last executing test programs: 16.354075365s ago: executing program 2 (id=566): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xf9, 0x5, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x87, 0x40, 0xfffffffc, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x1, 0xfff2}, {0xf, 0x7302c37d3782af2f}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 15.328869657s ago: executing program 2 (id=569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x109480, 0x18a) copy_file_range(r2, 0x0, r1, 0x0, 0x3df1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'xfrm0\x00', &(0x7f0000000580)=@ethtool_gstrings={0x1b, 0x5, 0x22, "4b238d2d44df7d9a2761169989eb223895a5c601a422890c0ac99a590ed2f26eccba"}}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0xd0, 0x248, 0xfeffffff, 0x178, 0x248, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xffffff00], 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0xffff, 0x3, 0xfa, 0x85, 0xffffffd9}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010102, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'veth1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x62, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c) 12.985489782s ago: executing program 2 (id=574): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 12.788952192s ago: executing program 0 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001f80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x400}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30}}], 0x2, 0x0) mknod(&(0x7f0000001140)='./dev\x00', 0x200, 0x2) r5 = syz_open_pts(0xffffffffffffffff, 0x40002) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000140)=""/4096) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) 11.901054495s ago: executing program 4 (id=582): r0 = syz_io_uring_setup(0x34b4, &(0x7f0000000540)={0x0, 0x6723, 0x8, 0xffffffff, 0x2080}, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_open_dev$admmidi(0x0, 0x20, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0x48, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x48}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) r6 = getpid() mmap$binder(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x82) sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x11, 0x0, @fd=r0, 0x100, 0x0, 0x0, 0x12, 0x0, {0x4, 0x0, 0x5d, '\x00', 0x0, 0x200}}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) 11.869698533s ago: executing program 2 (id=583): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) getpgrp(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) accept(r2, &(0x7f0000000080)=@isdn, &(0x7f0000000140)=0x80) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r3, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r7, 0x3554000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB], 0x50) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000200)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="9262f880cea122c4ad49e4551464b88b6bd0d8ebdd932a3234f55c9c818826b698bbd9ece4d2f295915c079e9bbcabe9bac416da5c1a1e0bb7f6e6fd94262de578cef0bb", 0x44}, {&(0x7f0000001dc0)="eeef962d73b59845488c675fc1a789015d0203df4021c0b8f1939c28b177fc9926da540f509d4544ecdafd063a54e9a196db9c2e130a787a8897a707b5078cdf0e2bbfcb9011a1380553b5d9df698dd0aa142320545e494e0dfe7e92ae5809fa3f948e61d4886c625417dff27f37a11e06f3bc3384889dbfa2c6574b349579f0540b6f46f4d4c084e6809ac742911a", 0x8f}, {&(0x7f0000001e80)="99035a98985268b5e6433a8f6c98332f14845cff837fbf5114d8e5b1606142d01d37f40346cdd271d8ec231f2e8ab1f05f321deec4bc312194e6deea81cc222a61bd0cea472c57fd4038eafe1f445acf621260454ec0dcc23e378dfed08637fd88e4dfe80534e81dbbb74fc3c93c6f8a45d536da893ca8d879823b27513bed11e75dd016e298e204c11b8f93ec849998687272da6e47c61b6b0d989f3e14f0ab13f5c3486c47e98404e9f3862361bfd5a397a2865ce2f38172ebefc2c4b151287f9066d8d7f1da7e1508c54fd6ca61da110e6aee6ef95ee6080ce89ff8b4e708e4571e193fc8", 0xe6}, {&(0x7f0000001f80)="879a155a0f86d72a8da2f8e9205dee214a75bd5362008517c34fac96ece780d5f6a47743be27fab3a1b9b1dfbaf5ec276559ebbc4076e0d089b82caa6424285c865f15049098aa624d1e7e3e84b7d5be535e8eaede8f70d94b351082326e0f936c366f72ee5cd9129303503e5fbd57b90610d4b4ab4435e2fc33a9b9464e4420a4f27229c9e7406cb6acf2271bb52cf997aed62c7a391497c02405e7cecf0ad1f950dd", 0xa3}, {&(0x7f0000002040)="37f63d7234cf6d04b3dcacf923be1eb88ef404f3fa0124df82f558f26a92d3a54db3b29080f45602ae9ade450ea42e18b6bba02cc8b3415ac1712ead5252b3a1e756f345ff1e207e41ddd6af4f5134cc64ba522f2ba7608dfb0eba83e4391e8f3b1735f4645e2ca2dcf4dddb84b6f0ea22053e981a7371b704f5d652019d628ec050a7d5f1e59c409c59b5603147eed24b1b07ff0200ecb8747ed5bd63e5fcd40441a511248eff7c041bdcbd01340a8355dde6d5bb3de04a0f20f2e8d87e02eafeb7cd20f59569b209d7d6fe515332d4f5dd6c2b9ca3a615a39af3967d6ce7db59b93efcb7297898", 0xe8}, {&(0x7f0000002140)="5652d36b99", 0x5}, {&(0x7f0000002180)="baf3c0fa8c8e181db7dd60dd6b9947b4afe8c119ef63f1b0e4d1a96c404af40228b961276b44ecc6ab186718ed1aa1544a42bbdde71db98256c2f1c9d12e31929a96b5dc74bd65eaa20f4b14b85e8bf27bb6055c1ad443ac56ff8d40c58945260a", 0x61}, {&(0x7f0000002200)}], 0x9, 0x0, 0x0, 0x20040801}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x400}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff62, 0x0, 0x0, 0x0, 0xa}, 0x94) 11.223795769s ago: executing program 0 (id=584): socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff2cf0085d375101cc81d105a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) read(r4, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x40e8662e, 0x0) 11.164933903s ago: executing program 4 (id=585): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.634862632s ago: executing program 0 (id=587): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34, 0x6}}], 0x18}}], 0x1, 0x14) getpgrp(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) accept(r2, &(0x7f0000000080)=@isdn, &(0x7f0000000140)=0x80) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r3, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x3554000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x400}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff62, 0x0, 0x0, 0x0, 0xa}, 0x94) 10.63412307s ago: executing program 4 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r0, 0x0, 0xa0028000}, 0x38) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r2 = semget$private(0x0, 0x2, 0x402) semctl$IPC_STAT(r2, 0x0, 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x80, r1, 0x0, 0x0, 0x3ea1f922}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r3, r3) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e24, @local}], 0x2c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r4, &(0x7f0000001a00)=[{&(0x7f00000003c0)="d2", 0x1}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r4, &(0x7f0000000600)=ANY=[], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) r5 = socket(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f00000006c0)={&(0x7f0000000540)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)="04ad", 0x2}], 0x1, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x48}, 0x4000000) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x141}}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) 8.3776356s ago: executing program 4 (id=593): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 6.674591781s ago: executing program 0 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000001f80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x400}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30}}], 0x2, 0x0) mknod(&(0x7f0000001140)='./dev\x00', 0x200, 0x2) r5 = syz_open_pts(0xffffffffffffffff, 0x40002) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000140)=""/4096) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000000)) 6.56986041s ago: executing program 2 (id=598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.043511299s ago: executing program 1 (id=599): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xf9, 0x5, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x87, 0x40, 0xfffffffc, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x1, 0xfff2}, {0xf, 0x7302c37d3782af2f}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4.327202881s ago: executing program 3 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.159389083s ago: executing program 3 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='measure', 0x7) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/c1/protocol\x00', 0x80183, 0x2c) 4.148996548s ago: executing program 1 (id=603): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000"], 0x0) 3.949539351s ago: executing program 1 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x109480, 0x18a) copy_file_range(r2, 0x0, r1, 0x0, 0x3df1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xd}, {0xb, 0xd}, {0xfff3, 0xf}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'xfrm0\x00', &(0x7f0000000580)=@ethtool_gstrings={0x1b, 0x5, 0x22, "4b238d2d44df7d9a2761169989eb223895a5c601a422890c0ac99a590ed2f26eccba"}}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0xd0, 0x248, 0xfeffffff, 0x178, 0x248, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xffffff00], 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0xffff, 0x3, 0xfa, 0x85, 0xffffffd9}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010102, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'veth1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x62, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c) 3.926136212s ago: executing program 2 (id=605): socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, 0x0, &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff2cf0085d37", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) read(r4, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x40e8662e, 0x0) 3.892440142s ago: executing program 3 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "b07346e3"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) 3.737570342s ago: executing program 4 (id=607): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r3, 0x407, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.635235191s ago: executing program 4 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @NDA_NH_ID={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 796.986384ms ago: executing program 3 (id=609): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 651.983756ms ago: executing program 3 (id=610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, 0x0, 0x4800) 553.349495ms ago: executing program 1 (id=611): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03072cbd7000fcdbdf25160000000c00064001"], 0x20}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040800) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 433.177124ms ago: executing program 3 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf1ba}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r2 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) mount(&(0x7f0000000300)=@filename='./ffs\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x2080, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000063c0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000440)="13384ea2bdb8592e541b265a8d1e7d8d27ea24026c71ae373a94b7152e139d7a149d1149df5a4743039721e2c3f907586bc76c9aeda5fa3552", 0x39}, {&(0x7f0000000480)="197ce7dd88ea422aa925ea456d5b6e619ece2abb27376b872d0498b3c2ef536d2e974471297335138800d2997acd86e391bd48a4527c7f2ee95dd7e43c838ee24788e1f5e1189b1c82ab7d4a84c336cdb4a9be1c4783553dda61b78f4474f73a30b63d07c2210daa810003d8b789520f080bbffb2529ae343f0b511cbeefc0a4991a74419c1922b489dc04621bfc462b6c30636655aa8227ef08d6082f8a605fa4afc7dee90e202f72df00be3a15f126c83635b4c3483d037c097c692e10643fc8f23f17cd1e52a47cab37e5adeef0d02dae2d", 0xd3}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}], 0x40, 0x800}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)="ef04b3e6cfc577d2d441d0f695c1ef3d63c4d44784f67722d7bc", 0x1a}, {&(0x7f00000008c0)="c762cf5d225d239152cc7cf25360e648fe1f64f93f7ea84227d1ce75df04b76f8dfab9e2f0c16d0262", 0x29}], 0x2, &(0x7f00000009c0)=[@rights={{0x30, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r8, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c}}], 0x90, 0x20040}}, {{&(0x7f0000000a80)=@file={0x1, './ffs/ep0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)="e0a4e0a4d725c8e5f68dbcb2d385c8777423565e5b41956d55bfbe15048dd32404026d47bfb268a559a4309d5708c8b877d3933bb7c78c872f329aec3a2d0a0a104c5f1e5e6a40f4", 0x48}, {&(0x7f0000000b80)="09865605b03cd8ebe25fb4c84a30504bf07ea325f16a60e84b7fb7c871b4ee63c7d3742c153397609b332c54db9f5544d707d6b12a16c41fddd80a84a1bfc16b4085e478041b833eed61646524a6722e2af03ec09273d559a8e9b7cc2b8222a41c8db6a89b48be40a4470d53a6a347676c54a4410956f6d620e87c791e", 0x7d}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x8800}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000d80)="80f8057c14cb1c5a14f70f2f842f651fbf1e782d42b58484a63e76c351164f2404641c0e7ba418830de59b9a1b95144c1d2f53279d60d3e05f045e4ad157460ac429fe70b61a57cfbece01c96476c7d8af31dd334417332608c8b3ac0be940079dd8c6888dbd7a2249705a572b9f9c492d2fe8d7efc8a72ea42040e68912d225c9033195dd23db1abfb31e50463ae8f153331b07e6a8d88e908fbc1c1965bfc5164f5f0525bacc8daa6cf73ba888df316144f1fdead0901e110d33777b2cbd894a1e4fd18689e0e52e5e1b455909cb456c9b01929ce63a924791406d6e3bbf124cb67941790646c10b4af9aadbe0005dd1b2e230ed348558", 0xf8}, {&(0x7f0000000e80)="3994e74d37f05a1e5214bac30bf1f92a6d8f7e5057cdea092baeec9b857207fc98ba9d756f91182d35b90d6d2e540812e0120b6e3ece7a14c1064ccdd3276198ec3b92270133c7e936d1a6c86d9c0dc3c3ea8a6f8d392ee35d", 0x59}, {&(0x7f0000001000)="33214cbcc481823554a52bae6fc2e7e0453e14ffbdb92027814b82cc76685cc3ee88bfc838263b5509cc71a5fe68b08d89d42683344a0775fd5e518a44842d27e18adf3eba8cbab9a6e1a38417ef547f30d82f2807b6", 0x56}, {&(0x7f0000001080)="76a91a85eff92635068dac6f447bff2d290da031a23d175c414d0fe457ffda9b041321778a976dee0e6fe8c43a6685388ad1030c936bab689146cf93a8cc69aecde6b66bad100d9c8ab1d403b8f78ba1cc3d0dd16a50e559fb8e4127f0e9a90688e7e70f917b51c1db0a8b7d1a34697395b32cf8fa1ab50d", 0x78}, {&(0x7f0000001100)="526d0c6df0fe82db8771c8a50efabdd49c30406bbc5b79ce8b5fe97537a4cfebf5f887ba74b79936c12895cdc256407196074282f0853eaaf828e2106b2a307c41f3e6a1f4721e59f025476c8684b5d851d408442ce66791471a80dfd0d32459e3cd3b8873381f98435f3c91ed8d3271558c90113a275dc2415edcfce5af8ca9a330539368d8bfd6c82e237b87f88bdc33f1f62a99513d31a842691b6fa660e4d80ee0c52c5d12e590f9496bbc7d813399f72924a39e36a9fe9a65b22da12dbf2e", 0xc1}], 0x5, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [r5, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8000}}, {{&(0x7f00000012c0)=@file={0x1, 'functionfs\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001340)="eba0bebc81ad0015579a4fda8e6959e5c467837326c937de6955320c9f5412fe9276c08f9796eb5c434713a6fa299794e85407316b109575f43dbb3a215669ea27a92dfb51f65bdffb1d4b690bba87f8b50f1d326b502a2566a73893862f99af0f69ba9cf74896541977751b1db49a050658a42e6e980b1464ea91", 0x7b}, {&(0x7f00000013c0)="4d4187d33fe201b67da16c2783f5297a", 0x10}, {&(0x7f0000001400)="463d0cdfe84be9b7c9397befbdc73e339bd26c2156190bf4e0072919b2dbd54bafa445b5f132f88bc553fa86efdd35ba57af4476125dbc2e497708454f420506606fef08ba8b4b0d1e04a611a3d8348a9d3e436e585bfbf7dbeca15de370659a5415612df720a708d26a7a7c10140ca53e3da29625f969874c4792b6e47dc5ccac7cc948ffc8347ecb2f02078764739ad2ebc8347937434c5954b4e727c6dba3a1707d6333c62cc7ffa38c758689810a20f8d71c61091c2f69f45571e27effb7ea", 0xc1}, {&(0x7f0000001500)="e8fe9d62eba38a1404e36a0920394eafac4410c75a1a57ec7754e01c96ed6f75491c9e99455dddad64ce1ae4d62cc9885166479cd822b13646708ad27461725357420eb3a74fe0b76ad90928a7f6c9b582199e7c20a1f952b8ebebb9bb945d4854470f358d31455bc1f545f1", 0x6c}, {&(0x7f0000001580)="298d0012", 0x4}, {&(0x7f00000015c0)="65e017e927a176d43177100a86e1d2e7adb144eaa7b734019dae37b9ada3e589aa7efb", 0x23}, {&(0x7f0000001600)="c6968ca65751c38d77d9198d3909ea03525c964fab83b8d0f5b829b575b20e7b9ca56ca85479a7db7b701f4a247def", 0x2f}, {&(0x7f0000001640)="721a2d86aeae53d9c648d06699209671af7b640663630600cc783cb47e6554fa65e513b0f8ca056ee13631466ec41e74f6e09c3f4fdbdb38c941bb5e699f76a6811c6dfd5637b2c632f36de9a8d18c936017e68bad66fa67baabff75e656dc25840560a55fe6acec580745f9b76eeb0898da1dc65a84581244079f3098340070b369af363e2cfe105a9b3f628e1946da6219e0a87f46b5b42828ec68fb5474588ca6dea96187aba94ff9f5c6fb9d95eac39d35a164fc4f5626762e5870fae159d6e8f5b177ae64c81128df70ac", 0xcd}, {&(0x7f0000001740)="e185fa207177dd61796746398be00132b7e2bf6245a495a0f2cc690e5499a898128881a40f7e24f03e1892ab6d652ae01c7e0510a8f05283b56e8d298450963c", 0x40}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20, 