last executing test programs: 22.09402618s ago: executing program 4 (id=5889): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2004c855) socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000300001801400040000000000000000000000000000000000060005004e220000060001000a000000080006000100000096cf13a649279261d9d32624de0b0036de699fc2a5894608ec127b1cd28fa99ac03fa37246909060b775c2500c6e7253e5913b925a6941bdd624ccb76f651d4582b4657e543d35fe6c1280174f2831e44a170e82385a7f41b82cd7f33f6b33def5d7d97cf6d385157abbbdb70781be6152c02e6e2a8684b2bd"], 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 21.237456468s ago: executing program 4 (id=5894): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4040000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) fcntl$addseals(r6, 0x409, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7, 0x0, 0x7ffffffe}}, 0x20) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000580)=0x1) close_range(r4, 0xffffffffffffffff, 0x100000000000000) (fail_nth: 1) 19.655962533s ago: executing program 4 (id=5907): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000) prlimit64(0x0, 0x1, &(0x7f0000000180)={0x2, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0xedbde134798091f0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) socket$nl_route(0x10, 0x3, 0x0) 18.768029869s ago: executing program 4 (id=5909): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "01000100", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) 18.34958695s ago: executing program 4 (id=5913): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') read$FUSE(r1, &(0x7f0000012400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(r2, 0x7, &(0x7f0000000680)={0x5, 0xd}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000001140)='./file0\x00') 18.016340058s ago: executing program 4 (id=5915): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x202, 0x7d, 0xa999, 0x8000, 0x0, 0x1}, 0x0, &(0x7f00000003c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80010006, 0x1}, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 7.445909744s ago: executing program 0 (id=5958): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) pipe2$watch_queue(0x0, 0x80) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x60, 0xa, 0x2, {0x2, 0x20}}, 0x0}, 0x0) 7.386690529s ago: executing program 1 (id=5960): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xb86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 7.232783817s ago: executing program 1 (id=5961): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20}) (fail_nth: 1) 6.66893083s ago: executing program 2 (id=5963): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0xb) r1 = getpid() add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "2643dce015fda4df0f646eb478223fd5306ad932a4f9f83929d66eb19fdb43ff9b894e1ae5078798b0dfc10757a909a1268cb190dcb9c1274a00", 0x21}, 0x48, 0xfffffffffffffffc) (async) prlimit64(r1, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xeaef, 0x7, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1], [0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a1, 0x20000], [0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x51, 0x0, 0x48000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0xfffffe0b) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/10, 0xfd71}, 0xfffffffd}], 0x40000000000025a, 0x100, 0x0) (async) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414f6030490781200183f2500000000000000000100007f"], 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 6.376755604s ago: executing program 3 (id=5964): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140), 0x0, 0x8000c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000000200", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703002008000000b70400000100000085000000820000009500000000000000f2742926ed92910f1a7b288d3aa0ae2221d09dc3319d13cacca93749684e58a9"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x95, &(0x7f00000004c0)=""/149, 0x41100, 0x6, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x0, 0xb, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x1, 0x3, 0x0, 0xc}, {0x5, 0x1, 0xe, 0x9}, {0x5, 0x5, 0x9, 0x8}], 0x10, 0x800}, 0x94) recvmsg(r0, &(0x7f000000b300)={0x0, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_emit_ethernet(0x56, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0xffffffff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085"], &(0x7f0000000640)='GPL\x00', 0x2, 0x8b, &(0x7f0000000340)=""/139, 0x0, 0x4}, 0x94) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close(r4) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0xa, 0xb, 0x4, 0x401, 0x801, 0x100}, 0x0, &(0x7f0000004680)={0x9, 0x10000, 0xd3, 0x6, 0x6, 0x800000800003fd, 0x9, 0x8}, &(0x7f00000046c0), 0x0) 6.35922254s ago: executing program 0 (id=5965): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x1, 0x7fff0000}]}) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) socket$packet(0x11, 0x2, 0x300) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000300)=[@rdmsr={0x66, 0x18, {0xad8}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x99, 0x8, 0x3}}, @out_dx={0x6a, 0x28, {0xb256, 0x1, 0xf}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xbc, 0x8, 0x9, 0x60879d46}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16, 0x81, 0x200, 0x8000000000000000}}, @code={0xa, 0x53, {"0fa166400fe32067640f7998000000003667400f2d43000fc77b433e0f09410f01c248b800000000010000000f23c00f21f835010006000f23f836410f01c80f01c2"}}, @wr_drn={0x68, 0x20, {0x1, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0x512a}}], 0x1ab}) semget$private(0x0, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.289655624s ago: executing program 2 (id=5966): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) (fail_nth: 1) 5.339753831s ago: executing program 3 (id=5967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a19", 0x3f}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) 5.284442694s ago: executing program 2 (id=5968): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0xfffffffe, 0x1, 0x8, 0x5, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x0, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffff7000ffdbdf2531000000080001002a00000008000300ec8b244059d6ef729c6d654d03ec8ababf3cb735b2086cb034ab8d0fb2fc18362ff911c981950fe3ba64d8346cd40bf66420817c19258558d73fe5c7a5c90e61f814df52f31c358a1a16a58040da8b7dfca2ac485a0233b5f8d1302fa71d0d9424b974412667a3fec1e7bc43f4bdc25094084dab681228f80850eb9d1a25477bd810887772225df5cbab58e9b415c19ad3a58fecc849d52b19a3d9912624f39847f8d97554454cb93502506415821179c47e693867f2e28e5450ba0534a7", @ANYRES32=0x0, @ANYBLOB="0c00990006000000410000000800010028000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x10, 0x1, 0x99, 0xfffffff8}, 0x10) (async) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x4, 0xc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r6, &(0x7f0000000340), &(0x7f00000015c0)=""/120}, 0x20) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 4.795496278s ago: executing program 2 (id=5969): socket$netlink(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"a2e3ad21ed0d30f91b5d310987f70e06d038e7ff7fc6e5539b3263298b089b0708356e090890e0878f0e1ac6e7049b3350959bfc9b240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31300d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a204f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b54b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5e3728ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000004000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5182cff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec6800068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681e6756", 0x1000}}, 0x1006) socket$kcm(0x10, 0x7, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x42) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) 4.788642697s ago: executing program 1 (id=5970): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x4a}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 4.567501357s ago: executing program 3 (id=5971): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9", 0x46, 0x5, 0xd7}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.672053661s ago: executing program 1 (id=5972): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000080)) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, 0x0, 0x119) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042ffd02"], 0x200) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004780), 0x0, 0x0) 3.572398021s ago: executing program 0 (id=5973): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000080)={0x427b825c, 0xdf9, 0x7, 0x2, 0x2, 0x8}) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2.744451011s ago: executing program 2 (id=5974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x0, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x401c050}, 0x4000) 2.256449503s ago: executing program 2 (id=5975): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$inet(0x2, 0x4000000000000001, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0xc0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0xfffffffffffffce2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801004064ac96dd24000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7c3000008020000b7030000400000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000daffffffb7000004000000850000001000000095000000000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0xffffffffffffff4b, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x401}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x38) 2.108538773s ago: executing program 1 (id=5976): bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0xd, 0x0, 0x0, 0x0}, {0x50, 0x8800, 0x0, 0x0}], 0x2}) 2.092956237s ago: executing program 3 (id=5977): sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r7, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) 2.067658162s ago: executing program 0 (id=5978): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000080)=""/82, 0x52, 0x0, &(0x7f0000000140)=""/85, 0x55}}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x414000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000900), 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xb86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) 1.727976113s ago: executing program 0 (id=5979): r0 = socket(0x10, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_getroute={0x1c, 0x1a, 0x2, 0x0, 0x2, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd00}}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3, 0x2000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 1.686331819s ago: executing program 32 (id=5915): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x202, 0x7d, 0xa999, 0x8000, 0x0, 0x1}, 0x0, &(0x7f00000003c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0xf, 0x80010006, 0x1}, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 822.026999ms ago: executing program 0 (id=5981): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60160000"], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040420c80000000000000000"], 0xd) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2002, 0x2, 0x3}, 0x18, 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r6}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r4, 0x7) r7 = syz_open_dev$media(&(0x7f0000000240), 0x100000000, 0x802) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000480)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a08000000000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r8, &(0x7f0000032680)=""/102386, 0x18ff2) socket$inet6(0xa, 0x80002, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) 405.209949ms ago: executing program 3 (id=5982): socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 222.084702ms ago: executing program 1 (id=5983): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x8, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0xfffffffffffffffc, {{0x0, 0x0, 0x2, 0x1abb, 0xfffffffa, 0x7, {0xfffffffffffffffd, 0x2, 0x8000000000000654, 0x3, 0x1000001, 0x8, 0xffffffff, 0x141fc, 0xfd55, 0x1000, 0x8005, r2, 0x0, 0x58000000, 0xffff}}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144) 0s ago: executing program 3 (id=5984): sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000140000000000", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r1, 0x100, 0x70bd25, 0x25dfd3fd, {{}, {@void, @val={0xc, 0x99, {0x9d5, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8cc5}, 0xc00c000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x4000000) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): [ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1805.516531][ T5746] dvb-usb: error while querying for an remote control event. [ 1805.565029][T18400] hub 5-1:0.0: activate --> -90 [ 1805.597179][ T1222] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1805.681686][ T30] audit: type=1400 audit(1780629158.123:10273): avc: denied { create } for pid=25995 comm="syz.3.