f0 [ 401.016186][ T9218] should_fail_ex+0x512/0x640 [ 401.016214][ T9218] _copy_to_user+0x32/0xd0 [ 401.016241][ T9218] llc_ui_getsockopt+0x25d/0x480 [ 401.016269][ T9218] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 401.016299][ T9218] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 401.016325][ T9218] do_sock_getsockopt+0x3ff/0x800 [ 401.016345][ T9218] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 401.016361][ T9218] ? __fget_files+0x204/0x3c0 [ 401.016398][ T9218] __sys_getsockopt+0x12f/0x260 [ 401.016428][ T9218] __x64_sys_getsockopt+0xbd/0x160 [ 401.016450][ T9218] ? do_syscall_64+0x91/0x4c0 [ 401.016475][ T9218] ? lockdep_hardirqs_on+0x7c/0x110 [ 401.016499][ T9218] do_syscall_64+0xcd/0x4c0 [ 401.016526][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.016543][ T9218] RIP: 0033:0x7f1db5b8e929 [ 401.016558][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.016580][ T9218] RSP: 002b:00007f1db6a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 401.016598][ T9218] RAX: ffffffffffffffda RBX: 00007f1db5db5fa0 RCX: 00007f1db5b8e929 [ 401.016610][ T9218] RDX: 0000000000000005 RSI: 000000000000010c RDI: 0000000000000004 [ 401.016620][ T9218] RBP: 00007f1db6a04090 R08: 0000200000000080 R09: 0000000000000000 [ 401.016630][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.016641][ T9218] R13: 0000000000000000 R14: 00007f1db5db5fa0 R15: 00007ffe79d8d598 [ 401.016666][ T9218] [ 401.306331][ T9228] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.388886][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 401.470238][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 401.471095][ T9228] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.653808][ T24] usb 5-1: device descriptor read/64, error -71 [ 401.988840][ T9228] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.990348][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 402.141597][ T24] usb 5-1: device descriptor read/64, error -71 [ 402.211769][ T9228] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.251616][ T24] usb usb5-port1: attempt power cycle [ 402.260959][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 402.282014][ T30] audit: type=1400 audit(1751033769.778:417): avc: denied { write } for pid=9245 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 402.383474][ T9228] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.400090][ T9228] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.451254][ T48] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 402.478723][ T9252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9252 comm=syz.1.803 [ 402.511945][ T9228] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.538265][ T9228] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.556120][ T30] audit: type=1400 audit(1751033770.048:418): avc: denied { accept } for pid=9249 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 402.604723][ T48] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 402.622682][ T48] usb 3-1: config 0 has no interface number 0 [ 402.650630][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 402.664027][ T48] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 402.701124][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.714427][ T24] usb 5-1: device descriptor read/8, error -71 [ 402.728356][ T48] usb 3-1: Product: syz [ 402.732817][ T48] usb 3-1: Manufacturer: syz [ 402.737445][ T48] usb 3-1: SerialNumber: syz [ 402.776254][ T48] usb 3-1: config 0 descriptor?? [ 402.970372][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 403.047137][ T9262] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 403.056331][ T9262] overlayfs: missing 'lowerdir' [ 403.062605][ T24] usb 5-1: device descriptor read/8, error -71 [ 403.207355][ T24] usb usb5-port1: unable to enumerate USB device [ 403.300859][ T30] audit: type=1400 audit(1751033770.648:419): avc: denied { mount } for pid=9259 comm="syz.3.807" name="/" dev="overlay" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 403.452898][ T30] audit: type=1400 audit(1751033770.918:420): avc: denied { watch watch_reads } for pid=9243 comm="syz.2.802" path="/172/file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 403.673859][ T30] audit: type=1400 audit(1751033771.168:421): avc: denied { accept } for pid=9268 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 403.694458][ T30] audit: type=1400 audit(1751033771.168:422): avc: denied { bind } for pid=9268 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.642374][ T9275] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 404.656456][ T9275] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 404.672697][ T9275] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 404.699603][ T9277] FAULT_INJECTION: forcing a failure. [ 404.699603][ T9277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.708468][ T9275] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 404.724395][ T9275] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 404.729831][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.1.811 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 404.729853][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.729862][ T9277] Call Trace: [ 404.729867][ T9277] [ 404.729873][ T9277] dump_stack_lvl+0x16c/0x1f0 [ 404.729901][ T9277] should_fail_ex+0x512/0x640 [ 404.729924][ T9277] _copy_to_user+0x32/0xd0 [ 404.729948][ T9277] simple_read_from_buffer+0xcb/0x170 [ 404.729969][ T9277] proc_fail_nth_read+0x197/0x270 [ 404.729990][ T9277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.730010][ T9277] ? rw_verify_area+0xcf/0x680 [ 404.730027][ T9277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.730045][ T9277] vfs_read+0x1e1/0xc60 [ 404.730066][ T9277] ? __pfx___mutex_lock+0x10/0x10 [ 404.730089][ T9277] ? __pfx_vfs_read+0x10/0x10 [ 404.730113][ T9277] ? __fget_files+0x20e/0x3c0 [ 404.730144][ T9277] ksys_read+0x12a/0x250 [ 404.730162][ T9277] ? __pfx_ksys_read+0x10/0x10 [ 404.730187][ T9277] do_syscall_64+0xcd/0x4c0 [ 404.730211][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.730226][ T9277] RIP: 0033:0x7f211cf8d33c [ 404.730239][ T9277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.730253][ T9277] RSP: 002b:00007f211ddb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.730268][ T9277] RAX: ffffffffffffffda RBX: 00007f211d1b5fa0 RCX: 00007f211cf8d33c [ 404.730278][ T9277] RDX: 000000000000000f RSI: 00007f211ddb60a0 RDI: 0000000000000005 [ 404.730287][ T9277] RBP: 00007f211ddb6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.730300][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.730309][ T9277] R13: 0000000000000000 R14: 00007f211d1b5fa0 R15: 00007ffec698f0e8 [ 404.730330][ T9277] [ 404.917342][ T9275] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 404.925102][ T9275] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 404.933251][ T9275] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 404.970546][ T5888] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 404.987411][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 404.987425][ T30] audit: type=1400 audit(1751033772.468:424): avc: denied { ioctl } for pid=9278 comm="syz.3.812" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 405.020673][ T30] audit: type=1400 audit(1751033772.478:425): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.045160][ T30] audit: type=1400 audit(1751033772.478:426): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.073413][ T30] audit: type=1400 audit(1751033772.478:427): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.100062][ T30] audit: type=1400 audit(1751033772.518:428): avc: denied { prog_load } for pid=9285 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 405.119389][ T30] audit: type=1400 audit(1751033772.518:429): avc: denied { bpf } for pid=9285 comm="syz.0.814" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.165720][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 405.174968][ T5923] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 405.207103][ T30] audit: type=1400 audit(1751033772.518:430): avc: denied { perfmon } for pid=9285 comm="syz.0.814" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.207314][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.246249][ T30] audit: type=1400 audit(1751033772.548:431): avc: denied { read } for pid=9285 comm="syz.0.814" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 405.269055][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.299978][ T30] audit: type=1400 audit(1751033772.548:432): avc: denied { open } for pid=9285 comm="syz.0.814" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 405.333839][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.359101][ T5888] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.368452][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 405.385377][ T5923] usb 2-1: config index 0 descriptor too short (expected 28170, got 18) [ 405.394099][ T5923] usb 2-1: config 95 has too many interfaces: 103, using maximum allowed: 32 [ 405.403245][ T30] audit: type=1400 audit(1751033772.638:433): avc: denied { watch } for pid=9285 comm="syz.0.814" path="/173/file1" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 405.423562][ T48] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 405.433565][ T5923] usb 2-1: config 95 has an invalid descriptor of length 108, skipping remainder of the config [ 405.444217][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.452242][ T5923] usb 2-1: config 95 has 0 interfaces, different from the descriptor's value: 103 [ 405.463875][ T5923] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 405.484630][ T5888] usb 4-1: config 0 descriptor?? [ 405.490004][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.500106][ T5923] usb 2-1: SerialNumber: syz [ 405.537458][ T48] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 405.563404][ T48] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 405.575178][ T48] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 405.591995][ T48] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 405.723938][ T5923] usb 2-1: USB disconnect, device number 50 [ 405.758261][ T48] usb 3-1: USB disconnect, device number 45 [ 408.044572][ T5888] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 408.056405][ T5888] microsoft 0003:045E:07DA.0006: no inputs found [ 408.071193][ T5888] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 408.272531][ T48] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 408.321984][ T5888] usb 4-1: USB disconnect, device number 64 [ 408.372180][ T9312] fido_id[9312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 408.418387][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.822'. [ 408.470911][ T48] keyspan 