0x2400c801}}, {{&(0x7f0000001880)=@file={0x0, './ffs\x00'}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000001900)="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", 0xfa}, {&(0x7f0000001a00)="2c3f9d69c45672ce6b6f9225ff8b214c5da3c1393216d1fc42ee3f85f03e5e29b68b4b99bd854bf0027c9248267bf842b2ab6f9a0b586a401bb8a015632261b6c6e92e7a2264ef923d8f9cad7f7f97da623890dc5e01964f63092c9d7eec2b560ebc5d64692f632f58e0bfdf9002df2d46d8d70d1ddf524641ffa09b4e86669f0105", 0x82}, {&(0x7f0000001ac0)="56437c25d3f17abd4c95fab249f741ed91b21dc800feae73b32d3d10454cde003b5643e929146a0422d7f933b9e52d58caf9dbcfc4bf1f4d4636eb84ce3f9b9e3e82160a359fa60d6d4d3a419a8777ef3db09fc176c70c12bee3686fed6f703d7034c6c1b1453db1fe3db3b9bcff959c5e03c9e6971fa3122860f4cc74a68bdef1dd866638112de4c2bb24", 0x8b}, {&(0x7f0000001b80)="58228f8bf2b95dbad011ac8de357787dc700cd393feaf1adc0b0075a9e183770ed16deec00bebcd473cba1384c0a8bfa9a721313198ffc2a7a2eebe9bb407fb5bae782ed29", 0x45}, {&(0x7f0000001c00)="63b056e65aff5c1bcad3227944d38b90cb8500209a33aa24aafd93feec53b75f", 0x20}, {&(0x7f0000001c40)="5574b65536c87df7405ee7e17b6d1fdfc84a6cd6c8d8f8323bccd3d99b01259016f36dc74c747f2ab0b3aa34e6b7da580f81eb3d704f431e389cc3652bfd04", 0x3f}, {&(0x7f0000001c80)="f098587ecaeae3d0900217f11295bb956690f80f3372145c12bef74da61e5bfafce1221bd9b6df3a7016798158f6f940bf9c76fb62b84934fbbb0a791f6a51719ec6a352b215b45f42cd5a85d7caf54b7404cd4078540947bdfef1e5d286f2cd2a7c6904e5d112e8271a02138999fffc4cb60dfda842d97cf7fd1d5c6727ebe9f9343e033ee5da1afd5cddc575e58da51c366cac28", 0x95}, {&(0x7f0000001e40)="411b921abb9c6d16fbdde97a115a50599987421fefd2a343fdc1964ee0a41ebc331310800ae429d6267e43e12f48840168e5ff85e44382082026f04221e8385c1788f6df8f80968f339b51eb3ce8c5795c70861a80bc6a792cfda4aa75167a14bdd6d265a306ae1d3d48a1d97fa74d917c8245bcffe4854d6ec7a5765e1c3024d0309d65787934bc9bc146846577ee39300339b59a3b180e43f422", 0x9b}, {&(0x7f0000001f00)="d4a73b6fc5ec3586340a850c7b7637b9fb325e0f260f9cf663852b83f4fb1cabf1842302eda8cb0db57919b49f6c7efb6a137d5ca4ff5320c03467b1f358429671d35fef2715d26c016fe9bb274b6edc089a2e3c3bcf5ba5dba5a5f8cada6242afc0b21c00f0edd5da591ac2c24a9d05d782d3534876dd76c1179f41360b099c4c0ab6535853cc7db5fabb", 0x8b}, {&(0x7f0000001fc0)="1c19e409ade0d3c0886583410e966c5ac01c4843be3c59cb271d8f8d941ac162553401c858420225cb793cd70ee955396d2a11ba967cd3367167176ad548c777cdef5a4e9f4da25765c4a0e2c762f29e6d7e93a148dbeb90fc55583ca3a490236d9f7b17064b9dbd4540c4a193649a3eb7a143c213cb055f45b02f85d59068a23a5c3f7edc21279f4444071f48f55cbf957055bf9889", 0x96}], 0xa, &(0x7f0000006300)=[@rights={{0x28, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r8, 0xffffffffffffffff, r5]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x810}}], 0x6, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 406.691736ms ago: executing program 0 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 244.499868ms ago: executing program 1 (id=614): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000"], 0x0) 150.024102ms ago: executing program 0 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 0s ago: executing program 1 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='measure', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/c1/protocol\x00', 0x80183, 0x2c) kernel console output (not intermixed with test programs): sbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 87.057999][ T5742] usb 1-1: USB disconnect, device number 3 [ 87.129513][ T30] usb 4-1: USB disconnect, device number 2 [ 87.215246][ T5713] usb 3-1: USB disconnect, device number 3 [ 88.035484][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 88.035511][ T31] audit: type=1400 audit(1789436882.672:269): avc: denied { prog_run } for pid=5894 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.529472][ T5699] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.741410][ T5699] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 88.773282][ T5699] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.812561][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.812624][ T5699] usb 5-1: Product: syz [ 88.812681][ T5699] usb 5-1: Manufacturer: syz [ 88.812750][ T5699] usb 5-1: SerialNumber: syz [ 89.371002][ T5699] usb 5-1: Limiting number of CPorts to U8_MAX [ 89.868164][ T5699] usb 5-1: Not enough endpoints found in device, aborting! [ 89.888862][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.066599][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 90.116678][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.116741][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 90.233342][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.237864][ T9] usb 2-1: Product: syz [ 90.237892][ T9] usb 2-1: Manufacturer: syz [ 90.237931][ T9] usb 2-1: SerialNumber: syz [ 90.505482][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 90.536676][ T2268] usb 5-1: USB disconnect, device number 2 [ 91.434988][ T31] audit: type=1400 audit(1789436886.072:270): avc: denied { write } for pid=5902 comm="syz.1.30" name="kcm" dev="proc" ino=4026533093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.477401][ T31] audit: type=1400 audit(1789436886.112:271): avc: denied { accept } for pid=5902 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.503080][ T31] audit: type=1400 audit(1789436886.142:272): avc: denied { write } for pid=5917 comm="syz.4.38" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 91.503944][ T5920] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 91.540387][ T9] usb 2-1: failed to send ARPC request 1: -110 [ 91.540497][ T9] usb 2-1: failed to execute ARPC: -110 [ 91.540511][ T9] usb 2-1: failed to set connected state for cport 0: -110 [ 91.540544][ T9] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 91.573602][ T5921] nvmet: disable ns before setting buffered_io value. [ 91.586189][ T9] usb 2-1: failed to send ARPC request 3: -32 [ 91.586302][ T9] usb 2-1: failed to execute ARPC: -32 [ 91.586317][ T9] usb 2-1: failed to clear cport 0: -32 [ 91.586334][ T9] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 91.592696][ T9] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 91.915949][ T5812] IPVS: starting estimator thread 0... [ 91.954211][ T5928] Zero length message leads to an empty skb [ 92.019002][ T5929] IPVS: using max 47 ests per chain, 112800 per kthread [ 92.570324][ T31] audit: type=1400 audit(1789436887.202:273): avc: denied { ioctl } for pid=5940 comm="syz.4.46" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.579240][ T31] audit: type=1400 audit(1789436887.202:274): avc: denied { set_context_mgr } for pid=5940 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 93.628040][ T5942] binder: BINDER_SET_CONTEXT_MGR already set [ 93.628051][ T5942] binder: 5940:5942 ioctl 4018620d 200000004a80 returned -16 [ 93.689710][ T31] audit: type=1400 audit(1789436888.262:275): avc: denied { map } for pid=5940 comm="syz.4.46" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.926078][ T2268] usb 2-1: USB disconnect, device number 4 [ 94.882457][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.882936][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 95.044750][ T25] usb 2-1: device descriptor read/64, error -32 [ 95.351035][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.574324][ T25] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 95.603467][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.674033][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.674061][ T25] usb 2-1: Product: syz [ 95.674087][ T25] usb 2-1: Manufacturer: syz [ 95.674105][ T25] usb 2-1: SerialNumber: syz [ 96.256758][ T25] usb 2-1: Limiting number of CPorts to U8_MAX [ 96.289613][ T25] usb 2-1: Not enough endpoints found in device, aborting! [ 96.765278][ T25] usb 2-1: USB disconnect, device number 6 [ 96.957494][ T5961] nvmet: disable ns before setting buffered_io value. [ 97.146388][ T31] audit: type=1400 audit(1789436891.782:276): avc: denied { create } for pid=5966 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.337323][ T5973] socket: no more sockets [ 97.483094][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.707680][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 97.710922][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.739034][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.739061][ T25] usb 1-1: Product: syz [ 97.739074][ T25] usb 1-1: Manufacturer: syz [ 97.739089][ T25] usb 1-1: SerialNumber: syz [ 97.777350][ T25] usb 1-1: config 0 descriptor?? [ 97.815290][ T25] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 97.815335][ T25] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 97.949324][ T5983] futex_wake_op: syz.3.60 tries to shift op by 144; fix this program [ 97.992644][ T31] audit: type=1400 audit(1789436892.622:277): avc: denied { ioctl } for pid=5975 comm="syz.1.57" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.054809][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.60'. [ 98.352370][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 98.517571][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 98.553488][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.566585][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.566623][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.580388][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.773442][ T9] usb 4-1: config 0 descriptor?? [ 99.139386][ T31] audit: type=1400 audit(1789436893.772:278): avc: denied { write } for pid=5966 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.295177][ T31] audit: type=1400 audit(1789436893.902:279): avc: denied { ioctl } for pid=5966 comm="syz.2.54" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10374 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.549020][ T31] audit: type=1400 audit(1789436894.182:280): avc: denied { ioctl } for pid=5966 comm="syz.2.54" path="socket:[9821]" dev="sockfs" ino=9821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.640584][ T5699] usb 1-1: USB disconnect, device number 4 [ 100.649844][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 100.649908][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.678498][ T9] usb 4-1: USB disconnect, device number 3 [ 100.796745][ T6001] nvmet: disable ns before setting buffered_io value. [ 101.093047][ T6010] ip_tables: iptables: counters copy to user failed while replacing table [ 101.600764][ T6013] 9pnet_fd: Insufficient options for proto=fd [ 101.615192][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.825099][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 101.853101][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.896074][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.896139][ T9] usb 3-1: Product: syz [ 101.896178][ T9] usb 3-1: Manufacturer: syz [ 101.896249][ T9] usb 3-1: SerialNumber: syz [ 102.540904][ T9] usb 3-1: Limiting number of CPorts to U8_MAX [ 102.627568][ T9] usb 3-1: Not enough endpoints found in device, aborting! [ 103.551834][ T31] audit: type=1400 audit(1789436898.182:281): avc: denied { read } for pid=6019 comm="syz.0.70" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.584553][ T31] audit: type=1400 audit(1789436898.192:282): avc: denied { open } for pid=6019 comm="syz.0.70" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.625635][ T5742] usb 3-1: USB disconnect, device number 4 [ 103.724288][ T31] audit: type=1400 audit(1789436898.362:283): avc: denied { create } for pid=6021 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.957366][ T31] audit: type=1400 audit(1789436898.572:284): avc: denied { connect } for pid=6019 comm="syz.0.70" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.957412][ T31] audit: type=1400 audit(1789436898.572:285): avc: denied { setopt } for pid=6019 comm="syz.0.70" laddr=127.0.0.1 lport=255 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.957446][ T31] audit: type=1400 audit(1789436898.582:286): avc: denied { write } for pid=6019 comm="syz.0.70" laddr=127.0.0.1 lport=255 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.964224][ T31] audit: type=1400 audit(1789436898.602:287): avc: denied { name_bind } for pid=6019 comm="syz.0.70" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.651027][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 105.651061][ T31] audit: type=1400 audit(1789436900.282:289): avc: denied { cmd } for pid=6033 comm="syz.2.73" path="socket:[9966]" dev="sockfs" ino=9966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.040212][ T6037] nvmet: disable ns before setting buffered_io value. [ 106.053370][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.196274][ T6045] xt_HMARK: proto mask must be zero with L3 mode [ 106.304120][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 107.479859][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.511462][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.511478][ T25] usb 1-1: Product: syz [ 107.511487][ T25] usb 1-1: Manufacturer: syz [ 107.511496][ T25] usb 1-1: SerialNumber: syz [ 107.540374][ T25] usb 1-1: config 0 descriptor?? [ 107.548398][ T25] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 107.548444][ T25] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 107.702955][ T31] audit: type=1400 audit(1789436902.342:290): avc: denied { mount } for pid=6048 comm="syz.2.78" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.838171][ T189] usb 1-1: USB disconnect, device number 5 [ 108.460832][ T6061] jffs2: notice: (6061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.681072][ T31] audit: type=1400 audit(1789436903.312:291): avc: denied { write } for pid=6058 comm="syz.4.81" name="core" dev="configfs" ino=3237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.380187][ T6066] binder: 6065:6066 ioctl 4018620d 0 returned -22 [ 110.392355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.543795][ T31] audit: type=1400 audit(1789436905.182:292): avc: denied { bind } for pid=6070 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.545447][ T31] audit: type=1400 audit(1789436905.182:293): avc: denied { node_bind } for pid=6070 comm="syz.3.84" src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 110.545493][ T31] audit: type=1400 audit(1789436905.182:294): avc: denied { listen } for pid=6070 comm="syz.3.84" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.721449][ T31] audit: type=1400 audit(1789436905.352:295): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.812180][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.362284][ T5713] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.409283][ T31] audit: type=1400 audit(1789436906.042:296): avc: denied { read write } for pid=6081 comm="syz.2.87" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.455701][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 111.494717][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.494748][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 111.494776][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 111.494803][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26217, setting to 1024 [ 111.494840][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.498939][ T31] audit: type=1400 audit(1789436906.082:297): avc: denied { open } for pid=6081 comm="syz.2.87" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.552603][ T5713] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 111.618701][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.666536][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.666600][ T5713] usb 2-1: Product: syz [ 111.666650][ T5713] usb 2-1: Manufacturer: syz [ 111.666728][ T5713] usb 2-1: SerialNumber: syz [ 112.144409][ T5713] usb 2-1: Limiting number of CPorts to U8_MAX [ 112.201567][ T5713] usb 2-1: Not enough endpoints found in device, aborting! [ 112.204509][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.204978][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.205414][ T6071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.076866][ T9] pl2303 4-1:1.0: pl2303 converter detected [ 113.154218][ T9] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 113.238181][ T31] audit: type=1400 audit(1789436907.872:298): avc: denied { append } for pid=6070 comm="syz.3.84" name="ttyUSB0" dev="devtmpfs" ino=2849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.326370][ T25] usb 2-1: USB disconnect, device number 7 [ 113.380893][ T6071] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 113.487574][ T6071] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 113.494513][ T6071] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 113.502709][ T6071] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 113.506576][ T6071] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 113.831027][ T6071] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 113.860189][ T6071] pl2303 ttyUSB0: error sending break = -32 [ 115.025800][ T6094] binder: BINDER_SET_CONTEXT_MGR already set [ 115.025811][ T6094] binder: 6093:6094 ioctl 4018620d 200000004a80 returned -16 [ 115.297151][ T30] usb 4-1: USB disconnect, device number 4 [ 115.346704][ T30] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 115.369313][ T30] pl2303 4-1:1.0: device disconnected [ 115.625233][ T6107] nvmet: disable ns before setting buffered_io value. [ 115.754577][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.055229][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 116.060828][ T30] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.099934][ T30] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.100090][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.100255][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.100431][ T30] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.100822][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.529873][ T30] usb 4-1: GET_CAPABILITIES returned 0 [ 116.529918][ T30] usbtmc 4-1:16.0: can't read capabilities [ 116.752823][ T31] audit: type=1400 audit(1789436911.392:299): avc: denied { write } for pid=6102 comm="syz.3.94" name="usbtmc0" dev="devtmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.794654][ T30] usb 4-1: USB disconnect, device number 5 [ 117.312315][ T5782] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.472951][ T5782] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 117.473917][ T5782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.477504][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.477529][ T5782] usb 5-1: Product: syz [ 117.477544][ T5782] usb 5-1: Manufacturer: syz [ 117.477558][ T5782] usb 5-1: SerialNumber: syz [ 117.895964][ T5782] usb 5-1: config 0 descriptor?? [ 118.257198][ T5782] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 118.257227][ T5782] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 118.323592][ T31] audit: type=1400 audit(1789436912.962:300): avc: denied { mount } for pid=6135 comm="syz.2.106" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.337734][ T31] audit: type=1400 audit(1789436912.972:301): avc: denied { view } for pid=6135 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.343098][ T6136] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 119.029477][ T25] usb 5-1: USB disconnect, device number 3 [ 119.052368][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.212800][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 119.213762][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.216044][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.216069][ T9] usb 4-1: Product: syz [ 119.216083][ T9] usb 4-1: Manufacturer: syz [ 119.216098][ T9] usb 4-1: SerialNumber: syz [ 119.232649][ T6146] nvmet: disable ns before setting buffered_io value. [ 119.418121][ T31] audit: type=1400 audit(1789436914.052:302): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.461580][ T9] usb 4-1: Limiting number of CPorts to U8_MAX [ 119.468999][ T9] usb 4-1: Not enough endpoints found in device, aborting! [ 119.514361][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.515655][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.668531][ T5742] usb 4-1: USB disconnect, device number 6 [ 119.967186][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.990609][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.317534][ T5887] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.317607][ T5887] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.317656][ T5887] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.317685][ T5887] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.493021][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 121.493110][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 121.594205][ T30] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 121.613576][ T6178] nvmet: disable ns before setting buffered_io value. [ 121.753533][ T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 121.757866][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.777215][ T30] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 121.844032][ T6185] FAULT_INJECTION: forcing a failure. [ 121.844032][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.844091][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.0.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.844123][ T6185] Tainted: [L]=SOFTLOCKUP [ 121.844131][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 121.844149][ T6185] Call Trace: [ 121.844156][ T6185] [ 121.844164][ T6185] dump_stack_lvl+0x100/0x190 [ 121.844212][ T6185] should_fail_ex.cold+0x5/0xa [ 121.844241][ T6185] _copy_from_iter+0x1f4/0x1690 [ 121.844268][ T6185] ? __asan_memset+0x23/0x50 [ 121.844291][ T6185] ? __pfx__copy_from_iter+0x10/0x10 [ 121.844313][ T6185] ? __pfx___alloc_skb+0x10/0x10 [ 121.844349][ T6185] netlink_sendmsg+0x808/0xda0 [ 121.844378][ T6185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.844418][ T6185] ? selinux_socket_sendmsg+0x198/0x2f0 [ 121.844447][ T6185] sock_write_iter+0x53a/0x5b0 [ 121.844477][ T6185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.844499][ T6185] ? __pfx_sock_write_iter+0x10/0x10 [ 121.844536][ T6185] ? __pfx___file_has_perm+0x10/0x10 [ 121.844562][ T6185] do_iter_readv_writev+0x6f7/0x930 [ 121.844595][ T6185] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 121.844623][ T6185] ? selinux_file_permission+0x8f/0x6d0 [ 121.844649][ T6185] ? bpf_lsm_file_permission+0x9/0x10 [ 121.844674][ T6185] ? security_file_permission+0x76/0x210 [ 121.844699][ T6185] ? rw_verify_area+0xce/0x6d0 [ 121.844738][ T6185] vfs_writev+0x360/0xdd0 [ 121.844760][ T6185] ? __lock_acquire+0x5c0/0x1f40 [ 121.844787][ T6185] ? __pfx_vfs_writev+0x10/0x10 [ 121.844808][ T6185] ? percpu_counter_add_batch+0xb9/0x230 [ 121.844835][ T6185] ? lock_acquire+0x1d1/0x380 [ 121.844855][ T6185] ? __fget_files+0x34/0x3d0 [ 121.844889][ T6185] ? __fget_files+0x21f/0x3d0 [ 121.844919][ T6185] ? do_writev+0x28a/0x340 [ 121.844936][ T6185] do_writev+0x28a/0x340 [ 121.844956][ T6185] ? __pfx_do_writev+0x10/0x10 [ 121.844983][ T6185] do_syscall_64+0x123/0x790 [ 121.845013][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.845035][ T6185] RIP: 0033:0x7f3fd0b9e159 [ 121.845059][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.845079][ T6185] RSP: 002b:00007f3fd1ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.845106][ T6185] RAX: ffffffffffffffda RBX: 00007f3fd0e25fa0 RCX: 00007f3fd0b9e159 [ 121.845119][ T6185] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 121.845130][ T6185] RBP: 00007f3fd0c3503b R08: 0000000000000000 R09: 0000000000000000 [ 121.845141][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.845151][ T6185] R13: 00007f3fd0e26038 R14: 00007f3fd0e25fa0 R15: 00007ffea5d40ad8 [ 121.845174][ T6185] [ 121.990178][ T31] audit: type=1400 audit(1789436916.622:303): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.340596][ T31] audit: type=1400 audit(1789436916.972:304): avc: denied { mount } for pid=6170 comm="syz.3.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.347792][ T31] audit: type=1400 audit(1789436916.972:305): avc: denied { search } for pid=6170 comm="syz.3.115" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 122.347838][ T31] audit: type=1400 audit(1789436916.972:306): avc: denied { read write } for pid=6170 comm="syz.3.115" name="dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.347875][ T31] audit: type=1400 audit(1789436916.982:307): avc: denied { open } for pid=6170 comm="syz.3.115" path="/17/tracefs/dynamic_events" dev="tracefs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.654854][ T30] gspca_sn9c20x: Write register 1001 failed -71 [ 122.654873][ T30] gspca_sn9c20x: Device initialization failed [ 122.654924][ T30] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 123.479608][ T6193] binder: BINDER_SET_CONTEXT_MGR already set [ 123.479634][ T6193] binder: 6183:6193 ioctl 4018620d 200000004a80 returned -16 [ 123.691271][ T31] audit: type=1400 audit(1789436918.322:308): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 124.121789][ T30] usb 4-1: USB disconnect, device number 7 [ 124.837721][ T31] audit: type=1400 audit(1789436919.472:309): avc: denied { create } for pid=6196 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.888759][ T31] audit: type=1400 audit(1789436919.522:310): avc: denied { write } for pid=6196 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.921262][ T31] audit: type=1400 audit(1789436919.552:311): avc: denied { read } for pid=6196 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.252320][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.286894][ T31] audit: type=1400 audit(1789436919.912:312): avc: denied { write } for pid=6202 comm="syz.0.129" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 125.436397][ T6203] binder: 6202:6203 ioctl c0306201 200000000080 returned -14 [ 125.438875][ T30] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 125.483372][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.484821][ T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 125.499126][ T6203] binder: 6202:6203 ioctl c0306201 2000000003c0 returned -14 [ 125.505740][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.505765][ T30] usb 4-1: Product: syz [ 125.505780][ T30] usb 4-1: Manufacturer: syz [ 125.505795][ T30] usb 4-1: SerialNumber: syz [ 125.882796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.092110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.612114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.802107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.962112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.972115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.996483][ T30] usb 4-1: failed to set cport flags for port 0 [ 126.996531][ T30] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 127.072112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.159060][ T30] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 127.190755][ T6214] nvmet: disable ns before setting buffered_io value. [ 127.389111][ T31] audit: type=1400 audit(1789436922.022:313): avc: denied { ioctl } for pid=6215 comm="syz.0.134" path="socket:[10222]" dev="sockfs" ino=10222 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.389305][ T6216] syzkaller0: entered promiscuous mode [ 127.389322][ T6216] syzkaller0: entered allmulticast mode [ 127.486543][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.487051][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.668021][ T31] audit: type=1400 audit(1789436922.302:314): avc: denied { accept } for pid=6195 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.785594][ T6229] netlink: 9 bytes leftover after parsing attributes in process `syz.4.137'. [ 127.786404][ T6229] gretap0: entered promiscuous mode [ 127.916582][ T5699] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.131598][ T5699] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 128.219748][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.294946][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.295011][ T5699] usb 1-1: Product: syz [ 128.295053][ T5699] usb 1-1: Manufacturer: syz [ 128.295094][ T5699] usb 1-1: SerialNumber: syz [ 128.463660][ T5699] usb 1-1: config 0 descriptor?? [ 128.658030][ T5699] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 128.658360][ T5699] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 128.892734][ T30] usb 4-1: USB disconnect, device number 8 [ 129.588677][ T6255] binder: BINDER_SET_CONTEXT_MGR already set [ 129.588703][ T6255] binder: 6248:6255 ioctl 4018620d 200000004a80 returned -16 [ 130.279322][ T31] audit: type=1800 audit(1789436924.912:315): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.142" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 130.283429][ T6251] nvmet: disable ns before setting buffered_io value. [ 130.359110][ T31] audit: type=1400 audit(1789436924.992:316): avc: denied { open } for pid=6245 comm="syz.1.142" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.370250][ T31] audit: type=1400 audit(1789436925.002:317): avc: denied { ioctl } for pid=6245 comm="syz.1.142" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x4b4a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 130.773707][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.854349][ T5699] usb 1-1: USB disconnect, device number 6 [ 130.931413][ T5742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 130.954551][ T5742] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 130.954626][ T5742] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 130.954677][ T5742] usb 4-1: config 171 has no interface number 0 [ 130.991553][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.991644][ T5742] usb 4-1: Product: syz [ 130.991692][ T5742] usb 4-1: Manufacturer: syz [ 130.991741][ T5742] usb 4-1: SerialNumber: syz [ 131.342220][ T984] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.430567][ T6264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.433443][ T6264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.466111][ T31] audit: type=1400 audit(1789436926.092:318): avc: denied { read write } for pid=6263 comm="syz.3.149" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.466313][ T31] audit: type=1400 audit(1789436926.092:319): avc: denied { open } for pid=6263 comm="syz.3.149" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 131.497541][ T31] audit: type=1400 audit(1789436926.122:320): avc: denied { create } for pid=6263 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.499814][ T31] audit: type=1400 audit(1789436926.122:321): avc: denied { bind } for pid=6263 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.508783][ T31] audit: type=1400 audit(1789436926.122:322): avc: denied { accept } for pid=6263 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.635935][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.637506][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.805537][ T984] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 132.016969][ T984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.016999][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 132.116694][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.116723][ T984] usb 1-1: Product: syz [ 132.116738][ T984] usb 1-1: Manufacturer: syz [ 132.116752][ T984] usb 1-1: SerialNumber: syz [ 132.145600][ T5742] ath6kl: Failed to submit usb control message: -110 [ 132.145640][ T5742] ath6kl: unable to send the bmi data to the device: -110 [ 132.145654][ T5742] ath6kl: Unable to send get target info: -110 [ 132.174424][ T5742] ath6kl: Failed to init ath6kl core: -110 [ 132.177084][ T5742] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 132.216624][ T5742] usb 4-1: USB disconnect, device number 9 [ 132.502124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 132.642115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.460173][ T984] usb 1-1: Cannot retrieve CPort count: -110 [ 133.460214][ T984] usb 1-1: Cannot retrieve CPort count: -110 [ 133.460236][ T984] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 134.176560][ T6301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.159'. [ 134.228369][ T6303] nvmet: disable ns before setting buffered_io value. [ 134.535064][ T5742] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.598782][ T30] usb 1-1: USB disconnect, device number 7 [ 135.603681][ T5742] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 135.604588][ T5742] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.616701][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.616726][ T5742] usb 5-1: Product: syz [ 135.616740][ T5742] usb 5-1: Manufacturer: syz [ 135.616754][ T5742] usb 5-1: SerialNumber: syz [ 135.638012][ T5742] usb 5-1: config 0 descriptor?? [ 135.647285][ T5742] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 135.647332][ T5742] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 136.006360][ T6323] syzkaller0: entered promiscuous mode [ 136.006382][ T6323] syzkaller0: entered allmulticast mode [ 136.062746][ T6323] tipc: Started