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1805.759314][ T1222] usb 2-1: Using ep0 maxpacket: 8 [ 1805.774232][ T1222] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1805.783995][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.793772][ T1222] usb 2-1: Product: syz [ 1805.798005][ T1222] usb 2-1: Manufacturer: syz [ 1805.803048][ T1222] usb 2-1: SerialNumber: syz [ 1805.828712][ T1222] usb 2-1: config 0 descriptor?? [ 1805.847651][ T1222] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1805.919947][T25966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.927333][T25966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.935409][T25966] bridge_slave_0: entered allmulticast mode [ 1805.943822][T25966] bridge_slave_0: entered promiscuous mode [ 1805.956483][T25966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.970157][T25966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.978066][T25966] bridge_slave_1: entered allmulticast mode [ 1805.980793][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1805.985639][T25966] bridge_slave_1: entered promiscuous mode [ 1806.002736][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1806.030088][T25966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.042379][T25966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.047994][T18400] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1806.059891][ T5737] usb 5-1: USB disconnect, device number 125 [ 1806.072251][T18400] usb 5-1-port1: connect-debounce failed [ 1806.115159][T25966] team0: Port device team_slave_0 added [ 1806.126608][T25966] team0: Port device team_slave_1 added [ 1806.160483][T25966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1806.167548][T25966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.194139][T25966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1806.206539][T25966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1806.213490][T25966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1806.240459][T25966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.305287][ T50] Bluetooth: hci4: command tx timeout [ 1806.344308][T25966] hsr_slave_0: entered promiscuous mode [ 1806.378824][T25966] hsr_slave_1: entered promiscuous mode [ 1806.385700][T25966] debugfs: 'hsr0' already exists in 'hsr' [ 1806.391655][T25966] Cannot create hsr debugfs directory [ 1806.576810][ T30] audit: type=1326 audit(1780629158.954:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.3.5696" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567119ce59 code=0x0 [ 1806.689413][T25966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.736324][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1806.750530][T18400] dvb-usb: error while querying for an remote control event. [ 1806.913231][T26034] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1807.891876][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1807.960431][T25966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.976363][T18400] dvb-usb: error while querying for an remote control event. [ 1808.099340][T18400] usb 2-1: USB disconnect, device number 118 [ 1808.147087][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.176292][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.210043][T25966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.285563][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1808.348021][ T30] audit: type=1400 audit(1780629160.588:10275): avc: denied { read } for pid=26059 comm="syz.4.5707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1808.357512][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.397425][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.417737][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.427036][T25966] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1808.436326][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436353][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436373][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436393][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436411][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436432][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.436452][ T24] hid-generic 0005:0010:10000.0042: unknown main item tag 0x0 [ 1808.438215][ T24] hid-generic 0005:0010:10000.0042: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 1808.465866][T25966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.554245][ T50] Bluetooth: hci4: command tx timeout [ 1808.585106][T26061] fido_id[26061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1809.117804][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 1809.144429][ T10] dvb-usb: error while querying for an remote control event. [ 1809.364349][T26057] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1809.421080][T26083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.443788][T25966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1809.446962][T26083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.470970][T25966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1809.489543][T25966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1809.514322][T25966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1809.531642][T25966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1809.569347][T25966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1809.591176][T25966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1809.619535][T25966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1809.758070][ T30] audit: type=1800 audit(1780629162.019:10276): pid=26087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5713" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1809.816291][T25966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.876223][T25966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1809.907639][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.914746][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.955577][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.962690][T18242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.186019][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1810.194016][T18400] dvb-usb: error while querying for an remote control event. [ 1810.567286][ T50] Bluetooth: hci4: command tx timeout [ 1810.732188][T25966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.860436][T25966] veth0_vlan: entered promiscuous mode [ 1810.883351][T25966] veth1_vlan: entered promiscuous mode [ 1810.959658][T25966] veth0_macvtap: entered promiscuous mode [ 1810.992399][T25966] veth1_macvtap: entered promiscuous mode [ 1811.050277][T25966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.094526][T25966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.147899][ T7815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.179120][ T7815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.201963][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1811.210970][ T7815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.227319][ T5746] dvb-usb: error while querying for an remote control event. [ 1811.251751][ T7815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.513375][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.549229][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.637228][ T7815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.672597][ T7815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.147203][T26133] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5681'. [ 1812.210276][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.262001][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.314303][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1812.371436][T18400] dvb-usb: error while querying for an remote control event. [ 1812.642750][ T50] Bluetooth: hci4: command tx timeout [ 1813.445336][T26137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1813.472131][T26156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.499971][T26156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.534319][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1813.546410][ T5746] dvb-usb: error while querying for an remote control event. [ 1813.633438][T26160] ieee802154 phy0 wpan0: encryption failed: -22 [ 1814.292118][T26176] FAULT_INJECTION: forcing a failure. [ 1814.292118][T26176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1814.324571][T26176] CPU: 0 UID: 0 PID: 26176 Comm: syz.3.5737 Tainted: G L syzkaller #0 PREEMPT(full) [ 1814.324600][T26176] Tainted: [L]=SOFTLOCKUP [ 1814.324607][T26176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1814.324616][T26176] Call Trace: [ 1814.324623][T26176] [ 1814.324630][T26176] dump_stack_lvl+0x100/0x190 [ 1814.324658][T26176] should_fail_ex.cold+0x5/0xa [ 1814.324682][T26176] _copy_to_user+0x32/0xd0 [ 1814.324707][T26176] simple_read_from_buffer+0xcb/0x170 [ 1814.324731][T26176] proc_fail_nth_read+0x1af/0x230 [ 1814.324752][T26176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1814.324773][T26176] ? rw_verify_area+0xce/0x6d0 [ 1814.324789][T26176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1814.324808][T26176] vfs_read+0x1e4/0xb30 [ 1814.324830][T26176] ? __pfx_vfs_read+0x10/0x10 [ 1814.324849][T26176] ? __fget_files+0x215/0x3d0 [ 1814.324877][T26176] ? __fget_files+0x21f/0x3d0 [ 1814.324907][T26176] ksys_read+0x12a/0x250 [ 1814.324926][T26176] ? __pfx_ksys_read+0x10/0x10 [ 1814.324948][T26176] ? rcu_is_watching+0x12/0xc0 [ 1814.324978][T26176] do_syscall_64+0x115/0x870 [ 1814.325001][T26176] ? clear_bhb_loop+0x40/0x90 [ 1814.325023][T26176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.325047][T26176] RIP: 0033:0x7f567115d68e [ 1814.325064][T26176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1814.325080][T26176] RSP: 002b:00007f5671fc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1814.325098][T26176] RAX: ffffffffffffffda RBX: 00007f5671fc16c0 RCX: 00007f567115d68e [ 1814.325110][T26176] RDX: 000000000000000f RSI: 00007f5671fc10a0 RDI: 0000000000000004 [ 1814.325121][T26176] RBP: 00007f5671fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.325131][T26176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.325142][T26176] R13: 00007f5671416038 R14: 00007f5671415fa0 R15: 00007ffe95dd32b8 [ 1814.325168][T26176] [ 1814.334546][ T1222] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1814.611314][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1814.618766][ T5746] dvb-usb: error while querying for an remote control event. [ 1814.741906][T26182] FAULT_INJECTION: forcing a failure. [ 