3-1:0.133: device disconnected [ 408.760321][ T5933] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 408.800299][ T48] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 408.861798][ T24] kernel read not supported for file /602/oom_adj (pid: 24 comm: kworker/1:0) [ 408.869339][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 408.930466][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 408.950258][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 408.959774][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.978522][ T48] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 408.987769][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.012573][ T48] usb 3-1: config 1 has no interface number 1 [ 409.018698][ T48] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.055562][ T48] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.073045][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.093303][ T48] usb 3-1: Product: syz [ 409.097514][ T48] usb 3-1: Manufacturer: syz [ 409.102476][ T48] usb 3-1: SerialNumber: syz [ 409.118914][ T5933] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.143127][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.151416][ T5933] usb 1-1: Product: syz [ 409.155585][ T5933] usb 1-1: Manufacturer: syz [ 409.162832][ T5933] usb 1-1: SerialNumber: syz [ 410.127949][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 410.127966][ T30] audit: type=1400 audit(1751034033.617:487): avc: denied { map_read map_write } for pid=9315 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 410.306692][ T5933] usb 1-1: cannot find UAC_HEADER [ 410.577204][ T30] audit: type=1400 audit(1751034034.067:488): avc: denied { open } for pid=9335 comm="syz.3.827" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 410.906072][ T5933] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 410.926080][ T5933] usb 1-1: USB disconnect, device number 54 [ 410.932458][ T30] audit: type=1400 audit(1751034034.137:489): avc: denied { read write } for pid=9335 comm="syz.3.827" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 410.936069][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.971701][ T30] audit: type=1400 audit(1751034034.137:490): avc: denied { open } for pid=9335 comm="syz.3.827" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.325818][ T30] audit: type=1400 audit(1751034034.817:491): avc: denied { read write } for pid=9339 comm="syz.1.829" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 411.339488][ T9342] Cannot find del_set index 1 as target [ 411.744045][ T30] audit: type=1400 audit(1751034034.817:492): avc: denied { open } for pid=9339 comm="syz.1.829" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 411.803551][ T30] audit: type=1400 audit(1751034034.817:493): avc: denied { ioctl } for pid=9339 comm="syz.1.829" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 411.910318][ T30] audit: type=1400 audit(1751034035.337:494): avc: denied { create } for pid=9343 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 411.950782][ T30] audit: type=1400 audit(1751034035.337:495): avc: denied { setopt } for pid=9343 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 412.010481][ T30] audit: type=1400 audit(1751034035.387:496): avc: denied { write } for pid=9348 comm="syz.0.832" name="vlan0" dev="proc" ino=4026533800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 413.038740][ T48] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 413.115996][ T48] usb 3-1: USB disconnect, device number 46 [ 415.877327][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 415.877361][ T30] audit: type=1400 audit(1751034039.337:518): avc: denied { ioctl } for pid=9396 comm="syz.0.847" path="socket:[25196]" dev="sockfs" ino=25196 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 416.847391][ T30] audit: type=1400 audit(1751034040.067:519): avc: denied { read write } for pid=9411 comm="syz.2.851" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 416.879016][ T30] audit: type=1400 audit(1751034040.067:520): avc: denied { open } for pid=9411 comm="syz.2.851" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 416.945520][ T9419] IPv4: Oversized IP packet from 127.202.26.0 [ 416.976395][ T30] audit: type=1400 audit(1751034040.077:521): avc: denied { ioctl } for pid=9411 comm="syz.2.851" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 417.181519][ T30] audit: type=1400 audit(1751034040.417:522): avc: denied { read } for pid=9415 comm="syz.4.852" dev="sockfs" ino=25227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 417.899871][ T9434] openvswitch: netlink: Tunnel attr 10875 out of range max 16 [ 417.922153][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 417.922949][ T30] audit: type=1400 audit(1751034041.417:523): avc: denied { create } for pid=9430 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 418.089194][ T9443] kvm: pic: non byte read [ 418.094872][ T9443] kvm: pic: non byte read [ 418.107792][ T9443] kvm: pic: non byte read [ 418.117140][ T9443] kvm: pic: non byte read [ 418.191529][ T9443] kvm: pic: non byte read [ 418.197052][ T9443] kvm: pic: level sensitive irq not supported [ 418.197108][ T9443] kvm: pic: non byte read [ 418.203295][ T48] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 418.216415][ T9443] kvm: pic: non byte read [ 418.221225][ T9443] kvm: pic: non byte read [ 418.225948][ T9443] kvm: pic: non byte read [ 418.350298][ T48] usb 4-1: device descriptor read/64, error -71 [ 418.592839][ T48] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 418.740291][ T48] usb 4-1: device descriptor read/64, error -71 [ 418.812186][ T9439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.840220][ T5888] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 418.854780][ T48] usb usb4-port1: attempt power cycle [ 418.901737][ T30] audit: type=1400 audit(1751034042.397:524): avc: denied { execute_no_trans } for pid=9452 comm="syz.0.860" path="/182/file1" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 419.045221][ T9455] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.053493][ T9455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 419.063055][ T9455] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.070982][ T9455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 419.258170][ T30] audit: type=1400 audit(1751034042.527:525): avc: denied { create } for pid=9452 comm="syz.0.860" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 419.286108][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.300048][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.312467][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.322856][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.347300][ T5888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.358374][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.368830][ T5888] usb 2-1: config 0 descriptor?? [ 419.370230][ T5933] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 419.386804][ T48] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 419.408358][ T30] audit: type=1400 audit(1751034042.897:526): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 419.420834][ T48] usb 4-1: device descriptor read/8, error -71 [ 419.845061][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.861627][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.875028][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.887841][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.887882][ T5933] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 419.887904][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.892592][ T5933] usb 5-1: config 0 descriptor?? [ 419.918250][ T48] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 419.951229][ T48] usb 4-1: device descriptor read/8, error -71 [ 420.008786][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 420.008859][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 420.042123][ T5888] usb 2-1: USB disconnect, device number 51 [ 420.171540][ T48] usb usb4-port1: unable to enumerate USB device [ 420.218045][ T30] audit: type=1400 audit(1751034043.707:527): avc: denied { create } for pid=9448 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 420.590537][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 420.596690][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 420.621316][ T5933] usb 5-1: USB disconnect, device number 56 [ 422.214096][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 422.214114][ T30] audit: type=1400 audit(1751034045.697:530): avc: denied { read write } for pid=9482 comm="syz.3.867" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 422.370609][ T5888] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 422.795305][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 422.892916][ T5888] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 422.970236][ T30] audit: type=1400 audit(1751034045.747:531): avc: denied { open } for pid=9482 comm="syz.3.867" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 423.000348][ T5888] usb 1-1: config 0 has no interface number 0 [ 423.011581][ T30] audit: type=1400 audit(1751034046.397:532): avc: denied { mount } for pid=9482 comm="syz.3.867" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 423.034368][ T5888] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 423.046816][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.054858][ T5888] usb 1-1: Product: syz [ 423.058998][ T5888] usb 1-1: Manufacturer: syz [ 423.120180][ T30] audit: type=1400 audit(1751034046.577:533): avc: denied { read } for pid=9488 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 423.151553][ T5888] usb 1-1: SerialNumber: syz [ 423.176226][ T5888] usb 1-1: config 0 descriptor?? [ 423.281275][ T5888] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 423.300579][ T30] audit: type=1400 audit(1751034046.577:534): avc: denied { ioctl } for pid=9488 comm="syz.4.868" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25390 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 423.905863][ T5888] usb 1-1: qt2_attach - failed to power on unit: -71 [ 423.938244][ T5888] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 423.950607][ T5888] usb 1-1: USB disconnect, device number 55 [ 424.708562][ T9495] kvm: pic: non byte read [ 424.740932][ T9495] kvm: pic: non byte read [ 424.757579][ T9495] kvm: pic: non byte read [ 424.780300][ T30] audit: type=1400 audit(1751034048.267:535): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 424.800793][ T9495] kvm: pic: non byte read [ 424.818687][ T9495] kvm: pic: non byte read [ 424.823350][ T9495] kvm: pic: level sensitive irq not supported [ 424.823421][ T9495] kvm: pic: non byte read [ 424.834516][ T9495] kvm: pic: non byte read [ 424.839202][ T9495] kvm: pic: non byte read [ 424.844123][ T9495] kvm: pic: non byte read [ 425.280255][ T5933] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 425.512576][ T5933] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 425.538318][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.770969][ T9522] netlink: 'syz.3.876': attribute type 12 has an invalid length. [ 425.912286][ T5933] usb 5-1: config 0 descriptor?? [ 425.920824][ T5933] cp210x 5-1:0.0: cp210x converter detected [ 426.696694][ T5933] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 426.865420][ T5933] usb 5-1: cp210x converter now attached to ttyUSB0 [ 426.872159][ T48] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 427.250923][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.274378][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.363948][ T48] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 427.373388][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.402451][ T48] usb 4-1: config 0 descriptor?? [ 427.432489][ T9508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.543907][ T9508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.917020][ T5888] usb 5-1: USB disconnect, device number 57 [ 427.926184][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 427.947253][ T5888] cp210x 5-1:0.0: device disconnected [ 428.316048][ T30] audit: type=1400 audit(1751034051.807:536): avc: denied { ioctl } for pid=9541 comm="syz.1.882" path="socket:[25525]" dev="sockfs" ino=25525 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 428.340638][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.377601][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 428.384754][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 428.395100][ T48] usb 4-1: USB disconnect, device number 69 [ 428.592064][ T30] audit: type=1400 audit(1751034052.087:537): avc: denied { connect } for pid=9546 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.611813][ T30] audit: type=1400 audit(1751034052.087:538): avc: denied { name_connect } for pid=9546 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 428.669689][ T30] audit: type=1400 audit(1751034052.157:539): avc: denied { listen } for pid=9546 comm="syz.4.884" lport=49509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.692893][ T30] audit: type=1400 audit(1751034052.177:540): avc: denied { accept } for pid=9546 comm="syz.4.884" lport=49509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.715184][ T5888] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 428.883137][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.894862][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 428.904824][ T5888] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 428.914750][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.925968][ T5888] usb 3-1: config 0 descriptor?? [ 428.935317][ T5888] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 429.150904][ T30] audit: type=1400 audit(1751034052.607:541): avc: denied { setopt } for pid=9550 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 429.171362][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.293547][ T30] audit: type=1400 audit(1751034052.637:542): avc: denied { unlink } for pid=9550 comm="syz.3.885" name="#5" dev="tmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 429.319354][ T30] audit: type=1400 audit(1751034052.647:543): avc: denied { mount } for pid=9550 comm="syz.3.885" name="/" dev="overlay" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 429.341177][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.426199][ T9545] sp0: Synchronizing with TNC [ 429.435238][ T30] audit: type=1400 audit(1751034052.927:544): avc: denied { read } for pid=5478 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 429.463300][ T30] audit: type=1400 audit(1751034052.957:545): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.698825][ T5888] usb 3-1: USB disconnect, device number 47 [ 430.217056][ T9572] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 430.223785][ T9572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.231711][ T9567] kvm: pic: non byte read [ 430.237024][ T9572] vhci_hcd vhci_hcd.0: Device attached [ 430.284434][ T9567] kvm: pic: non byte read [ 430.317846][ T9567] kvm: pic: non byte read [ 430.438240][ T9568] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 430.454956][ T9568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.906674][ T48] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 430.925657][ T9567] kvm: pic: non byte read [ 430.931060][ T9567] kvm: pic: non byte read [ 430.938518][ T9568] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 431.013814][ T9567] kvm: pic: level sensitive irq not supported [ 431.013874][ T9567] kvm: pic: non byte read [ 431.032651][ T9574] vhci_hcd: connection reset by peer [ 431.050858][ T4055] vhci_hcd: stop threads [ 431.063759][ T4055] vhci_hcd: release socket [ 431.069880][ T4055] vhci_hcd: disconnect device [ 431.995497][ T9597] FAULT_INJECTION: forcing a failure. [ 431.995497][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.010197][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.0.896 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 432.010219][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.010230][ T9597] Call Trace: [ 432.010235][ T9597] [ 432.010242][ T9597] dump_stack_lvl+0x16c/0x1f0 [ 432.010267][ T9597] should_fail_ex+0x512/0x640 [ 432.010284][ T9597] strncpy_from_user+0x3b/0x2e0 [ 432.010299][ T9597] getname_flags.part.0+0x8f/0x550 [ 432.010313][ T9597] getname_flags+0x93/0xf0 [ 432.010326][ T9597] __x64_sys_acct+0x75/0x230 [ 432.010337][ T9597] ? lockdep_hardirqs_on+0x7c/0x110 [ 432.010352][ T9597] do_syscall_64+0xcd/0x4c0 [ 432.010369][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.010380][ T9597] RIP: 0033:0x7feee038e929 [ 432.010388][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.010399][ T9597] RSP: 002b:00007feee1177038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 432.010409][ T9597] RAX: ffffffffffffffda RBX: 00007feee05b6080 RCX: 00007feee038e929 [ 432.010416][ T9597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 432.010422][ T9597] RBP: 00007feee1177090 R08: 0000000000000000 R09: 0000000000000000 [ 432.010428][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.010434][ T9597] R13: 0000000000000000 R14: 00007feee05b6080 R15: 00007fffd00c41d8 [ 432.010447][ T9597] [ 432.060191][ T5933] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 432.712082][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 432.783932][ T5933] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 432.795205][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.811584][ T5933] usb 2-1: Product: syz [ 434.815846][ T5933] usb 2-1: Manufacturer: syz [ 434.820900][ T5933] usb 2-1: SerialNumber: syz [ 434.837553][ T5933] usb 2-1: config 0 descriptor?? [ 434.847986][ T5933] usb 2-1: can't set config #0, error -71 [ 434.881268][ T5933] usb 2-1: USB disconnect, device number 52 [ 435.019687][ T9618] bridge_slave_0: left allmulticast mode [ 435.029604][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.048442][ T9618] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 435.230196][ T5888] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 435.303711][ T9624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.456157][ T5888] usb 3-1: device descriptor read/64, error -71 [ 435.498337][ T9624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.583745][ T9624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.644633][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 435.644648][ T30] audit: type=1400 audit(1751034059.137:565): avc: denied { create } for pid=9628 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 435.713402][ T9624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.770200][ T5888] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 436.384998][ T5888] usb 3-1: device descriptor read/64, error -71 [ 436.408373][ T48] vhci_hcd: vhci_device speed not set [ 436.567024][ T5888] usb usb3-port1: attempt power cycle [ 436.614267][ T9624] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.093427][ T30] audit: type=1400 audit(1751034060.577:566): avc: denied { name_bind } for pid=9641 comm="syz.1.912" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 437.109851][ T9624] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.114353][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.141923][ T30] audit: type=1400 audit(1751034060.627:567): avc: denied { read } for pid=9641 comm="syz.1.912" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.164755][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.208567][ T9624] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.221941][ T30] audit: type=1400 audit(1751034060.627:568): avc: denied { open } for pid=9641 comm="syz.1.912" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 437.420490][ T5888] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 437.443454][ T9624] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.452179][ T30] audit: type=1400 audit(1751034060.627:569): avc: denied { create } for pid=9641 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 437.500600][ T5888] usb 3-1: device descriptor read/8, error -71 [ 437.617718][ T30] audit: type=1400 audit(1751034060.837:570): avc: denied { write } for pid=9641 comm="syz.1.912" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 437.771205][ T5888] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 438.221838][ T5888] usb 3-1: device descriptor read/8, error -71 [ 438.370586][ T5888] usb usb3-port1: unable to enumerate USB device [ 438.433249][ T9653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.914'. [ 438.872719][ T48] kernel read not supported for file /745/oom_adj (pid: 48 comm: kworker/1:1) [ 438.928001][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 438.950222][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 439.630698][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.450966][ T5888] kernel read not supported for file /732/oom_adj (pid: 5888 comm: kworker/0:5) [ 440.462212][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 441.280859][ T9674] tipc: Enabled bearer , priority 10 [ 441.416017][ T9688] netlink: 'syz.0.926': attribute type 23 has an invalid length. [ 441.423998][ T9688] netlink: 244 bytes leftover after parsing attributes in process `syz.0.926'. [ 441.485539][ T9687] sit0: entered promiscuous mode [ 441.493836][ T9687] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 441.501904][ T9687] netlink: 1 bytes leftover after parsing attributes in process `syz.1.925'. [ 441.678552][ T30] audit: type=1400 