in network mode [ 136.062775][ T6323] tipc: Node identity 5a7d920722af, cluster identity 4711 [ 136.062947][ T6323] tipc: Enabled bearer , priority 0 [ 136.065603][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 136.065618][ T31] audit: type=1400 audit(1789436930.702:324): avc: denied { append } for pid=6324 comm="syz.3.170" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.070022][ T6319] tipc: Resetting bearer [ 136.177096][ T6319] tipc: Disabling bearer [ 136.396809][ T6331] netlink: 9 bytes leftover after parsing attributes in process `syz.0.171'. [ 136.397230][ T6331] gretap0: entered promiscuous mode [ 136.489887][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 137.657257][ T189] usb 5-1: USB disconnect, device number 4 [ 137.719410][ T6344] nvmet: disable ns before setting buffered_io value. [ 137.757338][ T6343] netlink: 9 bytes leftover after parsing attributes in process `syz.2.175'. [ 137.771752][ T6343] gretap0: entered promiscuous mode [ 137.930398][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 138.080519][ T6350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.120718][ T6353] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 138.165032][ T1455] IPVS: starting estimator thread 0... [ 138.253977][ T6359] IPVS: using max 34 ests per chain, 81600 per kthread [ 138.332376][ T189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.365896][ T6361] binder: 6360:6361 ioctl c0306201 200000000080 returned -14 [ 138.366712][ T6361] binder: 6360:6361 ioctl c0306201 2000000003c0 returned -14 [ 138.482820][ T189] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 138.485252][ T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.485281][ T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 138.487986][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.488011][ T189] usb 3-1: Product: syz [ 138.488026][ T189] usb 3-1: Manufacturer: syz [ 138.488041][ T189] usb 3-1: SerialNumber: syz [ 138.572462][ T31] audit: type=1400 audit(1789436933.202:325): avc: denied { write } for pid=6364 comm="syz.1.184" name="cluster" dev="configfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.574805][ T31] audit: type=1400 audit(1789436933.212:326): avc: denied { write } for pid=6364 comm="syz.1.184" name="node" dev="configfs" ino=11840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.743488][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 139.477322][ C0] usb 3-1: invalid arpc response id received: 0 [ 141.307776][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 141.309777][ T6383] nvmet: disable ns before setting buffered_io value. [ 141.456862][ T189] usb 3-1: failed to send ARPC request 1: -71 [ 141.457032][ T189] usb 3-1: failed to execute ARPC: -71 [ 141.457124][ T189] usb 3-1: failed to set connected state for cport 0: -71 [ 141.457135][ T189] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 141.457704][ T189] usb 3-1: failed to send ARPC request 3: -71 [ 141.457942][ T189] usb 3-1: failed to execute ARPC: -71 [ 141.458101][ T189] usb 3-1: failed to clear cport 0: -71 [ 141.458119][ T189] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 141.462905][ T189] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 141.484711][ T189] usb 3-1: USB disconnect, device number 5 [ 141.703913][ T31] audit: type=1400 audit(1789436936.342:327): avc: denied { write } for pid=6389 comm="syz.4.192" name="heartbeat" dev="configfs" ino=11841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.790601][ T6393] syzkaller0: entered promiscuous mode [ 141.790615][ T6393] syzkaller0: entered allmulticast mode [ 141.850855][ T6393] tipc: Enabled bearer , priority 0 [ 141.869901][ T6390] tipc: Resetting bearer [ 141.914442][ T6399] binder: 6398:6399 ioctl c0306201 200000000080 returned -14 [ 141.914560][ T6390] tipc: Disabling bearer [ 141.914868][ T6399] binder: 6398:6399 ioctl c0306201 2000000003c0 returned -14 [ 142.002745][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.154364][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 142.186103][ T30] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.203356][ T30] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 142.203427][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.203501][ T30] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.203561][ T30] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.203757][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.438429][ T6408] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.513780][ T30] usb 4-1: GET_CAPABILITIES returned 0 [ 142.513824][ T30] usbtmc 4-1:16.0: can't read capabilities [ 142.703989][ T6416] xt_HMARK: proto mask must be zero with L3 mode [ 143.214148][ T6417] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 143.265314][ T6417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.443227][ T6417] team0: Port device netdevsim1 added [ 143.585481][ T30] usb 4-1: USB disconnect, device number 10 [ 143.621486][ T6422] nvmet: disable ns before setting buffered_io value. [ 143.835674][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 146.466360][ T31] audit: type=1800 audit(1789436941.092:328): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.212" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 146.679628][ T6451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.688685][ T6453] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 146.721099][ T6459] nvmet: disable ns before setting buffered_io value. [ 146.738321][ T31] audit: type=1400 audit(1789436941.372:329): avc: denied { read write } for pid=6458 comm="syz.0.214" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 146.739356][ T31] audit: type=1400 audit(1789436941.372:330): avc: denied { open } for pid=6458 comm="syz.0.214" path="/49/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 146.746467][ T31] audit: type=1400 audit(1789436941.382:331): avc: denied { ioctl } for pid=6458 comm="syz.0.214" path="/49/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 146.787934][ T6460] device-mapper: table: 248:0: zero-length target [ 146.787951][ T6460] device-mapper: ioctl: error adding target to table [ 147.031725][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 147.041731][ T6467] syzkaller0: entered promiscuous mode [ 147.041754][ T6467] syzkaller0: entered allmulticast mode [ 147.059423][ T1455] IPVS: starting estimator thread 0... [ 147.088887][ T6467] tipc: Started in network mode [ 147.088914][ T6467] tipc: Node identity 0a653dd06e53, cluster identity 4711 [ 147.089121][ T6467] tipc: Enabled bearer , priority 0 [ 147.114728][ T6464] tipc: Resetting bearer [ 147.142541][ T6470] IPVS: using max 48 ests per chain, 115200 per kthread [ 147.169360][ T6464] tipc: Disabling bearer [ 147.262694][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 147.315708][ T31] audit: type=1400 audit(1789436941.952:332): avc: denied { connect } for pid=6473 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 147.316508][ T31] audit: type=1400 audit(1789436941.952:333): avc: denied { name_connect } for pid=6473 comm="syz.0.220" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 147.780154][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 148.379375][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 148.427394][ T6484] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 148.477531][ T6484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.494481][ T6484] team0: Port device netdevsim1 added [ 148.528342][ T6495] nvmet: disable ns before setting buffered_io value. [ 148.617132][ T31] audit: type=1400 audit(1789436943.252:334): avc: denied { write } for pid=6497 comm="syz.1.228" name="subsystems" dev="configfs" ino=3234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.619215][ T31] audit: type=1400 audit(1789436943.252:335): avc: denied { write } for pid=6497 comm="syz.1.228" name="ports" dev="configfs" ino=3235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.621726][ T31] audit: type=1400 audit(1789436943.252:336): avc: denied { read } for pid=6497 comm="syz.1.228" name="addr_trtype" dev="configfs" ino=12915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 148.939072][ T6509] syzkaller0: entered promiscuous mode [ 148.939095][ T6509] syzkaller0: entered allmulticast mode [ 149.502816][ T31] audit: type=1800 audit(1789436944.132:337): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.232" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 149.860927][ T6519] syzkaller0: entered promiscuous mode [ 149.860951][ T6519] syzkaller0: entered allmulticast mode [ 149.927427][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 149.986603][ T6529] nvmet: disable ns before setting buffered_io value. [ 150.037728][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 150.057142][ T6519] tipc: Enabled bearer , priority 0 [ 150.079359][ T6518] tipc: Resetting bearer [ 150.091597][ T6523] socket: no more sockets [ 150.116712][ T6518] tipc: Disabling bearer [ 150.162429][ T6523] socket: no more sockets [ 150.212249][ T5742] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 150.336872][ T6538] IPVS: rr: UDP [::1]:8080 - no destination available [ 150.362733][ T5742] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 150.363742][ T5742] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 150.363772][ T5742] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.363802][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.367368][ T5742] usb 2-1: config 0 descriptor?? [ 150.369441][ T6527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.436866][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 150.521549][ T31] audit: type=1800 audit(1789436945.152:338): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.245" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 151.456559][ T6555] binder: BINDER_SET_CONTEXT_MGR already set [ 151.456589][ T6555] binder: 6548:6555 ioctl 4018620d 200000004a80 returned -16 [ 152.167385][ T5742] usbhid 2-1:0.0: can't add hid device: -71 [ 152.167473][ T5742] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.313781][ T5742] usb 2-1: USB disconnect, device number 8 [ 152.893193][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 152.914087][ T6564] nvmet: disable ns before setting buffered_io value. [ 153.259949][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 153.410352][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 153.463870][ T31] audit: type=1400 audit(1789436948.102:339): avc: denied { name_bind } for pid=6580 comm="syz.3.260" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.987085][ T6586] netlink: 'syz.4.261': attribute type 18 has an invalid length. [ 153.987115][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 153.997562][ T31] audit: type=1400 audit(1789436948.612:340): avc: denied { read write } for pid=6584 comm="syz.4.261" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 153.997609][ T31] audit: type=1400 audit(1789436948.612:341): avc: denied { ioctl open } for pid=6584 comm="syz.4.261" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.100065][ T31] audit: type=1400 audit(1789436948.722:342): avc: denied { read write } for pid=6584 comm="syz.4.261" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.100268][ T31] audit: type=1400 audit(1789436948.722:343): avc: denied { open } for pid=6584 comm="syz.4.261" path="/dev/vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.100430][ T31] audit: type=1400 audit(1789436948.732:344): avc: denied { name_bind } for pid=6584 comm="syz.4.261" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 154.513576][ T973] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.519941][ T5887] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.520056][ T5887] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.520162][ T5887] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.838121][ T6587] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 155.280183][ T6587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.302336][ T6587] team0: Port device netdevsim1 added [ 155.342374][ T31] audit: type=1400 audit(1789436949.982:345): avc: denied { prog_load } for pid=6602 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.346244][ T31] audit: type=1400 audit(1789436949.982:346): avc: denied { prog_run } for pid=6602 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.769576][ T6599] syzkaller0: entered promiscuous mode [ 155.769599][ T6599] syzkaller0: entered allmulticast mode [ 156.010971][ T6615] nvmet: disable ns before setting buffered_io value. [ 156.027367][ T31] audit: type=1400 audit(1789436950.662:347): avc: denied { ioctl } for pid=6616 comm="syz.3.267" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.104240][ T6608] syzkaller0: entered promiscuous mode [ 156.104256][ T6608] syzkaller0: entered allmulticast mode [ 156.105446][ T6607] tipc: Enabled bearer , priority 0 [ 156.130874][ T6605] tipc: Resetting bearer [ 156.348096][ T5742] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.439026][ T6605] tipc: Disabling bearer [ 156.752686][ T5742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 156.837768][ T5742] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 156.837798][ T5742] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 156.837818][ T5742] usb 4-1: config 171 has no interface number 0 [ 157.048036][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.048065][ T5742] usb 4-1: Product: syz [ 157.048080][ T5742] usb 4-1: Manufacturer: syz [ 157.048095][ T5742] usb 4-1: SerialNumber: syz [ 157.495111][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.501839][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.627681][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.628205][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.783013][ T5742] ath6kl: Failed to submit usb control message: -71 [ 157.783055][ T5742] ath6kl: unable to send the bmi data to the device: -71 [ 157.783069][ T5742] ath6kl: Unable to send get target info: -71 [ 157.783635][ T5742] ath6kl: Failed to init ath6kl core: -71 [ 157.784035][ T5742] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 157.808005][ T5742] usb 4-1: USB disconnect, device number 11 [ 158.021297][ T31] audit: type=1400 audit(1789436952.652:348): avc: denied { map_create } for pid=6642 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.114208][ T6647] nvmet: disable ns before setting buffered_io value. [ 158.232693][ T6650] syzkaller0: entered promiscuous mode [ 158.232708][ T6650] syzkaller0: entered allmulticast mode [ 158.282222][ T2268] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.286837][ T6650] tipc: Enabled bearer , priority 0 [ 158.314395][ T6649] tipc: Resetting bearer [ 158.432173][ T2268] usb 1-1: Using ep0 maxpacket: 32 [ 158.434136][ T2268] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.434181][ T2268] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 158.435094][ T2268] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 158.435118][ T2268] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 158.435138][ T2268] usb 1-1: config 14 has no interface number 0 [ 158.435154][ T2268] usb 1-1: config 14 has no interface number 1 [ 158.435207][ T2268] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 158.435230][ T2268] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 158.435253][ T2268] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 158.435279][ T2268] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 158.435305][ T2268] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 158.435330][ T2268] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.435355][ T2268] usb 1-1: config 14 interface 57 has no altsetting 0 [ 158.435372][ T2268] usb 1-1: config 14 interface 228 has no altsetting 0 [ 158.437210][ T2268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.437234][ T2268] usb 1-1: Product: syz [ 158.437249][ T2268] usb 1-1: Manufacturer: syz [ 158.437264][ T2268] usb 1-1: SerialNumber: syz [ 158.551326][ T6649] tipc: Disabling bearer [ 158.790706][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 159.312628][ T30] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.503278][ T30] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 159.559111][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.636313][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.636380][ T30] usb 3-1: Product: syz [ 159.636396][ T30] usb 3-1: Manufacturer: syz [ 159.636451][ T30] usb 3-1: SerialNumber: syz [ 159.652872][ T2268] legousbtower 1-1:14.57: interrupt endpoints not found [ 159.736960][ T30] usb 3-1: config 0 descriptor?? [ 159.740309][ T30] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 159.740337][ T30] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 159.742013][ T2268] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 159.787451][ T2268] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 160.080959][ T6678] syzkaller0: entered promiscuous mode [ 160.080981][ T6678] syzkaller0: entered allmulticast mode [ 160.154438][ T6680] nvmet: disable ns before setting buffered_io value. [ 160.213282][ T6678] tipc: Started in network mode [ 160.213298][ T6678] tipc: Node identity , cluster identity 4711 [ 160.213322][ T6678] tipc: Failed to obtain node identity [ 160.213350][ T6678] tipc: Enabling of bearer rejected, failed to enable media [ 160.297129][ T25] usb 1-1: USB disconnect, device number 8 [ 160.297224][ C1] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 160.343859][ T25] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 160.439560][ T6687] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 160.439577][ T6687] device-mapper: ioctl: error adding target to table [ 161.103328][ T6697] xt_HMARK: proto mask must be zero with L3 mode [ 163.045346][ T25] usb 3-1: USB disconnect, device number 6 [ 164.238890][ T6715] nvmet: disable ns before setting buffered_io value. [ 164.974827][ T6716] binder: BINDER_SET_CONTEXT_MGR already set [ 164.974841][ T6716] binder: 6714:6716 ioctl 4018620d 200000004a80 returned -16 [ 165.752857][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.059041][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.063664][ T25] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.063693][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.078003][ T25] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.078031][ T25] usb 3-1: Product: syz [ 166.078046][ T25] usb 3-1: Manufacturer: syz [ 166.078059][ T25] usb 3-1: SerialNumber: syz [ 166.097737][ T25] usb 3-1: config 0 descriptor?? [ 166.130434][ T25] usb 3-1: selecting invalid altsetting 0 [ 166.531395][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 166.531425][ T31] audit: type=1400 audit(1789436961.162:350): avc: denied { create } for pid=6720 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.726549][ T31] audit: type=1400 audit(1789436961.362:351): avc: denied { listen } for pid=6720 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.804640][ T6720] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 166.809011][ T25] usb 3-1: USB disconnect, device number 7 [ 167.142257][ T30] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.292167][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 167.294115][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.294160][ T30] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 167.295074][ T30] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 167.295098][ T30] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 167.295118][ T30] usb 4-1: config 14 has no interface number 0 [ 167.295133][ T30] usb 4-1: config 14 has no interface number 1 [ 167.295192][ T30] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 167.295216][ T30] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 167.295243][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 167.295269][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 167.295295][ T30] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 167.295320][ T30] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.295344][ T30] usb 4-1: config 14 interface 57 has no altsetting 0 [ 167.295360][ T30] usb 4-1: config 14 interface 228 has no altsetting 0 [ 167.298132][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.298156][ T30] usb 4-1: Product: syz [ 167.298172][ T30] usb 4-1: Manufacturer: syz [ 167.298187][ T30] usb 4-1: SerialNumber: syz [ 167.487438][ T6745] netlink: 9 bytes leftover after parsing attributes in process `syz.2.312'. [ 168.788104][ T30] legousbtower 4-1:14.57: interrupt endpoints not found [ 169.501291][ T30] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 169.524575][ T30] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 169.785832][ T189] usb 4-1: USB disconnect, device number 12 [ 169.785939][ C0] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 169.817701][ T189] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 171.432558][ T5699] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.481326][ T6786] nvmet: disable ns before setting buffered_io value. [ 172.721660][ T5699] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.735618][ T5699] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.735646][ T5699] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.739513][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.739547][ T5699] usb 5-1: Product: syz [ 172.739562][ T5699] usb 5-1: Manufacturer: syz [ 172.739576][ T5699] usb 5-1: SerialNumber: syz [ 172.789192][ T5699] usb 5-1: config 0 descriptor?? [ 172.814234][ T5699] usb 5-1: selecting invalid altsetting 0 [ 173.063887][ T31] audit: type=1400 audit(1789436967.702:352): avc: denied { bind } for pid=6774 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.098397][ T2268] usb 5-1: USB disconnect, device number 5 [ 174.003339][ T6818] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 176.530170][ T6837] binder: BINDER_SET_CONTEXT_MGR already set [ 176.530179][ T6837] binder: 6836:6837 ioctl 4018620d 200000004a80 returned -16 [ 177.389780][ T6846] device-mapper: ioctl: populate_table: no targets specified [ 177.656416][ T6857] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 177.658409][ T6857] device-mapper: ioctl: error adding target to table [ 178.022693][ T6862] syzkaller0: entered promiscuous mode [ 178.022742][ T6862] syzkaller0: entered allmulticast mode [ 179.248238][ T6862] tipc: Enabled bearer , priority 0 [ 179.250476][ T6861] tipc: Resetting bearer [ 179.420374][ T6861] tipc: Disabling bearer [ 181.377011][ T6895] syz.3.350 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 181.377059][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.3.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.377088][ T6895] Tainted: [L]=SOFTLOCKUP [ 181.377096][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 181.377108][ T6895] Call Trace: [ 181.377115][ T6895] [ 181.377123][ T6895] dump_stack_lvl+0x100/0x190 [ 181.377162][ T6895] dump_header+0xfb/0x606 [ 181.377186][ T6895] oom_kill_process.cold+0xd/0x380 [ 181.377212][ T6895] out_of_memory+0x340/0x14f0 [ 181.377244][ T6895] ? __pfx_out_of_memory+0x10/0x10 [ 181.377278][ T6895] mem_cgroup_out_of_memory+0xc6/0x130 [ 181.377304][ T6895] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 181.377325][ T6895] ? find_held_lock+0x2b/0x80 [ 181.377358][ T6895] ? do_raw_spin_unlock+0x145/0x1e0 [ 181.377383][ T6895] ? _raw_spin_unlock+0x28/0x50 [ 181.377407][ T6895] try_charge_memcg+0x783/0xf60 [ 181.377441][ T6895] ? __pfx_try_charge_memcg+0x10/0x10 [ 181.377469][ T6895] ? find_held_lock+0x2b/0x80 [ 181.377495][ T6895] ? rcu_read_unlock+0x17/0x60 [ 181.377523][ T6895] ? rcu_read_unlock+0x17/0x60 [ 181.377561][ T6895] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 181.377601][ T6895] ? kasan_save_track+0x14/0x30 [ 181.377626][ T6895] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 181.377649][ T6895] ? sock_alloc_inode+0x26/0x2c0 [ 181.377679][ T6895] ? __pfx_sock_alloc_inode+0x10/0x10 [ 181.377717][ T6895] sock_alloc_inode+0x26/0x2c0 [ 181.377744][ T6895] ? __pfx_sock_alloc_inode+0x10/0x10 [ 181.377771][ T6895] alloc_inode+0x68/0x250 [ 181.377794][ T6895] sock_alloc+0x44/0x280 [ 181.377817][ T6895] ? security_socket_create+0x7f/0x250 [ 181.377849][ T6895] __sock_create+0xc2/0x860 [ 181.377884][ T6895] __sys_socket+0x14d/0x260 [ 181.377904][ T6895] ? __pfx___sys_socket+0x10/0x10 [ 181.377933][ T6895] __x64_sys_socket+0x72/0xb0 [ 181.377952][ T6895] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.377978][ T6895] do_syscall_64+0x123/0x790 [ 181.378008][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.378029][ T6895] RIP: 0033:0x7fe94559e159 [ 181.378047][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.378065][ T6895] RSP: 002b:00007fe946522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 181.378086][ T6895] RAX: ffffffffffffffda RBX: 00007fe945825fa0 RCX: 00007fe94559e159 [ 181.378100][ T6895] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 181.378112][ T6895] RBP: 00007fe94563503b R08: 0000000000000000 R09: 0000000000000000 [ 181.378124][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.378137][ T6895] R13: 00007fe945826038 R14: 00007fe945825fa0 R15: 00007ffe53d1f7b8 [ 181.378169][ T6895] [ 181.450809][ T6895] memory: usage 0kB, limit 0kB, failcnt 21 [ 181.450828][ T6895] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 181.450842][ T6895] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 181.450854][ T6895] Memory cgroup stats for /syz3/test: [ 181.451205][ T6895] cache 0 [ 181.451214][ T6895] rss 0 [ 181.451221][ T6895] rss_huge 0 [ 181.451228][ T6895] shmem 0 [ 181.451235][ T6895] mapped_file 0 [ 181.451243][ T6895] dirty 0 [ 181.451250][ T6895] writeback 0 [ 181.451257][ T6895] workingset_refault_anon 0 [ 181.451265][ T6895] workingset_refault_file 0 [ 181.451273][ T6895] swap 0 [ 181.451280][ T6895] swapcached 0 [ 181.451287][ T6895] pgpgin 0 [ 181.451295][ T6895] pgpgout 0 [ 181.451302][ T6895] pgfault 3 [ 181.451308][ T6895] pgmajfault 0 [ 181.451316][ T6895] inactive_anon 0 [ 181.451323][ T6895] active_anon 0 [ 181.451331][ T6895] inactive_file 0 [ 181.451338][ T6895] active_file 0 [ 181.451344][ T6895] unevictable 0 [ 181.451351][ T6895] hierarchical_memory_limit 0 [ 181.451359][ T6895] hierarchical_memsw_limit 9223372036854771712 [ 181.451367][ T6895] total_cache 0 [ 181.451374][ T6895] total_rss 0 [ 181.451380][ T6895] total_rss_huge 0 [ 181.451386][ T6895] total_shmem 0 [ 181.451393][ T6895] total_mapped_file 0 [ 181.451400][ T6895] total_dirty 0 [ 181.451406][ T6895] total_writeback 0 [ 181.451414][ T6895] total_workingset_refault_anon 0 [ 181.451421][ T6895] total_workingset_refault_file 0 [ 181.451429][ T6895] total_swap 0 [ 181.451436][ T6895] total_swapcached 0 [ 181.451443][ T6895] total_pgpgin 0 [ 181.451450][ T6895] total_pgpgout 0 [ 181.451456][ T6895] total_pgfault 3 [ 181.451463][ T6895] total_pgmajfault 0 [ 181.451470][ T6895] total_inactive_anon 0 [ 181.451477][ T6895] total_active_anon 0 [ 181.451485][ T6895] total_inactive_file 0 [ 181.451492][ T6895] total_active_file 0 [ 181.451499][ T6895] total_unevictable 0 [ 181.451506][ T6895] anon_cost 0 [ 181.451513][ T6895] file_cost 0 [ 181.451521][ T6895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.350,pid=6893,uid=0 [ 181.451803][ T6895] Memory cgroup out of memory: Killed process 6893 (syz.3.350) total-vm:104432kB, anon-rss:1428kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 181.452468][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 181.552666][ T6895] socket: no more sockets [ 181.628630][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 181.645895][ T25] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 181.645931][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.645962][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.674158][ T25] usb 5-1: config 0 descriptor?? [ 181.713033][ T6891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.199809][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x3 [ 182.199849][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199873][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199897][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199922][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199945][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199969][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.199993][ T25] hid-steam 0003:28DE:1205.0001: unknown main item tag 0x0 [ 182.209042][ T25] hid-steam 0003:28DE:1205.0001: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 182.296110][ T25] hid-steam 0003:28DE:1205.0001: steam_register:steam_get_attributes failed with error -22 [ 182.296147][ T25] hid-steam 0003:28DE:1205.0001: Steam Deck 'XXXXXXXXXX' connected [ 182.404988][ T25] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0001/input/input14 [ 182.641177][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0001/input/input15 [ 182.842721][ T25] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x3 [ 182.842757][ T25] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 182.952873][ T984] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 183.070206][ T25] hid-steam 0003:28DE:1205.0002: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 183.108859][ T984] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 183.117006][ T984] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 183.117033][ T984] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 183.117053][ T984] usb 1-1: config 171 has no interface number 0 [ 183.147703][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.147731][ T984] usb 1-1: Product: syz [ 183.147746][ T984] usb 1-1: Manufacturer: syz [ 183.147760][ T984] usb 1-1: SerialNumber: syz [ 183.157819][ T25] usb 5-1: USB disconnect, device number 6 [ 183.208758][ T6917] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 183.270659][ T6921] openvswitch: netlink: Flow key attr not present in new flow. [ 183.328115][ T25] hid-steam 0003:28DE:1205.0001: Steam Deck 'XXXXXXXXXX' disconnected [ 183.465384][ T6917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.484330][ T6917] team0: Port device netdevsim1 added [ 183.507131][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.507557][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.602183][ T6918] fido_id[6918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 183.670265][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.670729][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.737612][ T6931] syzkaller0: entered promiscuous mode [ 183.737637][ T6931] syzkaller0: entered allmulticast mode [ 183.899730][ T984] ath6kl: Failed to submit usb control message: -71 [ 183.899757][ T984] ath6kl: unable to send the bmi data to the device: -71 [ 183.899766][ T984] ath6kl: Unable to send get target info: -71 [ 183.911736][ T984] ath6kl: Failed to init ath6kl core: -71 [ 183.912251][ T984] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 183.930738][ T984] usb 1-1: USB disconnect, device number 9 [ 184.244716][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 184.422995][ T6933] virtio-fs: tag not found [ 187.178913][ T41] IPVS: starting estimator thread 0... [ 187.188191][ T6946] virtio-fs: tag not found [ 187.207102][ T6961] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 187.273104][ T6962] IPVS: using max 46 ests per chain, 110400 per kthread [ 187.557432][ T6968] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 187.674823][ T6970] binder: 6969:6970 ioctl c0306201 200000000080 returned -14 [ 187.691357][ T6970] binder: 6969:6970 ioctl c0306201 2000000003c0 returned -14 [ 187.794544][ T6972] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 187.794568][ T6972] device-mapper: ioctl: error adding target to table [ 187.864509][ T6952] netlink: 'syz.4.376': attribute type 10 has an invalid length. [ 188.014448][ T6982] openvswitch: netlink: Flow key attr not present in new flow. [ 188.478099][ T6989] tipc: Enabled bearer , priority 0 [ 188.536753][ T6988] tipc: Disabling bearer [ 188.928787][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.928823][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.560578][ T6999] syzkaller0: entered promiscuous mode [ 189.560604][ T6999] syzkaller0: entered allmulticast mode [ 190.782210][ T984] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.933069][ T984] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.934000][ T984] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.934027][ T984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.935959][ T984] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.935983][ T984] usb 2-1: Product: syz [ 190.935996][ T984] usb 2-1: Manufacturer: syz [ 190.936011][ T984] usb 2-1: SerialNumber: syz [ 190.938479][ T984] usb 2-1: config 0 descriptor?? [ 191.019024][ T984] usb 2-1: selecting invalid altsetting 0 [ 191.262033][ T984] usb 2-1: USB disconnect, device number 9 [ 191.795273][ T7012] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 191.795298][ T7012] device-mapper: ioctl: error adding target to table [ 192.531331][ T6158] IPVS: starting estimator thread 0... [ 192.591783][ T7027] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 192.635136][ T7030] IPVS: using max 38 ests per chain, 91200 per kthread [ 193.512167][ T189] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.673846][ T189] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 193.676095][ T189] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 193.676121][ T189] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 193.676139][ T189] usb 2-1: config 171 has no interface number 0 [ 193.678520][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.678544][ T189] usb 2-1: Product: syz [ 193.678560][ T189] usb 2-1: Manufacturer: syz [ 193.678575][ T189] usb 2-1: SerialNumber: syz [ 193.863576][ T6984] Set syz1 is full, maxelem 65536 reached [ 194.224780][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.271510][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.522244][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.522776][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.763761][ T189] ath6kl: Failed to submit usb control message: -110 [ 194.763804][ T189] ath6kl: unable to send the bmi data to the device: -110 [ 194.763818][ T189] ath6kl: Unable to send get target info: -110 [ 194.794899][ T189] ath6kl: Failed to init ath6kl core: -110 [ 194.795362][ T189] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 194.849835][ T984] usb 2-1: USB disconnect, device number 10 [ 194.892505][ T5742] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.043064][ T5742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 195.044204][ T5742] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 195.044227][ T5742] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 195.044257][ T5742] usb 4-1: config 171 has no interface number 0 [ 195.046091][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.046113][ T5742] usb 4-1: Product: syz [ 195.046128][ T5742] usb 4-1: Manufacturer: syz [ 195.046142][ T5742] usb 4-1: SerialNumber: syz [ 195.266628][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.267074][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.349657][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.350054][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.517895][ T5742] ath6kl: Failed to submit usb control message: -71 [ 195.517939][ T5742] ath6kl: unable to send the bmi data to the device: -71 [ 195.517953][ T5742] ath6kl: Unable to send get target info: -71 [ 195.529081][ T5742] ath6kl: Failed to init ath6kl core: -71 [ 195.529510][ T5742] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 195.558352][ T5742] usb 4-1: USB disconnect, device number 13 [ 196.205864][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 196.205884][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 196.205928][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 196.206152][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 196.206178][ T5602] Bluetooth: hci1: command 0x0406 tx timeout [ 196.310535][ T7077] syzkaller0: entered promiscuous mode [ 196.310557][ T7077] syzkaller0: entered allmulticast mode [ 196.404573][ T7077] tipc: Started in network mode [ 196.404603][ T7077] tipc: Node identity ae042b709a44, cluster identity 4711 [ 196.404830][ T7077] tipc: Enabled bearer , priority 0 [ 196.408374][ T7076] tipc: Resetting bearer [ 196.481303][ T7076] tipc: Disabling bearer [ 196.731002][ T7091] syzkaller0: entered promiscuous mode [ 196.731023][ T7091] syzkaller0: entered allmulticast mode [ 196.764900][ T7089] binder: 7088:7089 ioctl c0306201 200000000080 returned -14 [ 196.779073][ T7089] binder: 7088:7089 ioctl c0306201 2000000003c0 returned -14 [ 197.284565][ T7105] binder: 7101:7105 ioctl c0306201 200000000080 returned -14 [ 197.285366][ T7105] binder: 7101:7105 ioctl c0306201 2000000003c0 returned -14 [ 197.774462][ T7113] xt_HMARK: proto mask must be zero with L3 mode [ 199.156684][ T7116] binder: BINDER_SET_CONTEXT_MGR already set [ 199.156695][ T7116] binder: 7114:7116 ioctl 4018620d 200000004a80 returned -16 [ 199.796182][ T7122] binder: 7121:7122 ioctl c0306201 200000000080 returned -14 [ 199.904874][ T7124] syzkaller0: entered promiscuous mode [ 199.904897][ T7124] syzkaller0: entered allmulticast mode [ 200.610760][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 200.708040][ T7133] syzkaller0: entered promiscuous mode [ 200.708072][ T7133] syzkaller0: entered allmulticast mode [ 201.187026][ T7137] tipc: Enabled bearer , priority 0 [ 201.190794][ T7142] binder: 7141:7142 ioctl c0306201 200000000080 returned -14 [ 201.191884][ T7132] tipc: Resetting bearer [ 201.215234][ T7142] binder: 7141:7142 ioctl c0306201 2000000003c0 returned -14 [ 201.250123][ T7132] tipc: Disabling bearer [ 201.461440][ T7007] Set syz1 is full, maxelem 65536 reached [ 202.449090][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 202.449102][ T7154] binder: 7153:7154 ioctl 4018620d 200000004a80 returned -16 [ 202.852704][ T7159] virtio-fs: tag not found [ 203.405131][ T7168] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 204.175008][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 205.323131][ T7185] binder: BINDER_SET_CONTEXT_MGR already set [ 205.323161][ T7185] binder: 7180:7185 ioctl 4018620d 200000004a80 returned -16 [ 206.784986][ T7178] syzkaller0: entered promiscuous mode [ 206.785011][ T7178] syzkaller0: entered allmulticast mode [ 206.941511][ T7189] binder: 7187:7189 ioctl 4018620d 0 returned -22 [ 206.949171][ T7189] binder: 7187:7189 ioctl c0306201 200000000080 returned -14 [ 206.949938][ T7189] binder: 7187:7189 ioctl c0306201 2000000003c0 returned -14 [ 208.771617][ T7203] binder: BINDER_SET_CONTEXT_MGR already set [ 208.771628][ T7203] binder: 7201:7203 ioctl 4018620d 200000004a80 returned -16 [ 209.131142][ T7210] binder: BINDER_SET_CONTEXT_MGR already set [ 209.131152][ T7210] binder: 7202:7210 ioctl 4018620d 200000004a80 returned -16 [ 210.875511][ T7224] binder: 7223:7224 ioctl 4018620d 0 returned -22 [ 210.876876][ T7224] binder: 7223:7224 ioctl c0306201 200000000080 returned -14 [ 210.877597][ T7224] binder: 7223:7224 ioctl c0306201 2000000003c0 returned -14 [ 211.175323][ T7230] binder: 7229:7230 ioctl c0306201 200000000080 returned -14 [ 211.200753][ T7231] syzkaller0: entered promiscuous mode [ 211.200778][ T7231] syzkaller0: entered allmulticast mode [ 211.203522][ T7230] binder: 7229:7230 ioctl c0306201 2000000003c0 returned -14 [ 212.816459][ T7239] binder: BINDER_SET_CONTEXT_MGR already set [ 212.816469][ T7239] binder: 7238:7239 ioctl 4018620d 200000004a80 returned -16 [ 214.128699][ T7246] binder: BINDER_SET_CONTEXT_MGR already set [ 214.128710][ T7246] binder: 7245:7246 ioctl 4018620d 200000004a80 returned -16 [ 214.302223][ T5742] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.938599][ T5742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 214.939615][ T5742] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 214.939639][ T5742] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 214.939658][ T5742] usb 1-1: config 171 has no interface number 0 [ 214.941454][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.941477][ T5742] usb 1-1: Product: syz [ 214.941492][ T5742] usb 1-1: Manufacturer: syz [ 214.941506][ T5742] usb 1-1: SerialNumber: syz [ 215.229189][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.229669][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.387486][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.388004][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.727427][ T7261] binder: BINDER_SET_CONTEXT_MGR already set [ 215.727441][ T7261] binder: 7258:7261 ioctl 4018620d 200000004a80 returned -16 [ 216.356496][ T5742] ath6kl: Failed to submit usb control message: -110 [ 216.356539][ T5742] ath6kl: unable to send the bmi data to the device: -110 [ 216.356552][ T5742] ath6kl: Unable to send get target info: -110 [ 216.358136][ T5742] ath6kl: Failed to init ath6kl core: -110 [ 216.358535][ T5742] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 216.700994][ T189] usb 1-1: USB disconnect, device number 10 [ 217.151186][ T7267] binder: 7266:7267 ioctl 4018620d 0 returned -22 [ 217.152524][ T7267] binder: 7266:7267 ioctl c0306201 200000000080 returned -14 [ 217.155135][ T7267] binder: 7266:7267 ioctl c0306201 2000000003c0 returned -14 [ 219.657340][ T7295] binder: BINDER_SET_CONTEXT_MGR already set [ 219.657351][ T7295] binder: 7294:7295 ioctl 4018620d 200000004a80 returned -16 [ 219.978062][ T7301] binder: 7300:7301 ioctl c0306201 200000000080 returned -14 [ 219.999618][ T7301] binder: 7300:7301 ioctl c0306201 2000000003c0 returned -14 [ 220.226451][ T7308] xt_HMARK: proto mask must be zero with L3 mode [ 222.701571][ T7310] syzkaller0: entered promiscuous mode [ 222.701595][ T7310] syzkaller0: entered allmulticast mode [ 222.837806][ T984] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 222.903028][ T5742] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.002232][ T984] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 223.008975][ T984] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 223.009074][ T984] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 223.009145][ T984] usb 4-1: config 171 has no interface number 0 [ 223.023638][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.023664][ T984] usb 4-1: Product: syz [ 223.023679][ T984] usb 4-1: Manufacturer: syz [ 223.023694][ T984] usb 4-1: SerialNumber: syz [ 223.053611][ T5742] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.079456][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.079508][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.079534][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.079556][ T5742] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.079595][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.116197][ T5742] usb 2-1: config 0 descriptor?? [ 223.384194][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.386326][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.480746][ T7338] syzkaller0: entered promiscuous mode [ 223.480772][ T7338] syzkaller0: entered allmulticast mode [ 223.501431][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.515824][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.893926][ T5742] usbhid 2-1:0.0: can't add hid device: -71 [ 223.924731][ T5742] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.979627][ T984] ath6kl: Failed to submit usb control message: -71 [ 223.979672][ T984] ath6kl: unable to send the bmi data to the device: -71 [ 223.979686][ T984] ath6kl: Unable to send get target info: -71 [ 223.992700][ T984] ath6kl: Failed to init ath6kl core: -71 [ 223.993126][ T984] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 224.007084][ T5742] usb 2-1: USB disconnect, device number 11 [ 224.021315][ T984] usb 4-1: USB disconnect, device number 14 [ 224.829804][ T31] audit: type=1400 audit(1789437019.462:353): avc: denied { call } for pid=7335 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 224.962272][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.125830][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.126798][ T9] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.126827][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 225.128634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.128659][ T9] usb 1-1: Product: syz [ 225.128673][ T9] usb 1-1: Manufacturer: syz [ 225.128688][ T9] usb 1-1: SerialNumber: syz [ 225.203027][ T7357] futex_wake_op: syz.1.497 tries to shift op by 144; fix this program [ 225.745860][ T9] usb 1-1: config 0 descriptor?? [ 226.790183][ T7369] binder: BINDER_SET_CONTEXT_MGR already set [ 226.790238][ T7369] binder: 7365:7369 ioctl 4018620d 200000004a80 returned -16 [ 227.598261][ T9] usb 1-1: selecting invalid altsetting 0 [ 228.142208][ T2268] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 228.217077][ T9] usb 1-1: USB disconnect, device number 11 [ 228.281257][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.490096][ T7383] syzkaller0: entered promiscuous mode [ 230.490119][ T7383] syzkaller0: entered allmulticast mode [ 230.602726][ T984] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 230.752796][ T984] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 230.753894][ T984] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.753922][ T984] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 230.755765][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.755791][ T984] usb 5-1: Product: syz [ 230.755806][ T984] usb 5-1: Manufacturer: syz [ 230.755822][ T984] usb 5-1: SerialNumber: syz [ 231.052506][ T189] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 231.125173][ T2268] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.202887][ T189] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 231.203789][ T189] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 231.203813][ T189] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 231.203831][ T189] usb 4-1: config 171 has no interface number 0 [ 231.205622][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.205645][ T189] usb 4-1: Product: syz [ 231.205659][ T189] usb 4-1: Manufacturer: syz [ 231.205673][ T189] usb 4-1: SerialNumber: syz [ 231.282946][ T2268] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 231.284991][ T2268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.287317][ T2268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.287365][ T2268] usb 3-1: Product: syz [ 231.287380][ T2268] usb 3-1: Manufacturer: syz [ 231.287395][ T2268] usb 3-1: SerialNumber: syz [ 231.420223][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.421721][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.595415][ T2268] usb 3-1: Limiting number of CPorts to U8_MAX [ 231.596224][ T2268] usb 3-1: Not enough endpoints found in device, aborting! [ 231.634929][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.637244][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.776049][ T984] usb 5-1: failed to send ARPC request 1: -110 [ 231.777186][ T984] usb 5-1: failed to execute ARPC: -110 [ 231.777327][ T984] usb 5-1: failed to set connected state for cport 0: -110 [ 231.777487][ T984] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 232.091187][ T2268] usb 3-1: USB disconnect, device number 8 [ 232.108649][ T984] usb 5-1: failed to send ARPC request 3: -32 [ 232.109041][ T984] usb 5-1: failed to execute ARPC: -32 [ 232.109057][ T984] usb 5-1: failed to clear cport 0: -32 [ 232.109075][ T984] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 232.127005][ T984] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 232.231176][ T189] ath6kl: Failed to submit usb control message: -71 [ 232.231219][ T189] ath6kl: unable to send the bmi data to the device: -71 [ 232.231233][ T189] ath6kl: Unable to send get target info: -71 [ 232.231983][ T189] ath6kl: Failed to init ath6kl core: -71 [ 232.246605][ T189] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 232.364952][ T189] usb 4-1: USB disconnect, device number 15 [ 232.425454][ T7413] futex_wake_op: syz.1.513 tries to shift op by 144; fix this program [ 233.367241][ T7414] binder: 7412:7414 ioctl 4018620d 0 returned -22 [ 233.694681][ T2268] usb 5-1: USB disconnect, device number 7 [ 233.922854][ T189] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 234.077744][ T189] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 234.093430][ T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.093635][ T189] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.093772][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.373510][ T189] usb 2-1: config 0 descriptor?? [ 234.599158][ T189] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 236.481435][ T25] usb 2-1: USB disconnect, device number 13 [ 237.702214][ T984] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.852850][ T984] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 237.853672][ T984] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 237.853688][ T984] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 237.853699][ T984] usb 4-1: config 171 has no interface number 0 [ 237.855314][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.855329][ T984] usb 4-1: Product: syz [ 237.855337][ T984] usb 4-1: Manufacturer: syz [ 237.855346][ T984] usb 4-1: SerialNumber: syz [ 238.291991][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.294806][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.579696][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.580101][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.606649][ T7436] syzkaller0: entered promiscuous mode [ 238.606672][ T7436] syzkaller0: entered allmulticast mode [ 238.983599][ T984] ath6kl: Failed to submit usb control message: -110 [ 238.983646][ T984] ath6kl: unable to send the bmi data to the device: -110 [ 238.983660][ T984] ath6kl: Unable to send get target info: -110 [ 239.183006][ T984] ath6kl: Failed to init ath6kl core: -110 [ 239.220319][ T984] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 239.463676][ T984] usb 4-1: USB disconnect, device number 16 [ 240.190994][ T7484] FAULT_INJECTION: forcing a failure. [ 240.190994][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 240.191061][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.1.