1814.741906][T26182] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.779424][T26182] CPU: 0 UID: 0 PID: 26182 Comm: syz.4.5739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1814.779454][T26182] Tainted: [L]=SOFTLOCKUP [ 1814.779461][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1814.779471][T26182] Call Trace: [ 1814.779476][T26182] [ 1814.779484][T26182] dump_stack_lvl+0x100/0x190 [ 1814.779509][T26182] should_fail_ex.cold+0x5/0xa [ 1814.779535][T26182] should_failslab+0xc2/0x120 [ 1814.779555][T26182] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1814.779584][T26182] ? __alloc_skb+0x140/0x710 [ 1814.779608][T26182] ? __alloc_skb+0x5b7/0x710 [ 1814.779637][T26182] __alloc_skb+0x140/0x710 [ 1814.779660][T26182] ? __alloc_skb+0x5b7/0x710 [ 1814.779685][T26182] ? __pfx___alloc_skb+0x10/0x10 [ 1814.779717][T26182] alloc_skb_with_frags+0xdd/0x760 [ 1814.779739][T26182] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1814.779763][T26182] sock_alloc_send_pskb+0x801/0x980 [ 1814.779796][T26182] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1814.779824][T26182] ? sock_has_perm+0x25a/0x2f0 [ 1814.779846][T26182] ? __pfx_sock_has_perm+0x10/0x10 [ 1814.779872][T26182] hci_sock_sendmsg+0x1c7/0x2620 [ 1814.779901][T26182] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1814.779930][T26182] sock_write_iter+0x524/0x5a0 [ 1814.779951][T26182] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1814.779973][T26182] ? __pfx_sock_write_iter+0x10/0x10 [ 1814.780003][T26182] ? bpf_lsm_file_permission+0x9/0x10 [ 1814.780030][T26182] ? security_file_permission+0x76/0x210 [ 1814.780064][T26182] ? rw_verify_area+0xce/0x6d0 [ 1814.780085][T26182] vfs_write+0x6ac/0x1070 [ 1814.780106][T26182] ? __pfx_sock_write_iter+0x10/0x10 [ 1814.780128][T26182] ? __pfx_vfs_write+0x10/0x10 [ 1814.780146][T26182] ? find_held_lock+0x2b/0x80 [ 1814.780175][T26182] ksys_write+0x1f8/0x250 [ 1814.780195][T26182] ? __pfx_ksys_write+0x10/0x10 [ 1814.780220][T26182] ? rcu_is_watching+0x12/0xc0 [ 1814.780250][T26182] do_syscall_64+0x115/0x870 [ 1814.780273][T26182] ? clear_bhb_loop+0x40/0x90 [ 1814.780295][T26182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1814.780314][T26182] RIP: 0033:0x7f71d1d9ce59 [ 1814.780331][T26182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.780348][T26182] RSP: 002b:00007f71d2c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1814.780366][T26182] RAX: ffffffffffffffda RBX: 00007f71d2015fa0 RCX: 00007f71d1d9ce59 [ 1814.780377][T26182] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 1814.780388][T26182] RBP: 00007f71d2c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.780398][T26182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.780409][T26182] R13: 00007f71d2016038 R14: 00007f71d2015fa0 R15: 00007ffcc707bf68 [ 1814.780434][T26182] [ 1814.846940][ T1222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.189599][ T1222] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1815.213373][ T1222] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1815.236177][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.269846][ T1222] usb 3-1: config 0 descriptor?? [ 1815.311337][ T1222] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1815.327075][ T1222] dvb-usb: bulk message failed: -22 (3/0) [ 1815.364206][ T1222] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1815.381169][ T1222] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1815.390031][ T1222] usb 3-1: media controller created [ 1815.398391][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1815.425140][ T1222] dvb-usb: bulk message failed: -22 (6/0) [ 1815.449861][ T1222] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1815.471411][ T1222] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 1815.495218][ T1222] dvb-usb: schedule remote query interval to 150 msecs. [ 1815.518525][ T1222] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1815.543046][ T1222] usb 3-1: USB disconnect, device number 115 [ 1815.616324][ T1222] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1815.712055][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1815.717902][ T5746] dvb-usb: error while querying for an remote control event. [ 1815.742413][T15281] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1815.915120][T15281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.929188][T15281] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1815.947359][T26197] fuse: Bad value for 'fd' [ 1815.960894][T15281] usb 2-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 1815.975773][T15281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.000116][T15281] usb 2-1: Product: syz [ 1816.010911][T15281] usb 2-1: Manufacturer: syz [ 1816.023708][T15281] usb 2-1: SerialNumber: syz [ 1816.076364][T26201] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 1816.385909][T15281] usb 2-1: unit 4 not found! [ 1816.414014][T15281] usb 2-1: 6:0: failed to get current value for ch 0 (-71) [ 1816.545749][T15281] usb 2-1: USB disconnect, device number 119 [ 1816.689731][T26217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1816.702317][T26217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1816.864286][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1816.870192][ T5737] dvb-usb: error while querying for an remote control event. [ 1817.994313][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1818.727306][ T5746] dvb-usb: error while querying for an remote control event. [ 1818.802428][T26234] FAULT_INJECTION: forcing a failure. [ 1818.802428][T26234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.854658][T26234] CPU: 1 UID: 0 PID: 26234 Comm: syz.2.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1818.854679][T26234] Tainted: [L]=SOFTLOCKUP [ 1818.854684][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1818.854690][T26234] Call Trace: [ 1818.854695][T26234] [ 1818.854700][T26234] dump_stack_lvl+0x100/0x190 [ 1818.854718][T26234] should_fail_ex.cold+0x5/0xa [ 1818.854735][T26234] _copy_from_user+0x2e/0xd0 [ 1818.854750][T26234] __sys_bpf+0x243/0x4b90 [ 1818.854770][T26234] ? __pfx___sys_bpf+0x10/0x10 [ 1818.854786][T26234] ? proc_fail_nth_write+0x9f/0x220 [ 1818.854799][T26234] ? find_held_lock+0x2b/0x80 [ 1818.854812][T26234] ? find_held_lock+0x2b/0x80 [ 1818.854821][T26234] ? ksys_write+0x190/0x250 [ 1818.854834][T26234] ? ksys_write+0x190/0x250 [ 1818.854848][T26234] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1818.854864][T26234] ? kernel_write+0x673/0x6c0 [ 1818.854876][T26234] ? __fget_files+0x215/0x3d0 [ 1818.854897][T26234] ? fput+0x79/0x100 [ 1818.854912][T26234] ? ksys_write+0x1ac/0x250 [ 1818.854924][T26234] ? __pfx_ksys_write+0x10/0x10 [ 1818.854939][T26234] __x64_sys_bpf+0x7b/0xc0 [ 1818.854950][T26234] ? lockdep_hardirqs_on+0x78/0x100 [ 1818.854964][T26234] do_syscall_64+0x115/0x870 [ 1818.854979][T26234] ? clear_bhb_loop+0x40/0x90 [ 1818.854993][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.855005][T26234] RIP: 0033:0x7f372bd9ce59 [ 1818.855015][T26234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.855026][T26234] RSP: 002b:00007f372cd29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1818.855038][T26234] RAX: ffffffffffffffda RBX: 00007f372c015fa0 RCX: 00007f372bd9ce59 [ 1818.855045][T26234] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1818.855052][T26234] RBP: 00007f372cd29090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.855058][T26234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.855064][T26234] R13: 00007f372c016038 R14: 00007f372c015fa0 R15: 00007ffebc5619f8 [ 1818.855079][T26234] [ 1819.135830][T26239] fuse: Bad value for 'fd' [ 1819.232242][ T30] audit: type=1400 audit(1780629171.490:10277): avc: denied { listen } for pid=26218 comm="syz.1.5751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1819.311678][T26246] hpfs: Bad magic ... probably not HPFS [ 1819.323910][T26246] binder: 26245:26246 ioctl c0306201 200000000180 returned -22 [ 1819.347456][T26248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1819.445541][T15281] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1819.484760][ T30] audit: type=1400 audit(1780629171.729:10278): avc: denied { setopt } for pid=26245 comm="syz.2.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1819.515908][T26254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.527949][T26254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.560418][T26254] netlink: 'syz.0.5763': attribute type 25 has an invalid length. [ 1819.689442][T15281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.699855][T15281] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1819.728620][T15281] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1819.763211][T15281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.797413][T15281] usb 5-1: config 0 descriptor?? [ 1819.816629][T15281] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1819.834441][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1819.848750][ T5737] dvb-usb: error while querying for an remote control event. [ 1819.866161][T15281] dvb-usb: bulk message failed: -22 (3/0) [ 1819.899503][T15281] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1819.913795][T15281] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1819.924206][T15281] usb 5-1: media controller created [ 1819.931572][T15281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1819.993959][T15281] dvb-usb: bulk message failed: -22 (6/0) [ 1820.009583][T15281] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1820.033111][T15281] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 1820.061966][T15281] dvb-usb: schedule remote query interval to 150 msecs. [ 1820.183133][T15281] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1820.586349][ T1222] dvb-usb: bulk message failed: -22 (1/0) [ 1820.592159][ T1222] dvb-usb: error while querying for an remote control event. [ 1820.690688][T15281] usb 5-1: USB disconnect, device number 126 [ 1820.724286][T26280] FAULT_INJECTION: forcing a failure. [ 1820.724286][T26280] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.769278][T26280] CPU: 1 UID: 0 PID: 26280 Comm: syz.0.5768 Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.769298][T26280] Tainted: [L]=SOFTLOCKUP [ 1820.769302][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1820.769308][T26280] Call Trace: [ 1820.769312][T26280] [ 1820.769317][T26280] dump_stack_lvl+0x100/0x190 [ 1820.769335][T26280] should_fail_ex.cold+0x5/0xa [ 1820.769352][T26280] should_failslab+0xc2/0x120 [ 1820.769365][T26280] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1820.769383][T26280] ? do_getname+0x35/0x390 [ 1820.769403][T26280] do_getname+0x35/0x390 [ 1820.769422][T26280] path_listxattrat+0x2db/0x370 [ 1820.769436][T26280] ? ksys_write+0x1ac/0x250 [ 1820.769449][T26280] ? __pfx_path_listxattrat+0x10/0x10 [ 1820.769467][T26280] ? rcu_is_watching+0x12/0xc0 [ 1820.769486][T26280] do_syscall_64+0x115/0x870 [ 1820.769501][T26280] ? clear_bhb_loop+0x40/0x90 [ 1820.769515][T26280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.769526][T26280] RIP: 0033:0x7f438af9ce59 [ 1820.769537][T26280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.769549][T26280] RSP: 002b:00007f438be87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 1820.769560][T26280] RAX: ffffffffffffffda RBX: 00007f438b215fa0 RCX: 00007f438af9ce59 [ 1820.769568][T26280] RDX: 00000000fffffdf3 RSI: 0000000000000000 RDI: 0000200000002300 [ 1820.769575][T26280] RBP: 00007f438be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.769582][T26280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.769588][T26280] R13: 00007f438b216038 R14: 00007f438b215fa0 R15: 00007fff8cdaa7a8 [ 1820.769603][T26280] [ 1820.983651][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1821.140019][ T5746] dvb-usb: error while querying for an remote control event. [ 1821.143670][T15281] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1821.504422][T26303] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5774'. [ 1821.607886][ T30] audit: type=1400 audit(1780629173.684:10279): avc: denied { getopt } for pid=26291 comm="syz.2.