audit(1751034577.165:571): avc: denied { ioctl } for pid=9686 comm="syz.0.926" path="socket:[27116]" dev="sockfs" ino=27116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.730378][ T5888] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 442.535219][ T48] tipc: Node number set to 2886997004 [ 442.560327][ T30] audit: type=1400 audit(1751034577.295:572): avc: denied { create } for pid=9685 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.490097][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 546.497069][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9652/1:b..l [ 546.505355][ C1] rcu: (detected by 1, t=10502 jiffies, g=40501, q=656 ncpus=2) [ 546.513060][ C1] task:udevd state:R running task stack:27480 pid:9652 tgid:9652 ppid:5183 task_flags:0x400140 flags:0x00004002 [ 546.526886][ C1] Call Trace: [ 546.530158][ C1] [ 546.533087][ C1] __schedule+0x116a/0x5de0 [ 546.537602][ C1] ? __page_table_check_zero+0x346/0x5d0 [ 546.543240][ C1] ? __pfx___schedule+0x10/0x10 [ 546.548085][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.553304][ C1] preempt_schedule_irq+0x51/0x90 [ 546.558326][ C1] irqentry_exit+0x36/0x90 [ 546.562739][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 546.568193][ C1] RIP: 0010:lock_release+0x183/0x2f0 [ 546.573483][ C1] Code: 0f c1 05 78 aa 34 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 8d 68 34 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 546.593084][ C1] RSP: 0018:ffffc90002fe7870 EFLAGS: 00000206 [ 546.599144][ C1] RAX: e382d83949e7ae00 RBX: ffffffff8e5c4940 RCX: ffffc90002fe787c [ 546.607107][ C1] RDX: 0000000000000000 RSI: ffffffff8ddf4fdb RDI: ffffffff8c157ee0 [ 546.615073][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 546.623035][ C1] R10: 0000000000000000 R11: 00000000000122c7 R12: ffffffff816acad4 [ 546.630998][ C1] R13: 0000000000000206 R14: ffff8880551c0000 R15: 0000000000000001 [ 546.638963][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 546.644179][ C1] unwind_next_frame+0x3f9/0x20a0 [ 546.649204][ C1] ? kasan_save_stack+0x33/0x60 [ 546.654055][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 546.660207][ C1] arch_stack_walk+0x94/0x100 [ 546.664883][ C1] ? kasan_save_track+0x14/0x30 [ 546.669734][ C1] stack_trace_save+0x8e/0xc0 [ 546.674409][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 546.679776][ C1] ? arch_stack_walk+0xa6/0x100 [ 546.684621][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 546.689561][ C1] kasan_save_stack+0x33/0x60 [ 546.694234][ C1] ? kasan_save_stack+0x33/0x60 [ 546.699121][ C1] kasan_save_track+0x14/0x30 [ 546.703793][ C1] __kasan_slab_alloc+0x89/0x90 [ 546.708646][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 546.714103][ C1] ? getname_flags.part.0+0x4c/0x550 [ 546.719387][ C1] getname_flags.part.0+0x4c/0x550 [ 546.724511][ C1] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 546.730662][ C1] getname_flags+0x93/0xf0 [ 546.735078][ C1] vfs_fstatat+0xe1/0xf0 [ 546.739320][ C1] __do_sys_newfstatat+0x97/0x120 [ 546.744337][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 546.749975][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 546.755251][ C1] ? dnotify_flush+0x79/0x4c0 [ 546.759940][ C1] do_syscall_64+0xcd/0x4c0 [ 546.764446][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.770333][ C1] RIP: 0033:0x7f1536d11b0a [ 546.774740][ C1] RSP: 002b:00007ffdb8c6bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 546.783145][ C1] RAX: ffffffffffffffda RBX: 0000000000006180 RCX: 00007f1536d11b0a [ 546.791109][ C1] RDX: 00007ffdb8c6bef0 RSI: 00005650bb3a39b0 RDI: 00000000ffffff9c [ 546.799071][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00005650bb3a1930 [ 546.807033][ C1] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 546.814995][ C1] R13: 0000000000000000 R14: 00005650bb3a39b0 R15: 00005650bb40cce0 [ 546.822972][ C1] [ 546.825983][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10389 jiffies! g40501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 546.838297][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=25182 [ 546.846171][ C1] rcu: rcu_preempt kthread starved for 10390 jiffies! g40501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 546.857525][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 546.867481][ C1] rcu: RCU grace-period kthread stack dump: [ 546.873355][ C1] task:rcu_preempt state:I stack:28376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 546.885268][ C1] Call Trace: [ 546.888541][ C1] [ 546.891470][ C1] __schedule+0x116a/0x5de0 [ 546.895982][ C1] ? __lock_acquire+0x622/0x1c90 [ 546.900925][ C1] ? __pfx___schedule+0x10/0x10 [ 546.905778][ C1] ? find_held_lock+0x2b/0x80 [ 546.910451][ C1] ? schedule+0x2d7/0x3a0 [ 546.914781][ C1] schedule+0xe7/0x3a0 [ 546.918848][ C1] schedule_timeout+0x123/0x290 [ 546.923694][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 546.929065][ C1] ? __pfx_process_timeout+0x10/0x10 [ 546.934351][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 546.940154][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 546.945619][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 546.950389][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 546.955676][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.960872][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 546.965807][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 