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.191089][ T7484] Tainted: [L]=SOFTLOCKUP [ 240.191097][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 240.191111][ T7484] Call Trace: [ 240.191117][ T7484] [ 240.191125][ T7484] dump_stack_lvl+0x100/0x190 [ 240.191160][ T7484] should_fail_ex.cold+0x5/0xa [ 240.191189][ T7484] should_failslab+0xc2/0x120 [ 240.191215][ T7484] kmem_cache_alloc_noprof+0x92/0x6a0 [ 240.191245][ T7484] ? mas_preallocate+0xc22/0xee0 [ 240.191282][ T7484] mas_preallocate+0xc22/0xee0 [ 240.191315][ T7484] ? __pfx_mas_preallocate+0x10/0x10 [ 240.191353][ T7484] ? anon_vma_name+0x5a/0x250 [ 240.191385][ T7484] __split_vma+0x2f8/0x1de0 [ 240.191418][ T7484] ? __pfx___split_vma+0x10/0x10 [ 240.191453][ T7484] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 240.191483][ T7484] vma_modify+0x1ef4/0x29b0 [ 240.191520][ T7484] ? __pfx_vma_modify+0x10/0x10 [ 240.191561][ T7484] vma_modify_name+0x29c/0x380 [ 240.191589][ T7484] ? __pfx_vma_modify_name+0x10/0x10 [ 240.191639][ T7484] madvise_update_vma+0x572/0xd30 [ 240.191668][ T7484] ? __pfx_madvise_update_vma+0x10/0x10 [ 240.191706][ T7484] ? mas_prev_slot+0x768/0x11b0 [ 240.191733][ T7484] madvise_vma_behavior+0x2d5/0x2350 [ 240.191762][ T7484] ? mas_prev+0xa4/0x100 [ 240.191780][ T7484] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 240.191807][ T7484] ? mas_walk+0x260/0x310 [ 240.191833][ T7484] ? find_vma_prev+0xd8/0x150 [ 240.191855][ T7484] ? __pfx_find_vma_prev+0x10/0x10 [ 240.191894][ T7484] madvise_walk_vmas+0x30e/0xc50 [ 240.191928][ T7484] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 240.191958][ T7484] ? down_write_killable+0x152/0x240 [ 240.191988][ T7484] ? __pfx_down_write_killable+0x10/0x10 [ 240.192016][ T7484] ? set_anon_vma_name+0x160/0x4c0 [ 240.192042][ T7484] ? set_anon_vma_name+0x21f/0x4c0 [ 240.192069][ T7484] ? kfree+0x22b/0x6d0 [ 240.192097][ T7484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.192127][ T7484] set_anon_vma_name+0x333/0x4c0 [ 240.192158][ T7484] ? __pfx_set_anon_vma_name+0x10/0x10 [ 240.192186][ T7484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 240.192215][ T7484] ? static_key_count+0x5a/0x70 [ 240.192251][ T7484] ? security_task_prctl+0x11c/0x160 [ 240.192288][ T7484] __do_sys_prctl+0xb41/0x2270 [ 240.192317][ T7484] ? __pfx___do_sys_prctl+0x10/0x10 [ 240.192350][ T7484] do_syscall_64+0x123/0x790 [ 240.192378][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.192399][ T7484] RIP: 0033:0x7fbc71f9e159 [ 240.192415][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.192436][ T7484] RSP: 002b:00007fbc72e9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 240.192468][ T7484] RAX: ffffffffffffffda RBX: 00007fbc72225fa0 RCX: 00007fbc71f9e159 [ 240.192496][ T7484] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 240.192509][ T7484] RBP: 00007fbc7203503b R08: 0000200000000b40 R09: 0000000000000000 [ 240.192522][ T7484] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 240.192535][ T7484] R13: 00007fbc72226038 R14: 00007fbc72225fa0 R15: 00007ffd73faf0d8 [ 240.192565][ T7484] [ 240.260351][ T7486] syzkaller0: entered promiscuous mode [ 240.260373][ T7486] syzkaller0: entered allmulticast mode [ 240.290779][ T7486] tipc: Enabled bearer , priority 0 [ 240.301574][ T7485] tipc: Resetting bearer [ 240.316602][ T5742] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.335230][ T7485] tipc: Disabling bearer [ 240.385604][ T984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.455882][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 240.490493][ T5742] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.507708][ T5742] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.507740][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.507766][ T5742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.507788][ T5742] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.507828][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.569579][ T984] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 240.601253][ T984] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 240.601280][ T984] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 240.601299][ T984] usb 5-1: config 171 has no interface number 0 [ 241.340160][ T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 241.362289][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.363669][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.363693][ T984] usb 5-1: Product: syz [ 241.363708][ T984] usb 5-1: Manufacturer: syz [ 241.363867][ T984] usb 5-1: SerialNumber: syz [ 241.364569][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.364591][ T25] usb 3-1: Product: syz [ 241.364605][ T25] usb 3-1: Manufacturer: syz [ 241.364626][ T25] usb 3-1: SerialNumber: syz [ 241.371331][ T5742] usb 1-1: config 0 descriptor?? [ 241.768492][ T2268] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 241.783230][ T25] usb 3-1: Limiting number of CPorts to U8_MAX [ 241.784261][ T25] usb 3-1: Not enough endpoints found in device, aborting! [ 241.809273][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.809658][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.890404][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.891438][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.944693][ T2268] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 241.946874][ T2268] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.946902][ T2268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.951793][ T2268] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 241.951829][ T2268] usb 4-1: Product: syz [ 241.951854][ T2268] usb 4-1: Manufacturer: syz [ 241.951870][ T2268] usb 4-1: SerialNumber: syz [ 242.268396][ T2268] usb 4-1: config 0 descriptor?? [ 242.279216][ T2268] usb 4-1: selecting invalid altsetting 0 [ 242.299791][ T25] usb 3-1: USB disconnect, device number 9 [ 242.333281][ T984] ath6kl: Failed to submit usb control message: -71 [ 242.333325][ T984] ath6kl: unable to send the bmi data to the device: -71 [ 242.333339][ T984] ath6kl: Unable to send get target info: -71 [ 242.344170][ T984] ath6kl: Failed to init ath6kl core: -71 [ 242.344645][ T984] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 242.360830][ T984] usb 5-1: USB disconnect, device number 8 [ 242.506124][ T7490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.532'. [ 242.511087][ T5742] usbhid 1-1:0.0: can't add hid device: -71 [ 242.511194][ T5742] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 242.520015][ T5742] usb 1-1: USB disconnect, device number 12 [ 242.566831][ T2268] usb 4-1: USB disconnect, device number 17 [ 242.610907][ T31] audit: type=1400 audit(1789437037.242:354): avc: denied { create } for pid=7507 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.663900][ T31] audit: type=1400 audit(1789437037.302:355): avc: denied { write } for pid=7507 comm="syz.1.535" path="socket:[17788]" dev="sockfs" ino=17788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.697727][ T7509] can0: slcan on ptm0. [ 242.966053][ T7523] syzkaller0: entered promiscuous mode [ 242.966076][ T7523] syzkaller0: entered allmulticast mode [ 243.013510][ T31] audit: type=1400 audit(1789437037.652:356): avc: denied { write } for pid=7511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.084276][ T5742] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.181056][ T31] audit: type=1400 audit(1789437037.812:357): avc: denied { write } for pid=7527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.612833][ T5742] usb 2-1: New USB device found, idVendor=84fd, idProduct=00ff, bcdDevice= 0.40 [ 243.613734][ T5742] usb 2-1: config 227 has an invalid descriptor of length 149, skipping remainder of the config [ 243.613758][ T5742] usb 2-1: config 227 has 0 interfaces, different from the descriptor's value: 3 [ 243.615745][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.615767][ T5742] usb 2-1: Product: syz [ 243.615783][ T5742] usb 2-1: Manufacturer: syz [ 243.615797][ T5742] usb 2-1: SerialNumber: syz [ 243.753217][ T7534] FAULT_INJECTION: forcing a failure. [ 243.753217][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 243.753255][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.753286][ T7534] Tainted: [L]=SOFTLOCKUP [ 243.753294][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 243.753308][ T7534] Call Trace: [ 243.753316][ T7534] [ 243.753324][ T7534] dump_stack_lvl+0x100/0x190 [ 243.753363][ T7534] should_fail_ex.cold+0x5/0xa [ 243.753402][ T7534] should_failslab+0xc2/0x120 [ 243.753431][ T7534] __kmalloc_cache_noprof+0x91/0x6d0 [ 243.753461][ T7534] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 243.753496][ T7534] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 243.753530][ T7534] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 243.753560][ T7534] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 243.753588][ T7534] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 243.753624][ T7534] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 243.753667][ T7534] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 243.753695][ T7534] ? __pfx___mutex_lock+0x10/0x10 [ 243.753747][ T7534] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 243.753779][ T7534] snd_pcm_oss_set_trigger.isra.0+0x32/0x6c0 [ 243.753816][ T7534] snd_pcm_oss_ioctl+0x1f17/0x3790 [ 243.753850][ T7534] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 243.753883][ T7534] ? selinux_file_ioctl+0x13b/0x290 [ 243.753905][ T7534] ? selinux_file_ioctl+0xb6/0x290 [ 243.753929][ T7534] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 243.753961][ T7534] __x64_sys_ioctl+0x18e/0x210 [ 243.753987][ T7534] do_syscall_64+0x123/0x790 [ 243.754017][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.754040][ T7534] RIP: 0033:0x7fe94559e159 [ 243.754058][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.754077][ T7534] RSP: 002b:00007fe946522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.754099][ T7534] RAX: ffffffffffffffda RBX: 00007fe945825fa0 RCX: 00007fe94559e159 [ 243.754114][ T7534] RDX: 0000200000000000 RSI: 0000000040045010 RDI: 0000000000000004 [ 243.754128][ T7534] RBP: 00007fe94563503b R08: 0000000000000000 R09: 0000000000000000 [ 243.754140][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.754152][ T7534] R13: 00007fe945826038 R14: 00007fe945825fa0 R15: 00007ffe53d1f7b8 [ 243.754183][ T7534] [ 243.964619][ T7509] IPVS: rr: UDP [::1]:8080 - no destination available [ 245.596048][ T7549] Set syz1 is full, maxelem 65536 reached [ 246.584902][ T5742] usb 2-1: USB disconnect, device number 14 [ 246.916372][ T7564] xt_HMARK: proto mask must be zero with L3 mode [ 247.922688][ T7509] can0 (unregistered): slcan off ptm0. [ 248.679982][ T31] audit: type=1400 audit(1789437043.312:358): avc: denied { allowed } for pid=7580 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 248.766399][ T31] audit: type=1400 audit(1789437043.402:359): avc: denied { write } for pid=7562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.833569][ T7584] syzkaller0: entered promiscuous mode [ 248.833592][ T7584] syzkaller0: entered allmulticast mode [ 249.083919][ T31] audit: type=1400 audit(1789437043.722:360): avc: denied { write } for pid=7592 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.936136][ T7602] binder: BINDER_SET_CONTEXT_MGR already set [ 249.936151][ T7602] binder: 7583:7602 ioctl 4018620d 200000004a80 returned -16 [ 249.982245][ T5742] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 250.322923][ T5742] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 250.324303][ T5742] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 250.324330][ T5742] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 250.324350][ T5742] usb 1-1: config 171 has no interface number 0 [ 250.328600][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.328626][ T5742] usb 1-1: Product: syz [ 250.328641][ T5742] usb 1-1: Manufacturer: syz [ 250.328656][ T5742] usb 1-1: SerialNumber: syz [ 250.397445][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.397504][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.853216][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.878518][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.030077][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.077535][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.836320][ T5742] ath6kl: Failed to submit usb control message: -71 [ 251.836364][ T5742] ath6kl: unable to send the bmi data to the device: -71 [ 251.836379][ T5742] ath6kl: Unable to send get target info: -71 [ 252.122386][ T5742] ath6kl: Failed to init ath6kl core: -71 [ 252.122772][ T5742] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 252.135736][ T5742] usb 1-1: USB disconnect, device number 13 [ 252.995014][ T31] audit: type=1400 audit(1789437047.622:361): avc: denied { write } for pid=7599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.414902][ T5742] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 253.524770][ T7642] syzkaller0: entered promiscuous mode [ 253.524793][ T7642] syzkaller0: entered allmulticast mode [ 253.562870][ T5742] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 253.564252][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.564281][ T5742] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 253.564790][ T31] audit: type=1400 audit(1789437048.202:362): avc: denied { write } for pid=7643 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.566094][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.566119][ T5742] usb 1-1: Product: syz [ 253.566135][ T5742] usb 1-1: Manufacturer: syz [ 253.566174][ T5742] usb 1-1: SerialNumber: syz [ 253.673670][ T7648] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 253.915710][ T7653] syzkaller0: entered promiscuous mode [ 253.915742][ T7653] syzkaller0: entered allmulticast mode [ 254.192535][ T5713] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 254.377728][ T5713] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 254.378694][ T5713] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.378719][ T5713] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 254.381569][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.381593][ T5713] usb 5-1: Product: syz [ 254.381609][ T5713] usb 5-1: Manufacturer: syz [ 254.381645][ T5713] usb 5-1: SerialNumber: syz [ 254.536453][ T5742] usb 1-1: failed to send ARPC request 1: -110 [ 254.537083][ T5742] usb 1-1: failed to execute ARPC: -110 [ 254.537155][ T5742] usb 1-1: failed to set connected state for cport 0: -110 [ 254.537275][ T5742] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 254.630306][ T5742] usb 1-1: failed to send ARPC request 3: -32 [ 254.659335][ T5742] usb 1-1: failed to execute ARPC: -32 [ 254.659762][ T5742] usb 1-1: failed to clear cport 0: -32 [ 254.660134][ T5742] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 254.839096][ T5742] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 255.522292][ T2268] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 255.677097][ T2268] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 255.680484][ T2268] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 255.680535][ T2268] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 255.680564][ T2268] usb 2-1: config 171 has no interface number 0 [ 255.685530][ T2268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.685575][ T2268] usb 2-1: Product: syz [ 255.685589][ T2268] usb 2-1: Manufacturer: syz [ 