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1821.646966][T26306] FAULT_INJECTION: forcing a failure. [ 1821.646966][T26306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1821.682207][T26306] CPU: 0 UID: 0 PID: 26306 Comm: syz.3.5775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1821.682238][T26306] Tainted: [L]=SOFTLOCKUP [ 1821.682244][T26306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1821.682255][T26306] Call Trace: [ 1821.682262][T26306] [ 1821.682269][T26306] dump_stack_lvl+0x100/0x190 [ 1821.682296][T26306] should_fail_ex.cold+0x5/0xa [ 1821.682320][T26306] _copy_from_user+0x2e/0xd0 [ 1821.682344][T26306] xsk_setsockopt+0x8c7/0xab0 [ 1821.682365][T26306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1821.682388][T26306] ? security_socket_setsockopt+0x6f/0x230 [ 1821.682414][T26306] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 1821.682436][T26306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1821.682456][T26306] do_sock_setsockopt+0xf3/0x1d0 [ 1821.682479][T26306] __sys_setsockopt+0x195/0x220 [ 1821.682511][T26306] __x64_sys_setsockopt+0xbd/0x160 [ 1821.682537][T26306] ? do_syscall_64+0x90/0x870 [ 1821.682560][T26306] ? lockdep_hardirqs_on+0x78/0x100 [ 1821.682583][T26306] do_syscall_64+0x115/0x870 [ 1821.682604][T26306] ? clear_bhb_loop+0x40/0x90 [ 1821.682627][T26306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.682645][T26306] RIP: 0033:0x7f567119ce59 [ 1821.682661][T26306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.682678][T26306] RSP: 002b:00007f5671fc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1821.682696][T26306] RAX: ffffffffffffffda RBX: 00007f5671415fa0 RCX: 00007f567119ce59 [ 1821.682708][T26306] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1821.682719][T26306] RBP: 00007f5671fc1090 R08: 000000000000001c R09: 0000000000000000 [ 1821.682729][T26306] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 1821.682739][T26306] R13: 00007f5671416038 R14: 00007f5671415fa0 R15: 00007ffe95dd32b8 [ 1821.682764][T26306] [ 1822.299030][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1822.304930][ T5746] dvb-usb: error while querying for an remote control event. [ 1823.198695][T26310] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1823.295592][T26318] FAULT_INJECTION: forcing a failure. [ 1823.295592][T26318] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.411457][T26318] CPU: 1 UID: 0 PID: 26318 Comm: syz.2.5779 Tainted: G L syzkaller #0 PREEMPT(full) [ 1823.411485][T26318] Tainted: [L]=SOFTLOCKUP [ 1823.411491][T26318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1823.411501][T26318] Call Trace: [ 1823.411506][T26318] [ 1823.411513][T26318] dump_stack_lvl+0x100/0x190 [ 1823.411538][T26318] should_fail_ex.cold+0x5/0xa [ 1823.411562][T26318] should_failslab+0xc2/0x120 [ 1823.411582][T26318] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1823.411607][T26318] ? do_getname+0x35/0x390 [ 1823.411637][T26318] do_getname+0x35/0x390 [ 1823.411665][T26318] ksys_truncate+0xa4/0x190 [ 1823.411686][T26318] ? __pfx_ksys_truncate+0x10/0x10 [ 1823.411713][T26318] __x64_sys_truncate+0x54/0x80 [ 1823.411733][T26318] do_syscall_64+0x115/0x870 [ 1823.411755][T26318] ? clear_bhb_loop+0x40/0x90 [ 1823.411775][T26318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.411792][T26318] RIP: 0033:0x7f372bd9ce59 [ 1823.411807][T26318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.411823][T26318] RSP: 002b:00007f372cd29028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1823.411840][T26318] RAX: ffffffffffffffda RBX: 00007f372c015fa0 RCX: 00007f372bd9ce59 [ 1823.411852][T26318] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000200000000100 [ 1823.411862][T26318] RBP: 00007f372cd29090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.411873][T26318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.411883][T26318] R13: 00007f372c016038 R14: 00007f372c015fa0 R15: 00007ffebc5619f8 [ 1823.411907][T26318] [ 1823.732507][T26330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1823.746643][T26330] block nbd0: not configured, cannot reconfigure [ 1824.004341][T18400] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1824.276254][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1824.282276][ T5737] dvb-usb: error while querying for an remote control event. [ 1824.332306][T26334] FAULT_INJECTION: forcing a failure. [ 1824.332306][T26334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.357082][T26335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.391883][T26334] CPU: 0 UID: 0 PID: 26334 Comm: syz.4.5783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.391912][T26334] Tainted: [L]=SOFTLOCKUP [ 1824.391919][T26334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1824.391929][T26334] Call Trace: [ 1824.391935][T26334] [ 1824.391942][T26334] dump_stack_lvl+0x100/0x190 [ 1824.391968][T26334] should_fail_ex.cold+0x5/0xa [ 1824.391994][T26334] _copy_from_user+0x2e/0xd0 [ 1824.392018][T26334] copy_msghdr_from_user+0x9f/0x4f0 [ 1824.392042][T26334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1824.392077][T26334] ___sys_sendmsg+0x106/0x1e0 [ 1824.392101][T26334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.392152][T26334] __sys_sendmsg+0x170/0x220 [ 1824.392180][T26334] ? __pfx___sys_sendmsg+0x10/0x10 [ 1824.392217][T26334] ? rcu_is_watching+0x12/0xc0 [ 1824.392245][T26334] do_syscall_64+0x115/0x870 [ 1824.392267][T26334] ? clear_bhb_loop+0x40/0x90 [ 1824.392289][T26334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.392306][T26334] RIP: 0033:0x7f71d1d9ce59 [ 1824.392321][T26334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.392337][T26334] RSP: 002b:00007f71d2c0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.392354][T26334] RAX: ffffffffffffffda RBX: 00007f71d2015fa0 RCX: 00007f71d1d9ce59 [ 1824.392365][T26334] RDX: 0000000000000010 RSI: 0000200000003480 RDI: 0000000000000004 [ 1824.392375][T26334] RBP: 00007f71d2c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.392385][T26334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.392396][T26334] R13: 00007f71d2016038 R14: 00007f71d2015fa0 R15: 00007ffcc707bf68 [ 1824.392420][T26334] [ 1824.669685][T18400] usb 3-1: Using ep0 maxpacket: 16 [ 1824.676952][T18400] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 1824.685158][T18400] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.695957][T18400] usb 3-1: config 8 has no interface number 0 [ 1824.702644][T18400] usb 3-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1824.716652][T18400] usb 3-1: config 8 interface 206 has no altsetting 0 [ 1824.725256][T18400] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1824.734363][T18400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.742337][T18400] usb 3-1: Product: syz [ 1824.746511][T18400] usb 3-1: Manufacturer: syz [ 1824.751098][T18400] usb 3-1: SerialNumber: syz [ 1824.807347][T26345] netlink: 'syz.0.5786': attribute type 29 has an invalid length. [ 1824.834772][T26347] ubi31: attaching mtd0 [ 1824.884537][T26347] ubi31: scanning is finished [ 1824.889508][T26347] ubi31: empty MTD device detected [ 1824.994492][T26327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.023088][T26327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.071688][T26351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1825.085816][T26327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.144825][T26327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.199273][T26327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.269464][T26327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.376084][T26327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.388786][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1825.450826][T26327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.630068][ T5737] dvb-usb: error while querying for an remote control event. [ 1825.901868][T18400] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 1825.922587][T18400] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1825.932287][T18400] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1825.955943][T26347] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1825.956283][T18400] usb 3-1: USB disconnect, device number 116 [ 1825.975985][T18400] garmin_gps 3-1:8.206: device disconnected [ 1826.126968][T26358] sctp: [Deprecated]: syz.3.5791 (pid 26358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1826.126968][T26358] Use struct sctp_sack_info instead [ 1826.314101][ T30] audit: type=1400 audit(1780629178.121:10280): avc: denied { bpf } for pid=26360 comm="syz.0.5792" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1826.352578][T26362] lo speed is unknown, defaulting to 1000 [ 1826.359643][T26362] lo speed is unknown, defaulting to 1000 [ 1827.037722][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1827.043735][T18400] dvb-usb: error while querying for an remote control event. [ 1827.056103][ T30] audit: type=1400 audit(1780629178.195:10281): avc: denied { create } for pid=26360 comm="syz.0.5792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1827.132817][ T30] audit: type=1400 audit(1780629178.251:10282): avc: denied { perfmon } for pid=26360 comm="syz.0.5792" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1828.027387][T26376] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1828.452309][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1828.458077][T18400] dvb-usb: error while querying for an remote control event. [ 1828.543728][ T30] audit: type=1400 audit(1780629180.187:10283): avc: denied { read } for pid=26388 comm="syz.2.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1829.621329][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1829.628421][ T5737] dvb-usb: error while querying for an remote control event. [ 1829.665987][T26399] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5802'. [ 1829.866069][T26401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1830.019811][ T30] audit: type=1400 audit(1780629181.547:10284): avc: denied { write } for pid=26410 comm="syz.1.5806" path="socket:[108863]" dev="sockfs" ino=108863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1830.518340][T26406] FAULT_INJECTION: forcing a failure. [ 1830.518340][T26406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1830.538372][ T30] audit: type=1400 audit(1780629182.028:10285): avc: denied { write } for pid=26404 comm="syz.2.5804" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1830.562064][T26406] CPU: 0 UID: 0 PID: 26406 Comm: syz.2.5804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1830.562093][T26406] Tainted: [L]=SOFTLOCKUP [ 1830.562099][T26406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1830.562110][T26406] Call Trace: [ 1830.562116][T26406] [ 1830.562123][T26406] dump_stack_lvl+0x100/0x190 [ 1830.562152][T26406] should_fail_ex.cold+0x5/0xa [ 1830.562177][T26406] _copy_to_user+0x32/0xd0 [ 1830.562202][T26406] simple_read_from_buffer+0xcb/0x170 [ 1830.562228][T26406] proc_fail_nth_read+0x1af/0x230 [ 1830.562249][T26406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1830.562271][T26406] ? rw_verify_area+0xce/0x6d0 [ 1830.562295][T26406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1830.562313][T26406] vfs_read+0x1e4/0xb30 [ 1830.562335][T26406] ? __pfx_vfs_read+0x10/0x10 [ 1830.562353][T26406] ? __fget_files+0x215/0x3d0 [ 1830.562380][T26406] ? __fget_files+0x21f/0x3d0 [ 1830.562409][T26406] ksys_read+0x12a/0x250 [ 1830.562428][T26406] ? __pfx_ksys_read+0x10/0x10 [ 1830.562448][T26406] ? rcu_is_watching+0x12/0xc0 [ 1830.562478][T26406] do_syscall_64+0x115/0x870 [ 1830.562501][T26406] ? clear_bhb_loop+0x40/0x90 [ 1830.562523][T26406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.562541][T26406] RIP: 0033:0x7f372bd5d68e [ 1830.562557][T26406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1830.562573][T26406] RSP: 002b:00007f372cd28fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1830.562590][T26406] RAX: ffffffffffffffda RBX: 00007f372cd296c0 RCX: 00007f372bd5d68e [ 1830.562601][T26406] RDX: 000000000000000f RSI: 00007f372cd290a0 RDI: 0000000000000005 [ 1830.562611][T26406] RBP: 00007f372cd29090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.562622][T26406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.562632][T26406] R13: 00007f372c016038 R14: 00007f372c015fa0 R15: 00007ffebc5619f8 [ 1830.562658][T26406] [ 1830.767006][ T30] audit: type=1400 audit(1780629182.028:10286): avc: denied { open } for pid=26404 comm="syz.2.5804" path="/14/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1830.791728][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1830.797469][ T5737] dvb-usb: error while querying for an remote control event. [ 1830.817083][ T30] audit: type=1400 audit(1780629182.287:10287): avc: denied { read } for pid=26402 comm="syz.4.5803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1831.347168][T26434] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5810'. [ 1831.955319][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1832.178101][ T5737] dvb-usb: error while querying for an remote control event. [ 1832.567143][T26452] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1832.908043][ T5737] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1833.340645][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1833.347879][T18400] dvb-usb: error while querying for an remote control event. [ 1834.013210][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 1834.019766][ T5737] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1834.027290][ T5737] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1834.042063][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1834.053897][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1834.065849][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1834.077203][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1834.088728][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1834.131277][ T5737] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1834.139674][ T5737] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1834.147218][ T5737] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1834.161299][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1834.173042][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1834.186909][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1834.198428][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1834.228159][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1834.272621][ T5737] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1834.626103][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1834.631865][T18400] dvb-usb: error while querying for an remote control event. [ 1834.645270][ T5737] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1834.653339][ T5737] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1834.664517][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1834.684270][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1834.733314][T26472] FAULT_INJECTION: forcing a failure. [ 1834.733314][T26472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1834.746553][T26472] CPU: 0 UID: 0 PID: 26472 Comm: syz.4.5819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1834.746583][T26472] Tainted: [L]=SOFTLOCKUP [ 1834.746590][T26472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1834.746602][T26472] Call Trace: [ 1834.746608][T26472] [ 1834.746616][T26472] dump_stack_lvl+0x100/0x190 [ 1834.746642][T26472] should_fail_ex.cold+0x5/0xa [ 1834.746668][T26472] _copy_from_user+0x2e/0xd0 [ 1834.746718][T26472] core_sys_select+0x2d0/0xbb0 [ 1834.746751][T26472] ? __pfx_core_sys_select+0x10/0x10 [ 1834.746773][T26472] ? find_held_lock+0x2b/0x80 [ 1834.746789][T26472] ? get_pid_task+0xfc/0x250 [ 1834.746832][T26472] ? __pfx_set_user_sigmask+0x10/0x10 [ 1834.746855][T26472] ? kernel_write+0x673/0x6c0 [ 1834.746876][T26472] ? __fget_files+0x215/0x3d0 [ 1834.746903][T26472] do_pselect.constprop.0+0x238/0x270 [ 1834.746929][T26472] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1834.746957][T26472] ? ksys_write+0x1ac/0x250 [ 1834.746981][T26472] __x64_sys_pselect6+0x149/0x1c0 [ 1834.747008][T26472] do_syscall_64+0x115/0x870 [ 1834.747031][T26472] ? clear_bhb_loop+0x40/0x90 [ 1834.747053][T26472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.747072][T26472] RIP: 0033:0x7f71d1d9ce59 [ 1834.747089][T26472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.747106][T26472] RSP: 002b:00007f71d2bc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1834.747124][T26472] RAX: ffffffffffffffda RBX: 00007f71d2016180 RCX: 00007f71d1d9ce59 [ 1834.747136][T26472] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1834.747147][T26472] RBP: 00007f71d2bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1834.747158][T26472] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1834.747168][T26472] R13: 00007f71d2016218 R14: 00007f71d2016180 R15: 00007ffcc707bf68 [ 1834.747193][T26472] [ 1834.944344][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1834.955838][ T5737] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1834.967545][ T5737] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1834.981091][ T5737] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1835.018077][ T5737] usb 2-1: string descriptor 0 read error: -22 [ 1835.024730][ T5737] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1835.033827][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.161299][ T5737] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1835.180026][T26469] rdma_rxe: rxe_newlink: failed to add lo [ 1835.301747][ T30] audit: type=1400 audit(1780629186.436:10288): avc: denied { ioctl } for pid=26473 comm="syz.3.5820" path="socket:[108534]" dev="sockfs" ino=108534 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1835.387343][ T5737] usb 2-1: USB disconnect, device number 120 [ 1835.510185][T26482] FAULT_INJECTION: forcing a failure. [ 1835.510185][T26482] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.604851][T26482] CPU: 0 UID: 0 PID: 26482 Comm: syz.4.5821 Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.604880][T26482] Tainted: [L]=SOFTLOCKUP [ 1835.604887][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1835.604897][T26482] Call Trace: [ 1835.604903][T26482] [ 1835.604911][T26482] dump_stack_lvl+0x100/0x190 [ 1835.604937][T26482] should_fail_ex.cold+0x5/0xa [ 1835.604966][T26482] should_failslab+0xc2/0x120 [ 1835.604987][T26482] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1835.605015][T26482] ? do_getname+0x35/0x390 [ 1835.605042][T26482] ? xfd_validate_state+0x129/0x190 [ 1835.605067][T26482] do_getname+0x35/0x390 [ 1835.605097][T26482] __x64_sys_rename+0x57/0xb0 [ 1835.605124][T26482] do_syscall_64+0x115/0x870 [ 1835.605148][T26482] ? clear_bhb_loop+0x40/0x90 [ 1835.605169][T26482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.605187][T26482] RIP: 0033:0x7f71d1d9ce59 [ 1835.605203][T26482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.605221][T26482] RSP: 002b:00007f71d2bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1835.605239][T26482] RAX: ffffffffffffffda RBX: 00007f71d2016180 RCX: 00007f71d1d9ce59 [ 1835.605252][T26482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 1835.605263][T26482] RBP: 00007f71d2bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.605274][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.605284][T26482] R13: 00007f71d2016218 R14: 00007f71d2016180 R15: 00007ffcc707bf68 [ 1835.605309][T26482] [ 1835.959172][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1835.986030][ T5746] dvb-usb: error while querying for an remote control event. [ 1836.396951][T26496] FAULT_INJECTION: forcing a failure. [ 1836.396951][T26496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.418175][T26496] CPU: 1 UID: 0 PID: 26496 Comm: syz.2.5824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1836.418205][T26496] Tainted: [L]=SOFTLOCKUP [ 1836.418212][T26496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1836.418222][T26496] Call Trace: [ 1836.418229][T26496] [ 1836.418236][T26496] dump_stack_lvl+0x100/0x190 [ 1836.418262][T26496] should_fail_ex.cold+0x5/0xa [ 1836.418287][T26496] _copy_from_user+0x2e/0xd0 [ 1836.418311][T26496] __sys_bpf+0x243/0x4b90 [ 1836.418341][T26496] ? __pfx___sys_bpf+0x10/0x10 [ 1836.418365][T26496] ? proc_fail_nth_write+0x9f/0x220 [ 1836.418385][T26496] ? find_held_lock+0x2b/0x80 [ 1836.418405][T26496] ? find_held_lock+0x2b/0x80 [ 1836.418419][T26496] ? ksys_write+0x190/0x250 [ 1836.418435][T26496] ? ksys_write+0x190/0x250 [ 1836.418454][T26496] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1836.418473][T26496] ? kernel_write+0x673/0x6c0 [ 1836.418488][T26496] ? __fget_files+0x215/0x3d0 [ 1836.418517][T26496] ? fput+0x79/0x100 [ 1836.418536][T26496] ? ksys_write+0x1ac/0x250 [ 1836.418551][T26496] ? __pfx_ksys_write+0x10/0x10 [ 1836.418570][T26496] __x64_sys_bpf+0x7b/0xc0 [ 1836.418583][T26496] ? lockdep_hardirqs_on+0x78/0x100 [ 1836.418602][T26496] do_syscall_64+0x115/0x870 [ 1836.418620][T26496] ? clear_bhb_loop+0x40/0x90 [ 1836.418637][T26496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.418656][T26496] RIP: 0033:0x7f372bd9ce59 [ 1836.418669][T26496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.418683][T26496] RSP: 002b:00007f372cce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1836.418699][T26496] RAX: ffffffffffffffda RBX: 00007f372c016180 RCX: 00007f372bd9ce59 [ 1836.418709][T26496] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 1836.418718][T26496] RBP: 00007f372cce7090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.418726][T26496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.418735][T26496] R13: 00007f372c016218 R14: 00007f372c016180 R15: 00007ffebc5619f8 [ 1836.418757][T26496] [ 1837.060119][T26505] netlink: 'syz.1.5829': attribute type 1 has an invalid length. [ 1837.074311][T26505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5829'. [ 1837.095397][T26505] netlink: 'syz.1.5829': attribute type 1 has an invalid length. [ 1837.153955][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1837.160200][ T5737] dvb-usb: error while querying for an remote control event. [ 1837.198253][T26510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1838.278116][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1838.287673][ T5737] dvb-usb: error while querying for an remote control event. [ 1838.524685][ T30] audit: type=1400 audit(1780629189.410:10289): avc: denied { mounton } for pid=26519 comm="syz.1.5832" path="/490/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1838.632452][ T30] audit: type=1400 audit(1780629189.446:10290): avc: denied { shutdown } for pid=26519 comm="syz.1.5832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1838.659323][T26530] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1838.747182][ T30] audit: type=1400 audit(1780629189.603:10291): avc: denied { unmount } for pid=16619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1838.819066][ T30] audit: type=1400 audit(1780629189.650:10292): avc: denied { write } for pid=26532 