546.970661][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 546.976469][ C1] rcu_gp_kthread+0x270/0x380 [ 546.981138][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.986329][ C1] ? rcu_is_watching+0x12/0xc0 [ 546.991092][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.996298][ C1] ? __kthread_parkme+0x19e/0x250 [ 547.001323][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 547.006513][ C1] kthread+0x3c2/0x780 [ 547.010576][ C1] ? __pfx_kthread+0x10/0x10 [ 547.015160][ C1] ? rcu_is_watching+0x12/0xc0 [ 547.019920][ C1] ? __pfx_kthread+0x10/0x10 [ 547.024503][ C1] ret_from_fork+0x5d4/0x6f0 [ 547.029091][ C1] ? __pfx_kthread+0x10/0x10 [ 547.033672][ C1] ret_from_fork_asm+0x1a/0x30 [ 547.038443][ C1] [ 547.041452][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 547.047760][ C1] Sending NMI from CPU 1 to CPUs 0: [ 547.052957][ C0] NMI backtrace for cpu 0 [ 547.052967][ C0] CPU: 0 UID: 0 PID: 9688 Comm: syz.0.926 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 547.052984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.052992][ C0] RIP: 0010:lock_release+0x24/0x2f0 [ 547.053012][ C0] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 f9 69 34 12 48 89 44 24 10 <31> c0 0f 1f 44 00 00 65 8b 05 12 6a 34 12 83 f8 07 0f 87 38 02 00 [ 547.053024][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00000096 [ 547.053035][ C0] RAX: 26c55cb516431900 RBX: ffffffff8e5c4940 RCX: ffffffff89937857 [ 547.053043][ C0] RDX: ffff888028c04880 RSI: ffffffff8993767c RDI: ffffffff8e5c4940 [ 547.053052][ C0] RBP: ffff8880285a6c00 R08: 0000000000000001 R09: 0000000000000000 [ 547.053060][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8993767c [ 547.053068][ C0] R13: 185974366a5d0c15 R14: 0000000000000002 R15: ffff8880285a7010 [ 547.053077][ C0] FS: 00007feee11986c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 547.053091][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.053100][ C0] CR2: 00007f211dd53d58 CR3: 00000000570b6000 CR4: 00000000003526f0 [ 547.053109][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.053117][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.053125][ C0] Call Trace: [ 547.053130][ C0] [ 547.053137][ C0] advance_sched+0x6f1/0xc80 [ 547.053159][ C0] ? __pfx_advance_sched+0x10/0x10 [ 547.053174][ C0] __hrtimer_run_queues+0x202/0xad0 [ 547.053191][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 547.053205][ C0] ? read_tsc+0x9/0x20 [ 547.053222][ C0] hrtimer_interrupt+0x397/0x8e0 [ 547.053242][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 547.053263][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 547.053281][ C0] [ 547.053285][ C0] [ 547.053290][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.053304][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x70 [ 547.053320][ C0] Code: 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 98 bf 10 12 65 8b 05 a9 bf 10 12 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 [ 547.053332][ C0] RSP: 0018:ffffc9000238f948 EFLAGS: 00000286 [ 547.053343][ C0] RAX: 0000000080000000 RBX: 00000000fffffff5 RCX: ffffffff899a063d [ 547.053352][ C0] RDX: ffff888028c04880 RSI: ffffffff899a0646 RDI: 0000000000000005 [ 547.053360][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 547.053368][ C0] R10: 00000000fffffff5 R11: 0000000000000001 R12: ffff888029dfe0e8 [ 547.053376][ C0] R13: 000000007ffff000 R14: 000000007ffff000 R15: 0000000000000000 [ 547.053388][ C0] ? netlink_recvmsg+0x6ad/0xa90 [ 547.053400][ C0] ? netlink_recvmsg+0x6b6/0xa90 [ 547.053414][ C0] netlink_recvmsg+0x6b6/0xa90 [ 547.053427][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 547.053444][ C0] sock_recvmsg+0x1f6/0x250 [ 547.053459][ C0] sock_read_iter+0x2b9/0x3b0 [ 547.053472][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 547.053489][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 547.053509][ C0] ? security_file_permission+0x71/0x210 [ 547.053529][ C0] ? rw_verify_area+0xcf/0x680 [ 547.053549][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 547.053561][ C0] __io_read+0x354/0x14a0 [ 547.053578][ C0] io_read+0x1e/0x70 [ 547.053591][ C0] __io_issue_sqe+0xe8/0x7c0 [ 547.053610][ C0] io_issue_sqe+0x86/0xe50 [ 547.053625][ C0] io_submit_sqes+0x92d/0x2580 [ 547.053645][ C0] __do_sys_io_uring_enter+0xd6a/0x1630 [ 547.053662][ C0] ? __pfx___schedule+0x10/0x10 [ 547.053678][ C0] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 547.053693][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 547.053711][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 547.053730][ C0] ? fput+0x70/0xf0 [ 547.053749][ C0] ? xfd_validate_state+0x61/0x180 [ 547.053771][ C0] do_syscall_64+0xcd/0x4c0 [ 547.053791][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.053804][ C0] RIP: 0033:0x7feee038e929 [ 547.053816][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.053828][ C0] RSP: 002b:00007feee1198038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 547.053839][ C0] RAX: ffffffffffffffda RBX: 00007feee05b5fa0 RCX: 00007feee038e929 [ 547.053848][ C0] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 000000000000000a [ 547.053856][ C0] RBP: 00007feee0410b39 R08: 0000000000000000 R09: 0000000000000000 [ 547.053864][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.053872][ C0] R13: 0000000000000000 R14: 00007feee05b5fa0 R15: 00007fffd00c41d8 [ 547.053885][ C0]