255.685604][ T2268] usb 2-1: SerialNumber: syz [ 255.960324][ T5713] usb 5-1: failed to send ARPC request 1: -110 [ 255.960432][ T5713] usb 5-1: failed to execute ARPC: -110 [ 255.960448][ T5713] usb 5-1: failed to set connected state for cport 0: -110 [ 255.960464][ T5713] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 256.065291][ T5713] usb 5-1: failed to send ARPC request 3: -32 [ 256.065403][ T5713] usb 5-1: failed to execute ARPC: -32 [ 256.065418][ T5713] usb 5-1: failed to clear cport 0: -32 [ 256.065434][ T5713] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 256.283733][ T5713] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 256.284762][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.285026][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.356841][ T9] usb 1-1: USB disconnect, device number 14 [ 256.441815][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.460592][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.768992][ T2268] ath6kl: Failed to submit usb control message: -71 [ 256.769039][ T2268] ath6kl: unable to send the bmi data to the device: -71 [ 256.769054][ T2268] ath6kl: Unable to send get target info: -71 [ 256.779254][ T2268] ath6kl: Failed to init ath6kl core: -71 [ 256.779515][ T2268] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 256.825111][ T2268] usb 2-1: USB disconnect, device number 15 [ 256.835185][ T1215] usb 5-1: USB disconnect, device number 9 [ 257.490294][ T7694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.672062][ T7698] syzkaller0: entered promiscuous mode [ 257.672124][ T7698] syzkaller0: entered allmulticast mode [ 257.757215][ T31] audit: type=1400 audit(1789437052.392:363): avc: denied { mount } for pid=7702 comm="syz.1.580" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 257.780540][ T31] audit: type=1807 audit(1789437052.412:364): action=measure res=1 [ 257.780977][ T7704] ima: policy update completed [ 257.781111][ T31] audit: type=1802 audit(1789437052.412:365): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.1.580" res=1 errno=0 [ 258.334784][ T31] audit: type=1800 audit(1789437052.472:366): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.578" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 258.360968][ T31] audit: type=1400 audit(1789437052.992:367): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 258.505267][ T31] audit: type=1800 audit(1789437053.142:368): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 258.572880][ T31] audit: type=1800 audit(1789437053.212:369): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 258.582556][ T31] audit: type=1800 audit(1789437053.212:370): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 259.085788][ T31] audit: type=1800 audit(1789437053.722:371): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 259.109842][ T31] audit: type=1800 audit(1789437053.732:372): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 259.323982][ T5713] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 259.699215][ T5713] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 259.703981][ T5713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 259.704009][ T5713] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 259.714004][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.714031][ T5713] usb 3-1: Product: syz [ 259.714046][ T5713] usb 3-1: Manufacturer: syz [ 259.714061][ T5713] usb 3-1: SerialNumber: syz [ 260.843511][ T5713] usb 3-1: Cannot retrieve CPort count: -110 [ 260.843556][ T5713] usb 3-1: Cannot retrieve CPort count: -110 [ 260.843582][ T5713] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 261.322334][ T5742] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.593703][ T5742] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 261.603221][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.603249][ T5742] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 261.605239][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.605263][ T5742] usb 1-1: Product: syz [ 261.605277][ T5742] usb 1-1: Manufacturer: syz [ 261.605292][ T5742] usb 1-1: SerialNumber: syz [ 261.817314][ T7742] ima: policy update completed [ 262.034291][ T7744] syzkaller0: entered promiscuous mode [ 262.034316][ T7744] syzkaller0: entered allmulticast mode [ 262.532463][ T5742] usb 1-1: failed to send ARPC request 1: -110 [ 262.532577][ T5742] usb 1-1: failed to execute ARPC: -110 [ 262.532594][ T5742] usb 1-1: failed to set connected state for cport 0: -110 [ 262.532612][ T5742] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 262.533053][ T5742] usb 1-1: failed to send ARPC request 3: -32 [ 262.533165][ T5742] usb 1-1: failed to execute ARPC: -32 [ 262.533180][ T5742] usb 1-1: failed to clear cport 0: -32 [ 262.533196][ T5742] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 262.552874][ T5742] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 262.727762][ T7756] binder: 7755:7756 ioctl c0306201 2000000003c0 returned -14 [ 262.799430][ T5742] usb 1-1: USB disconnect, device number 15 [ 262.849528][ T31] kauditd_printk_skb: 38 callbacks suppressed [ 262.849541][ T31] audit: type=1800 audit(1789437057.482:411): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 262.958457][ T31] audit: type=1800 audit(1789437057.592:412): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4787 res=0 errno=0 [ 263.248554][ T5742] usb 3-1: USB disconnect, device number 10 [ 264.220425][ T31] audit: type=1800 audit(1789437058.812:413): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 264.276230][ T31] audit: type=1800 audit(1789437058.902:414): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 265.038737][ T31] audit: type=1800 audit(1789437059.672:415): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 265.145282][ T31] audit: type=1800 audit(1789437059.782:416): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 265.194355][ T31] audit: type=1800 audit(1789437059.832:417): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.597" name=08 dev="tmpfs" ino=655 res=0 errno=0 [ 265.420496][ T7768] binder: BINDER_SET_CONTEXT_MGR already set [ 265.420507][ T7768] binder: 7767:7768 ioctl 4018620d 200000004a80 returned -16 [ 266.055968][ T31] audit: type=1800 audit(1789437060.692:418): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 266.216979][ T31] audit: type=1800 audit(1789437060.852:419): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 266.284292][ T31] audit: type=1800 audit(1789437060.922:420): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 266.351728][ T7786] ima: policy update completed [ 267.410551][ T7792] xt_HMARK: proto mask must be zero with L3 mode [ 269.508106][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 269.508125][ T31] audit: type=1800 audit(1789437064.142:427): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 269.608303][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.609'. [ 269.608326][ T7799] openvswitch: netlink: Flow key attr not present in new flow. [ 269.710062][ T31] audit: type=1800 audit(1789437064.342:428): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 269.795206][ T31] audit: type=1800 audit(1789437064.432:429): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 269.938178][ T31] audit: type=1800 audit(1789437064.572:430): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 269.969720][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.990189][ T31] audit: type=1800 audit(1789437064.622:431): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 270.137257][ T31] audit: type=1800 audit(1789437064.772:432): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 270.236322][ T31] audit: type=1800 audit(1789437064.862:433): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 270.283120][ T31] audit: type=1800 audit(1789437064.922:434): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 270.365173][ T31] audit: type=1800 audit(1789437065.002:435): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 270.433185][ T31] audit: type=1807 audit(1789437065.072:436): action=measure res=1 [ 270.470699][ T7816] [ 270.473059][ T7816] ====================================================== [ 270.480075][ T7816] WARNING: possible circular locking dependency detected [ 270.487101][ T7816] syzkaller #0 Tainted: G L [ 270.493077][ T7816] ------------------------------------------------------ [ 270.500095][ T7816] syz.1.616/7816 is trying to acquire lock: [ 270.505988][ T7816] ffff888074bb9970 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 270.515320][ T7816] [ 270.515320][ T7816] but task is already holding lock: [ 270.522674][ T7816] ffff88807b6ea690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 270.533289][ T7816] [ 270.533289][ T7816] which lock already depends on the new lock. [ 270.533289][ T7816] [ 270.543690][ T7816] [ 270.543690][ T7816] the existing dependency chain (in reverse order) is: [ 270.552703][ T7816] [ 270.552703][ T7816] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 270.561316][ T7816] lock_acquire+0x1d1/0x380 [ 270.566336][ T7816] __mutex_lock+0x1a4/0x1bd0 [ 270.571475][ T7816] process_measurement+0x5ab/0x2350 [ 270.577190][ T7816] ima_file_check+0xc3/0x110 [ 270.582300][ T7816] security_file_post_open+0xc4/0x210 [ 270.588182][ T7816] path_openat+0x5cd/0x2440 [ 270.593200][ T7816] do_file_open+0x20e/0x430 [ 270.598213][ T7816] do_sys_openat2+0x10f/0x1e0 [ 270.603402][ T7816] __x64_sys_openat+0x12d/0x210 [ 270.608769][ T7816] do_syscall_64+0x123/0x790 [ 270.613878][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.620296][ T7816] [ 270.620296][ T7816] -> #2 (sb_writers#6){.+.+}-{0:0}: [ 270.627683][ T7816] lock_acquire+0x1d1/0x380 [ 270.632700][ T7816] mnt_want_write+0x6f/0x420 [ 270.637804][ T7816] lookup_open+0x150/0x1990 [ 270.642812][ T7816] path_openat+0xa2c/0x2440 [ 270.647824][ T7816] do_file_open+0x20e/0x430 [ 270.652837][ T7816] file_open_name+0x1c3/0x3e0 [ 270.658026][ T7816] filp_open+0x2e/0x50 [ 270.662608][ T7816] nvmet_file_ns_enable+0x95/0x420 [ 270.668233][ T7816] nvmet_ns_enable+0x43b/0x650 [ 270.673504][ T7816] nvmet_ns_enable_store+0x11e/0x160 [ 270.679309][ T7816] configfs_write_iter+0x302/0x4e0 [ 270.684946][ T7816] vfs_write+0x6af/0x1050 [ 270.689785][ T7816] ksys_write+0x12a/0x250 [ 270.694619][ T7816] do_syscall_64+0x123/0x790 [ 270.699725][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.706125][ T7816] [ 270.706125][ T7816] -> #1 (&subsys->lock){+.+.}-{4:4}: [ 270.713584][ T7816] lock_acquire+0x1d1/0x380 [ 270.718602][ T7816] __mutex_lock+0x1a4/0x1bd0 [ 270.723705][ T7816] nvmet_ns_device_path_store+0x57/0x1c0 [ 270.729850][ T7816] configfs_write_iter+0x302/0x4e0 [ 270.735476][ T7816] vfs_write+0x6af/0x1050 [ 270.740311][ T7816] ksys_write+0x12a/0x250 [ 270.745143][ T7816] do_syscall_64+0x123/0x790 [ 270.750244][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.756645][ T7816] [ 270.756645][ T7816] -> #0 (&p->frag_sem){.+.+}-{4:4}: [ 270.764024][ T7816] check_prev_add+0xeb/0xe60 [ 270.769142][ T7816] __lock_acquire+0x1528/0x1f40 [ 270.774512][ T7816] lock_acquire+0x1d1/0x380 [ 270.779529][ T7816] down_read+0x99/0x4c0 [ 270.784207][ T7816] __configfs_open_file+0xe8/0x9c0 [ 270.789837][ T7816] do_dentry_open+0x6ab/0x14d0 [ 270.795107][ T7816] vfs_open+0x82/0x3f0 [ 270.799686][ T7816] dentry_open+0x71/0xd0 [ 270.804445][ T7816] ima_calc_file_hash+0xe1/0x380 [ 270.809890][ T7816] ima_collect_measurement+0x94f/0xb30 [ 270.815855][ T7816] process_measurement+0xdfe/0x2350 [ 270.821561][ T7816] ima_file_check+0xc3/0x110 [ 270.826658][ T7816] security_file_post_open+0xc4/0x210 [ 270.832533][ T7816] path_openat+0x5cd/0x2440 [ 270.837551][ T7816] do_file_open+0x20e/0x430 [ 270.842561][ T7816] do_sys_openat2+0x10f/0x1e0 [ 270.847745][ T7816] __x64_sys_openat+0x12d/0x210 [ 270.853108][ T7816] do_syscall_64+0x123/0x790 [ 270.858215][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.864614][ T7816] [ 270.864614][ T7816] other info that might help us debug this: [ 270.864614][ T7816] [ 270.874823][ T7816] Chain exists of: [ 270.874823][ T7816] &p->frag_sem --> sb_writers#6 --> &ima_iint_mutex_key[depth] [ 270.874823][ T7816] [ 270.888284][ T7816] Possible unsafe locking scenario: [ 270.888284][ T7816] [ 270.895721][ T7816] CPU0 CPU1 [ 270.901069][ T7816] ---- ---- [ 270.906413][ T7816] lock(&ima_iint_mutex_key[depth]); [ 270.911768][ T7816] lock(sb_writers#6); [ 270.918435][ T7816] lock(&ima_iint_mutex_key[depth]); [ 270.926312][ T7816] rlock(&p->frag_sem); [ 270.930537][ T7816] [ 270.930537][ T7816] *** DEADLOCK *** [ 270.930537][ T7816] [ 270.938659][ T7816] locks held by syz.1.616/7816: 1, last CPU#1: [ 270.944791][ T7816] #0: ffff88807b6ea690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 270.955828][ T7816] [ 270.955828][ T7816] stack backtrace: [ 270.961702][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.1.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.972451][ T7816] Tainted: [L]=SOFTLOCKUP [ 270.976759][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 270.986798][ T7816] Call Trace: [ 270.990067][ T7816] [ 270.992982][ T7816] dump_stack_lvl+0x100/0x190 [ 270.997654][ T7816] print_circular_bug.cold+0x178/0x1be [ 271.003109][ T7816] check_noncircular+0x146/0x160 [ 271.008035][ T7816] ? kasan_save_stack+0x30/0x50 [ 271.012879][ T7816] ? process_measurement+0xdfe/0x2350 [ 271.018259][ T7816] check_prev_add+0xeb/0xe60 [ 271.022883][ T7816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.028983][ T7816] __lock_acquire+0x1528/0x1f40 [ 271.033839][ T7816] lock_acquire+0x1d1/0x380 [ 271.038331][ T7816] ? __configfs_open_file+0xe8/0x9c0 [ 271.043612][ T7816] ? __pfx___might_resched+0x10/0x10 [ 271.048889][ T7816] down_read+0x99/0x4c0 [ 271.053039][ T7816] ? __configfs_open_file+0xe8/0x9c0 [ 271.058315][ T7816] ? __pfx_down_read+0x10/0x10 [ 271.063076][ T7816] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 271.068630][ T7816] ? __configfs_open_file+0xcb/0x9c0 [ 271.073909][ T7816] __configfs_open_file+0xe8/0x9c0 [ 271.079015][ T7816] do_dentry_open+0x6ab/0x14d0 [ 271.083764][ T7816] ? __pfx_configfs_open_file+0x10/0x10 [ 271.089314][ T7816] vfs_open+0x82/0x3f0 [ 271.093402][ T7816] dentry_open+0x71/0xd0 [ 271.097639][ T7816] ima_calc_file_hash+0xe1/0x380 [ 271.102564][ T7816] ima_collect_measurement+0x94f/0xb30 [ 271.108017][ T7816] ? __pfx_ima_collect_measurement+0x10/0x10 [ 271.113999][ T7816] ? process_measurement+0x5ab/0x2350 [ 271.119366][ T7816] ? is_bad_inode+0xd/0x40 [ 271.123776][ T7816] ? xattr_resolve_name+0x27d/0x3f0 [ 271.128992][ T7816] ? vfs_getxattr_alloc+0xec/0x350 [ 271.134097][ T7816] ? ima_get_hash_algo+0x241/0x400 [ 271.139194][ T7816] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 271.144640][ T7816] ? process_measurement+0xdfe/0x2350 [ 271.150002][ T7816] process_measurement+0xdfe/0x2350 [ 271.155191][ T7816] ? __pfx_process_measurement+0x10/0x10 [ 271.160811][ T7816] ? __pfx___schedule+0x10/0x10 [ 271.165666][ T7816] ? __configfs_open_file+0x6ca/0x9c0 [ 271.171032][ T7816] ima_file_check+0xc3/0x110 [ 271.175613][ T7816] ? __pfx_ima_file_check+0x10/0x10 [ 271.180825][ T7816] security_file_post_open+0xc4/0x210 [ 271.186195][ T7816] path_openat+0x5cd/0x2440 [ 271.190694][ T7816] ? __pfx_path_openat+0x10/0x10 [ 271.195631][ T7816] do_file_open+0x20e/0x430 [ 271.200124][ T7816] ? __pfx_do_file_open+0x10/0x10 [ 271.205142][ T7816] ? _raw_spin_unlock+0x28/0x50 [ 271.209978][ T7816] ? alloc_fd+0x471/0x7a0 [ 271.214297][ T7816] do_sys_openat2+0x10f/0x1e0 [ 271.218964][ T7816] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.224159][ T7816] __x64_sys_openat+0x12d/0x210 [ 271.228998][ T7816] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.234362][ T7816] do_syscall_64+0x123/0x790 [ 271.238945][ T7816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.244820][ T7816] RIP: 0033:0x7fbc71f9e159 [ 271.249220][ T7816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.268831][ T7816] RSP: 002b:00007fbc72e9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.277245][ T7816] RAX: ffffffffffffffda RBX: 00007fbc72225fa0 RCX: 00007fbc71f9e159 [ 271.285198][ T7816] RDX: 0000000000080183 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 271.293157][ T7816] RBP: 00007fbc7203503b R08: 0000000000000000 R09: 0000000000000000 [ 271.301115][ T7816] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 271.309069][ T7816] R13: 00007fbc72226038 R14: 00007fbc72225fa0 R15: 00007ffd73faf0d8 [ 271.317035][ T7816] [ 271.573852][ T7815] ima: policy update completed