comm="syz.0.5834" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1838.966264][T26542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.986222][T26542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.065333][T26542] FAULT_INJECTION: forcing a failure. [ 1839.065333][T26542] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.092686][T26542] CPU: 0 UID: 0 PID: 26542 Comm: syz.3.5838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.092715][T26542] Tainted: [L]=SOFTLOCKUP [ 1839.092721][T26542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1839.092731][T26542] Call Trace: [ 1839.092737][T26542] [ 1839.092744][T26542] dump_stack_lvl+0x100/0x190 [ 1839.092768][T26542] should_fail_ex.cold+0x5/0xa [ 1839.092791][T26542] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1839.092817][T26542] should_failslab+0xc2/0x120 [ 1839.092838][T26542] __kmalloc_noprof+0xe0/0x850 [ 1839.092862][T26542] ? kfree+0x1dd/0x6c0 [ 1839.092888][T26542] tomoyo_realpath_from_path+0xb6/0x690 [ 1839.092922][T26542] tomoyo_path_number_perm+0x23c/0x580 [ 1839.092945][T26542] ? tomoyo_path_number_perm+0x22e/0x580 [ 1839.092970][T26542] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1839.093021][T26542] ? find_held_lock+0x2b/0x80 [ 1839.093037][T26542] ? __fget_files+0x215/0x3d0 [ 1839.093059][T26542] ? hook_file_ioctl_common+0x149/0x410 [ 1839.093076][T26542] ? __fget_files+0x215/0x3d0 [ 1839.093102][T26542] ? __fget_files+0x21f/0x3d0 [ 1839.093128][T26542] security_file_ioctl+0xd3/0x230 [ 1839.093155][T26542] __x64_sys_ioctl+0xb7/0x210 [ 1839.093177][T26542] do_syscall_64+0x115/0x870 [ 1839.093199][T26542] ? clear_bhb_loop+0x40/0x90 [ 1839.093220][T26542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.093238][T26542] RIP: 0033:0x7f567119ce59 [ 1839.093255][T26542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.093272][T26542] RSP: 002b:00007f5671fc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1839.093291][T26542] RAX: ffffffffffffffda RBX: 00007f5671415fa0 RCX: 00007f567119ce59 [ 1839.093304][T26542] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1839.093314][T26542] RBP: 00007f5671fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.093325][T26542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.093336][T26542] R13: 00007f5671416038 R14: 00007f5671415fa0 R15: 00007ffe95dd32b8 [ 1839.093362][T26542] [ 1839.093370][T26542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1839.111726][T15281] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1839.455800][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1839.474114][ T5737] dvb-usb: error while querying for an remote control event. [ 1839.557665][T15281] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1839.577541][T15281] usb 2-1: config 254 has an invalid interface number: 250 but max is 0 [ 1839.598969][T15281] usb 2-1: config 254 has no interface number 0 [ 1839.618490][T15281] usb 2-1: config 254 interface 250 has no altsetting 0 [ 1839.644079][T15281] usb 2-1: language id specifier not provided by device, defaulting to English [ 1839.662873][T15281] usb 2-1: New USB device found, idVendor=0421, idProduct=00b0, bcdDevice=a4.9f [ 1839.679830][T15281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.699248][T15281] usb 2-1: Product: ᯵桑ͫ-䯩⊲䩽➰镾폜抅헲蛉⿪埻ⵁ鲗삅㗎ⱼ뼝ʔ⣤뵘툦䃃꘼ࡸ괺瀃ᢢ㏌ꐫ뮔ᱦ颗䨓뎭滘⾇폛芌ቲ⩱골툓ꜥ뉻蓳뽯頕ᤒ웯ᶬ€퐎蔲ㅺᯇݰ䴥푧杭珰鳺樱돵璋䔯﬿䥎㡑锚曉┧烗㿃᷃䳒 [ 1839.757321][T15281] usb 2-1: Manufacturer: а [ 1839.761880][T15281] usb 2-1: SerialNumber: syz [ 1839.870031][T26558] loop4: detected capacity change from 0 to 7 [ 1839.915259][T26558] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1839.921309][T26558] loop4: partition table partially beyond EOD, truncated [ 1839.929045][T26558] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1839.970848][T22773] udevd[22773]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1839.972220][T15281] rndis_host 2-1:254.250: More than one union descriptor, skipping ... [ 1840.021201][T15281] rndis_host 2-1:254.250: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1840.117121][T26563] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1840.126258][ T30] audit: type=1400 audit(1780629190.986:10293): avc: denied { nlmsg_read } for pid=26560 comm="syz.2.5843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1840.294617][T15281] cdc_acm 2-1:254.250: More than one union descriptor, skipping ... [ 1840.496421][T15281] usb 2-1: USB disconnect, device number 121 [ 1840.532178][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1840.551910][ T5746] dvb-usb: error while querying for an remote control event. [ 1840.859933][T26571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.932712][T26571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.147828][ T30] audit: type=1400 audit(1780629192.043:10294): avc: denied { write } for pid=26568 comm="syz.3.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1841.240364][T26574] Invalid option length (772) for dns_resolver key [ 1841.698247][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1841.834716][T26578] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1841.923880][T26580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5848'. [ 1842.211670][ T5817] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1842.459442][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 1842.602805][ T5817] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1842.740562][ T5817] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1842.836931][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1842.902947][ T5817] usb 3-1: Product: syz [ 1842.912305][ T30] audit: type=1400 audit(1780629193.788:10295): avc: denied { map_create } for pid=26586 comm="syz.4.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1842.946502][ T5817] usb 3-1: Manufacturer: syz [ 1842.982355][ T5817] usb 3-1: SerialNumber: syz [ 1843.058993][ T30] audit: type=1400 audit(1780629193.807:10296): avc: denied { map_read map_write } for pid=26586 comm="syz.4.5850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.121322][ T5746] dvb-usb: error while querying for an remote control event. [ 1843.123144][ T5817] usb 3-1: config 0 descriptor?? [ 1843.171686][T26582] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1843.189196][T26592] netlink: 'syz.1.5851': attribute type 3 has an invalid length. [ 1843.197927][ T5817] hub 3-1:0.0: bad descriptor, ignoring hub [ 1843.209219][ T5817] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1843.274704][ T30] audit: type=1400 audit(1780629194.138:10297): avc: denied { prog_load } for pid=26590 comm="syz.1.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.298788][T26596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1843.477489][T26601] FAULT_INJECTION: forcing a failure. [ 1843.477489][T26601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.517161][T26601] CPU: 0 UID: 0 PID: 26601 Comm: syz.1.5853 Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.517193][T26601] Tainted: [L]=SOFTLOCKUP [ 1843.517199][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1843.517209][T26601] Call Trace: [ 1843.517215][T26601] [ 1843.517222][T26601] dump_stack_lvl+0x100/0x190 [ 1843.517247][T26601] should_fail_ex.cold+0x5/0xa [ 1843.517270][T26601] _copy_from_user+0x2e/0xd0 [ 1843.517291][T26601] __sys_bpf+0x243/0x4b90 [ 1843.517322][T26601] ? __pfx___sys_bpf+0x10/0x10 [ 1843.517346][T26601] ? proc_fail_nth_write+0x9f/0x220 [ 1843.517364][T26601] ? find_held_lock+0x2b/0x80 [ 1843.517384][T26601] ? find_held_lock+0x2b/0x80 [ 1843.517394][T26601] ? ksys_write+0x190/0x250 [ 1843.517407][T26601] ? ksys_write+0x190/0x250 [ 1843.517421][T26601] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1843.517437][T26601] ? kernel_write+0x673/0x6c0 [ 1843.517449][T26601] ? __fget_files+0x215/0x3d0 [ 1843.517470][T26601] ? fput+0x79/0x100 [ 1843.517485][T26601] ? ksys_write+0x1ac/0x250 [ 1843.517498][T26601] ? __pfx_ksys_write+0x10/0x10 [ 1843.517514][T26601] __x64_sys_bpf+0x7b/0xc0 [ 1843.517524][T26601] ? lockdep_hardirqs_on+0x78/0x100 [ 1843.517539][T26601] do_syscall_64+0x115/0x870 [ 1843.517553][T26601] ? clear_bhb_loop+0x40/0x90 [ 1843.517567][T26601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.517579][T26601] RIP: 0033:0x7f4086d9ce59 [ 1843.517589][T26601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.517600][T26601] RSP: 002b:00007f4087d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1843.517612][T26601] RAX: ffffffffffffffda RBX: 00007f4087015fa0 RCX: 00007f4086d9ce59 [ 1843.517619][T26601] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1843.517626][T26601] RBP: 00007f4087d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.517632][T26601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.517639][T26601] R13: 00007f4087016038 R14: 00007f4087015fa0 R15: 00007fff8eb56f18 [ 1843.517654][T26601] [ 1843.885590][ T30] audit: type=1400 audit(1780629194.725:10298): avc: denied { name_bind } for pid=26602 comm="syz.0.5854" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1843.923601][T26603] FAULT_INJECTION: forcing a failure. [ 1843.923601][T26603] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.939393][T26603] CPU: 1 UID: 0 PID: 26603 Comm: syz.0.5854 Tainted: G L syzkaller #0 PREEMPT(full) [ 1843.939420][T26603] Tainted: [L]=SOFTLOCKUP [ 1843.939426][T26603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1843.939436][T26603] Call Trace: [ 1843.939442][T26603] [ 1843.939448][T26603] dump_stack_lvl+0x100/0x190 [ 1843.939473][T26603] should_fail_ex.cold+0x5/0xa [ 1843.939504][T26603] should_failslab+0xc2/0x120 [ 1843.939519][T26603] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1843.939538][T26603] ? __alloc_skb+0x140/0x710 [ 1843.939557][T26603] __alloc_skb+0x140/0x710 [ 1843.939572][T26603] ? __alloc_skb+0x5b7/0x710 [ 1843.939588][T26603] ? __pfx___alloc_skb+0x10/0x10 [ 1843.939604][T26603] ? __kfree_rcu_sheaf+0x19a/0x710 [ 1843.939619][T26603] tcp_v6_send_response+0x2de/0x2470 [ 1843.939643][T26603] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 1843.939668][T26603] tcp_v6_send_reset+0xb13/0x17d0 [ 1843.939688][T26603] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 1843.939701][T26603] ? register_lock_class+0x40/0x560 [ 1843.939720][T26603] ? __lock_acquire+0x4a5/0x2630 [ 1843.939739][T26603] tcp_v6_do_rcv+0xe97/0x1ff0 [ 1843.939753][T26603] ? __local_bh_enable_ip+0x9e/0x120 [ 1843.939771][T26603] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1843.939785][T26603] __release_sock+0x151/0x440 [ 1843.939807][T26603] __tcp_close+0x5a0/0x1110 [ 1843.939818][T26603] ? __local_bh_enable_ip+0x9e/0x120 [ 1843.939837][T26603] tcp_close+0x28/0x110 [ 1843.939847][T26603] inet_release+0xed/0x200 [ 1843.939865][T26603] inet6_release+0x4f/0x70 [ 1843.939877][T26603] __sock_release+0xb3/0x260 [ 1843.939895][T26603] ? __pfx_sock_close+0x10/0x10 [ 1843.939905][T26603] sock_close+0x1c/0x30 [ 1843.939915][T26603] __fput+0x3ff/0xb50 [ 1843.939935][T26603] fput_close_sync+0x118/0x250 [ 1843.939953][T26603] ? __pfx_fput_close_sync+0x10/0x10 [ 1843.939974][T26603] __x64_sys_close+0x8b/0x120 [ 1843.939992][T26603] do_syscall_64+0x115/0x870 [ 1843.940009][T26603] ? clear_bhb_loop+0x40/0x90 [ 1843.940023][T26603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.940035][T26603] RIP: 0033:0x7f438af9ce59 [ 1843.940045][T26603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.940056][T26603] RSP: 002b:00007f438be87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1843.940068][T26603] RAX: ffffffffffffffda RBX: 00007f438b215fa0 RCX: 00007f438af9ce59 [ 1843.940075][T26603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1843.940082][T26603] RBP: 00007f438be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.940088][T26603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.940095][T26603] R13: 00007f438b216038 R14: 00007f438b215fa0 R15: 00007fff8cdaa7a8 [ 1843.940110][T26603] [ 1844.202928][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1844.238591][ T5746] usb 3-1: USB disconnect, device number 117 [ 1844.253521][T26605] ieee802154 phy0 wpan0: encryption failed: -22 [ 1844.264144][T18400] dvb-usb: error while querying for an remote control event. [ 1844.332025][ T30] audit: type=1400 audit(1780629195.157:10299): avc: denied { prog_run } for pid=26606 comm="syz.0.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1844.423260][ T5746] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1844.570105][ T30] audit: type=1400 audit(1780629195.281:10300): avc: denied { map } for pid=26610 comm="syz.3.5856" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1844.594356][ T30] audit: type=1400 audit(1780629195.281:10301): avc: denied { execute } for pid=26610 comm="syz.3.5856" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1844.638777][T26618] lo speed is unknown, defaulting to 1000 [ 1844.645847][T26618] lo speed is unknown, defaulting to 1000 [ 1844.771829][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1844.785541][ T5746] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1844.795029][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1844.864174][ T5746] usb 3-1: Product: syz [ 1844.878416][ T5746] usb 3-1: Manufacturer: syz [ 1844.890549][ T5746] usb 3-1: SerialNumber: syz [ 1844.916316][T26622] netlink: 'syz.0.5860': attribute type 4 has an invalid length. [ 1844.927131][ T5746] usb 3-1: config 0 descriptor?? [ 1844.948620][ T5746] usb 3-1: can't set config #0, error -71 [ 1844.957716][T26622] netlink: 'syz.0.5860': attribute type 3 has an invalid length. [ 1844.985454][ T5746] usb 3-1: USB disconnect, device number 118 [ 1844.995942][T26622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5860'. [ 1845.203167][T26636] befs: (nullb0): invalid magic header [ 1845.452063][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1845.457996][ T5746] dvb-usb: error while querying for an remote control event. [ 1845.996208][T26639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5864'. [ 1846.589585][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1846.649792][T18400] dvb-usb: error while querying for an remote control event. [ 1846.921879][T26657] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5868'. [ 1847.058186][T26661] FAULT_INJECTION: forcing a failure. [ 1847.058186][T26661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.071368][T26661] CPU: 1 UID: 0 PID: 26661 Comm: syz.0.5869 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.071397][T26661] Tainted: [L]=SOFTLOCKUP [ 1847.071403][T26661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.071420][T26661] Call Trace: [ 1847.071428][T26661] [ 1847.071435][T26661] dump_stack_lvl+0x100/0x190 [ 1847.071463][T26661] should_fail_ex.cold+0x5/0xa [ 1847.071489][T26661] _copy_from_user+0x2e/0xd0 [ 1847.071513][T26661] io_uring_setup+0xc0/0x160 [ 1847.071543][T26661] ? __pfx_io_uring_setup+0x10/0x10 [ 1847.071566][T26661] ? find_held_lock+0x2b/0x80 [ 1847.071583][T26661] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1847.071603][T26661] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1847.071639][T26661] ? ksys_write+0x1ac/0x250 [ 1847.071661][T26661] ? __pfx_ksys_write+0x10/0x10 [ 1847.071686][T26661] __x64_sys_io_uring_setup+0xc2/0x170 [ 1847.071713][T26661] do_syscall_64+0x115/0x870 [ 1847.071737][T26661] ? clear_bhb_loop+0x40/0x90 [ 1847.071759][T26661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.071778][T26661] RIP: 0033:0x7f438af9ce59 [ 1847.071794][T26661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.071813][T26661] RSP: 002b:00007f438be65ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1847.071831][T26661] RAX: ffffffffffffffda RBX: 00002000000002c8 RCX: 00007f438af9ce59 [ 1847.071844][T26661] RDX: 0000200000000348 RSI: 00002000000002c8 RDI: 0000000000000e50 [ 1847.071855][T26661] RBP: 00002000000002c0 R08: 0000200000001540 R09: 0000000000000000 [ 1847.071866][T26661] R10: 0000200000000350 R11: 0000000000000206 R12: 0000200000000348 [ 1847.071878][T26661] R13: 0000200000000350 R14: 00007f438be65fd8 R15: 0000000000000000 [ 1847.071902][T26661] [ 1847.834021][T10224] dvb-usb: bulk message failed: -22 (7/0) [ 1847.839807][T10224] dvb-usb: error while querying for an remote control event. [ 1848.364374][T26675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1848.981810][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1849.007771][T18400] dvb-usb: error while querying for an remote control event. [ 1849.668766][ T30] audit: type=1400 audit(1780629200.161:10302): avc: denied { connect } for pid=26685 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1849.819200][ T30] audit: type=1400 audit(1780629200.235:10303): avc: denied { read } for pid=26683 comm="syz.4.5876" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1850.037800][ T30] audit: type=1400 audit(1780629200.235:10304): avc: denied { open } for pid=26683 comm="syz.4.5876" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1850.150302][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1850.267176][ T30] audit: type=1400 audit(1780629200.356:10305): avc: denied { read } for pid=26683 comm="syz.4.5876" path="socket:[109447]" dev="sockfs" ino=109447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1850.597734][T26684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1850.604017][T26684] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1850.618391][T26684] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1850.734587][ T30] audit: type=1400 audit(1780629200.375:10306): avc: denied { create } for pid=26655 comm="syz.1.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1850.813188][ T5746] dvb-usb: error while querying for an remote control event. [ 1850.985684][ T30] audit: type=1400 audit(1780629200.384:10307): avc: denied { setopt } for pid=26655 comm="syz.1.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1851.024385][ T30] audit: type=1400 audit(1780629200.607:10308): avc: denied { setattr } for pid=26685 comm="syz.3.5877" name="NETLINK" dev="sockfs" ino=109987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1851.125707][T26719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.173450][T26719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.221606][T26719] FAULT_INJECTION: forcing a failure. [ 1851.221606][T26719] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.287168][T26719] CPU: 0 UID: 0 PID: 26719 Comm: syz.3.5881 Tainted: G L syzkaller #0 PREEMPT(full) [ 1851.287198][T26719] Tainted: [L]=SOFTLOCKUP [ 1851.287204][T26719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1851.287213][T26719] Call Trace: [ 1851.287219][T26719] [ 1851.287226][T26719] dump_stack_lvl+0x100/0x190 [ 1851.287252][T26719] should_fail_ex.cold+0x5/0xa [ 1851.287276][T26719] should_failslab+0xc2/0x120 [ 1851.287294][T26719] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1851.287322][T26719] ? vm_area_dup+0x27/0x8e0 [ 1851.287344][T26719] ? __pfx___might_resched+0x10/0x10 [ 1851.287373][T26719] vm_area_dup+0x27/0x8e0 [ 1851.287396][T26719] __split_vma+0x18c/0xda0 [ 1851.287419][T26719] ? __lock_acquire+0x4a5/0x2630 [ 1851.287440][T26719] ? __pfx_mlock_pte_range+0x10/0x10 [ 1851.287467][T26719] ? __pfx___split_vma+0x10/0x10 [ 1851.287497][T26719] ? walk_pgd_range+0x1133/0x1dd0 [ 1851.287532][T26719] vma_modify+0x12ad/0x25c0 [ 1851.287566][T26719] ? __pfx_walk_pgd_range+0x10/0x10 [ 1851.287594][T26719] ? __pfx_vma_modify+0x10/0x10 [ 1851.287619][T26719] ? folios_put_refs+0x716/0xa90 [ 1851.287650][T26719] ? __walk_page_range+0x142/0x850 [ 1851.287688][T26719] vma_modify_flags+0x257/0x3d0 [ 1851.287716][T26719] ? __pfx_vma_modify_flags+0x10/0x10 [ 1851.287754][T26719] ? mlock_drain_local+0x254/0x4e0 [ 1851.287786][T26719] mlock_fixup+0x496/0xb50 [ 1851.287814][T26719] ? __pfx_mlock_fixup+0x10/0x10 [ 1851.287853][T26719] apply_vma_lock_flags+0x256/0x370 [ 1851.287882][T26719] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1851.287914][T26719] ? __pfx___might_resched+0x10/0x10 [ 1851.287943][T26719] ? __pfx_down_write_killable+0x10/0x10 [ 1851.287970][T26719] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1851.287991][T26719] ? kernel_write+0x673/0x6c0 [ 1851.288011][T26719] do_mlock+0x261/0x7f0 [ 1851.288036][T26719] ? __fget_files+0x21f/0x3d0 [ 1851.288058][T26719] ? __pfx_do_mlock+0x10/0x10 [ 1851.288084][T26719] ? fput+0x79/0x100 [ 1851.288106][T26719] ? ksys_write+0x1ac/0x250 [ 1851.288124][T26719] ? __pfx_ksys_write+0x10/0x10 [ 1851.288147][T26719] __x64_sys_mlock+0x59/0x80 [ 1851.288173][T26719] do_syscall_64+0x115/0x870 [ 1851.288193][T26719] ? clear_bhb_loop+0x40/0x90 [ 1851.288215][T26719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.288232][T26719] RIP: 0033:0x7f567119ce59 [ 1851.288247][T26719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.288263][T26719] RSP: 002b:00007f5671fa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1851.288280][T26719] RAX: ffffffffffffffda RBX: 00007f5671416090 RCX: 00007f567119ce59 [ 1851.288290][T26719] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 1851.288300][T26719] RBP: 00007f5671fa0090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.288310][T26719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.288320][T26719] R13: 00007f5671416128 R14: 00007f5671416090 R15: 00007ffe95dd32b8 [ 1851.288345][T26719] [ 1851.706779][T26727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1851.959344][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1851.968373][ T5746] dvb-usb: error while querying for an remote control event. [ 1852.024137][T26737] FAULT_INJECTION: forcing a failure. [ 1852.024137][T26737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.056949][T26737] CPU: 0 UID: 0 PID: 26737 Comm: syz.1.5890 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.056979][T26737] Tainted: [L]=SOFTLOCKUP [ 1852.056986][T26737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1852.056997][T26737] Call Trace: [ 1852.057003][T26737] [ 1852.057010][T26737] dump_stack_lvl+0x100/0x190 [ 1852.057039][T26737] should_fail_ex.cold+0x5/0xa [ 1852.057064][T26737] _copy_from_user+0x2e/0xd0 [ 1852.057086][T26737] copy_msghdr_from_user+0x9f/0x4f0 [ 1852.057109][T26737] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1852.057144][T26737] ___sys_sendmsg+0x106/0x1e0 [ 1852.057167][T26737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1852.057217][T26737] __sys_sendmsg+0x170/0x220 [ 1852.057245][T26737] ? __pfx___sys_sendmsg+0x10/0x10 [ 1852.057282][T26737] ? rcu_is_watching+0x12/0xc0 [ 1852.057311][T26737] do_syscall_64+0x115/0x870 [ 1852.057333][T26737] ? clear_bhb_loop+0x40/0x90 [ 1852.057353][T26737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.057384][T26737] RIP: 0033:0x7f4086d9ce59 [ 1852.057400][T26737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.057417][T26737] RSP: 002b:00007f4087d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1852.057435][T26737] RAX: ffffffffffffffda RBX: 00007f4087015fa0 RCX: 00007f4086d9ce59 [ 1852.057447][T26737] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1852.057457][T26737] RBP: 00007f4087d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.057468][T26737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.057478][T26737] R13: 00007f4087016038 R14: 00007f4087015fa0 R15: 00007fff8eb56f18 [ 1852.057502][T26737] [ 1852.241974][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1852.264071][T26740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5891'. [ 1852.431542][ T30] audit: type=1400 audit(1780629202.733:10309): avc: denied { create } for pid=26744 comm="syz.0.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1852.512151][T26750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.521069][T26750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.880307][T26755] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.917159][T26757] FAULT_INJECTION: forcing a failure. [ 1852.917159][T26757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.930462][T26757] CPU: 1 UID: 0 PID: 26757 Comm: syz.1.5896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.930481][T26757] Tainted: [L]=SOFTLOCKUP [ 1852.930485][T26757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1852.930492][T26757] Call Trace: [ 1852.930496][T26757] [ 1852.930501][T26757] dump_stack_lvl+0x100/0x190 [ 1852.930519][T26757] should_fail_ex.cold+0x5/0xa [ 1852.930535][T26757] _copy_from_user+0x2e/0xd0 [ 1852.930550][T26757] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 1852.930572][T26757] snd_rawmidi_write+0x2dc/0xc60 [ 1852.930591][T26757] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1852.930606][T26757] ? avc_policy_seqno+0x9/0x20 [ 1852.930619][T26757] ? selinux_file_permission+0x8f/0x6d0 [ 1852.930647][T26757] ? bpf_lsm_file_permission+0x9/0x10 [ 1852.930673][T26757] ? security_file_permission+0x76/0x210 [ 1852.930695][T26757] ? rw_verify_area+0xce/0x6d0 [ 1852.930707][T26757] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1852.930721][T26757] vfs_writev+0x5ea/0xe10 [ 1852.930736][T26757] ? __pfx_vfs_writev+0x10/0x10 [ 1852.930748][T26757] ? find_held_lock+0x2b/0x80 [ 1852.930758][T26757] ? ksys_write+0x190/0x250 [ 1852.930778][T26757] ? __fget_files+0x21f/0x3d0 [ 1852.930795][T26757] ? do_writev+0x28a/0x340 [ 1852.930806][T26757] do_writev+0x28a/0x340 [ 1852.930819][T26757] ? __pfx_do_writev+0x10/0x10 [ 1852.930831][T26757] ? rcu_is_watching+0x12/0xc0 [ 1852.930850][T26757] do_syscall_64+0x115/0x870 [ 1852.930865][T26757] ? clear_bhb_loop+0x40/0x90 [ 1852.930878][T26757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.930890][T26757] RIP: 0033:0x7f4086d9ce59 [ 1852.930900][T26757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.930911][T26757] RSP: 002b:00007f4087d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1852.930922][T26757] RAX: ffffffffffffffda RBX: 00007f4087015fa0 RCX: 00007f4086d9ce59 [ 1852.930929][T26757] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 1852.930936][T26757] RBP: 00007f4087d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.930942][T26757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.930949][T26757] R13: 00007f4087016038 R14: 00007f4087015fa0 R15: 00007fff8eb56f18 [ 1852.930964][T26757] [ 1853.165643][ T5746] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1853.188603][T10224] dvb-usb: bulk message failed: -22 (7/0) [ 1853.197285][T10224] dvb-usb: error while querying for an remote control event. [ 1853.254695][T26763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5898'. [ 1853.363841][ T5746] usb 5-1: config 0 has no interfaces? [ 1853.370112][ T5746] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1853.381846][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.439662][ T5746] usb 5-1: config 0 descriptor?? [ 1853.503610][T26775] FAULT_INJECTION: forcing a failure. [ 1853.503610][T26775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.516993][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.3.5903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.517023][T26775] Tainted: [L]=SOFTLOCKUP [ 1853.517029][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1853.517040][T26775] Call Trace: [ 1853.517046][T26775] [ 1853.517056][T26775] dump_stack_lvl+0x100/0x190 [ 1853.517084][T26775] should_fail_ex.cold+0x5/0xa [ 1853.517109][T26775] _copy_from_user+0x2e/0xd0 [ 1853.517132][T26775] copy_msghdr_from_user+0x9f/0x4f0 [ 1853.517155][T26775] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1853.517190][T26775] ___sys_sendmsg+0x106/0x1e0 [ 1853.517214][T26775] ? __pfx____sys_sendmsg+0x10/0x10 [ 1853.517267][T26775] __sys_sendmsg+0x170/0x220 [ 1853.517295][T26775] ? __pfx___sys_sendmsg+0x10/0x10 [ 1853.517333][T26775] ? rcu_is_watching+0x12/0xc0 [ 1853.517363][T26775] do_syscall_64+0x115/0x870 [ 1853.517386][T26775] ? clear_bhb_loop+0x40/0x90 [ 1853.517408][T26775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.517427][T26775] RIP: 0033:0x7f567119ce59 [ 1853.517443][T26775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.517461][T26775] RSP: 002b:00007f5671fc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1853.517480][T26775] RAX: ffffffffffffffda RBX: 00007f5671415fa0 RCX: 00007f567119ce59 [ 1853.517492][T26775] RDX: 0000000000040094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1853.517502][T26775] RBP: 00007f5671fc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.517513][T26775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.517524][T26775] R13: 00007f5671416038 R14: 00007f5671415fa0 R15: 00007ffe95dd32b8 [ 1853.517561][T26775] [ 1853.730015][ T5746] usb 5-1: string descriptor 0 read error: -71 [ 1853.737554][ T5746] usb 5-1: USB disconnect, device number 127 [ 1853.876293][T18400] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1854.178499][ T5817] kernel write not supported for file /uhid (pid: 5817 comm: kworker/1:7) [ 1854.194200][T18400] usb 2-1: no configurations [ 1854.199063][T18400] usb 2-1: can't read configurations, error -22 [ 1854.377824][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1854.383676][ T5746] dvb-usb: error while querying for an remote control event. [ 1854.453001][T18400] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1854.463693][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1854.517840][ T30] audit: type=1400 audit(1780629204.659:10310): avc: denied { read } for pid=26784 comm="syz.0.5906" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1854.660357][T18400] usb 2-1: no configurations [ 1854.807906][T18400] usb 2-1: can't read configurations, error -22 [ 1854.825348][T18400] usb usb2-port1: attempt power cycle [ 1854.832600][ T30] audit: type=1400 audit(1780629204.659:10311): avc: denied { open } for pid=26784 comm="syz.0.5906" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1855.026198][T26788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.220399][T18400] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1855.256758][T26799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1855.275807][T18400] usb 2-1: no configurations [ 1855.282762][T18400] usb 2-1: can't read configurations, error -22 [ 1855.292640][T26800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.396762][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1855.447457][T18400] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1855.477536][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1855.480800][T18400] usb 2-1: no configurations [ 1855.493347][T18400] usb 2-1: can't read configurations, error -22 [ 1855.500058][T18400] usb usb2-port1: unable to enumerate USB device [ 1855.506632][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1855.513731][ T5746] dvb-usb: error while querying for an remote control event. [ 1855.524149][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1855.753457][ T30] audit: type=1400 audit(1780629205.816:10312): avc: denied { mounton } for pid=26807 comm="syz.4.5913" path="/560/file1/file0" dev="autofs" ino=110345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1855.820702][T26811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.843340][T26811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.858570][ T30] audit: type=1400 audit(1780629205.917:10313): avc: denied { unmount } for pid=16795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1856.325898][ T30] audit: type=1400 audit(1780629206.343:10314): avc: denied { ioctl } for pid=26812 comm="syz.2.5916" path="socket:[110722]" dev="sockfs" ino=110722 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1856.615711][T18400] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1856.632758][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1856.649388][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1856.654287][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1856.663883][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1856.667797][ T5746] dvb-usb: error while querying for an remote control event. [ 1856.671849][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1856.696517][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1856.725584][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 1856.840388][T18400] usb 3-1: config 0 has no interfaces? [ 1856.852755][T18400] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1856.889367][T18400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.914472][T18400] usb 3-1: config 0 descriptor?? [ 1856.960529][ T5817] usb 4-1: USB disconnect, device number 113 [ 1857.036103][T15281] hid_parser_main: 27 callbacks suppressed [ 1857.036122][T15281] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1857.056037][T15281] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1857.155619][T18400] usb 3-1: string descriptor 0 read error: -71 [ 1857.183834][T18400] usb 3-1: USB disconnect, device number 119 [ 1857.201386][T26819] lo speed is unknown, defaulting to 1000 [ 1857.208509][T26819] lo speed is unknown, defaulting to 1000 [ 1857.218582][ T5817] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1857.231156][ T5817] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1857.286909][T26838] fido_id[26838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0044/report_descriptor': No such file or directory [ 1857.410057][T26843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1857.638882][T26819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.646091][T26819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.653222][T26819] bridge_slave_0: entered allmulticast mode [ 1857.660198][T26819] bridge_slave_0: entered promiscuous mode [ 1857.670163][T26819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.677516][T26819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.684711][T26819] bridge_slave_1: entered allmulticast mode [ 1857.692085][T26819] bridge_slave_1: entered promiscuous mode [ 1857.722337][T26819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.734948][T26819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.766400][T26819] team0: Port device team_slave_0 added [ 1857.774441][T26819] team0: Port device team_slave_1 added [ 1857.819930][T26819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.826899][T26819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.860243][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1857.862023][T26856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26856 comm=syz.1.5925 [ 1857.866304][ T5746] dvb-usb: error while querying for an remote control event. [ 1857.884703][T26856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5925'. [ 1857.889912][T26819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.915541][T26856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1857.923206][T26819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.930774][T26819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1857.958132][T26819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.460186][T26819] hsr_slave_0: entered promiscuous mode [ 1858.467134][T26819] hsr_slave_1: entered promiscuous mode [ 1858.561814][T26819] debugfs: 'hsr0' already exists in 'hsr' [ 1858.570930][T26819] Cannot create hsr debugfs directory [ 1858.899064][ T50] Bluetooth: hci1: command tx timeout [ 1858.999568][T26819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.050309][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1859.056095][ T5746] dvb-usb: error while querying for an remote control event. [ 1859.201879][T26819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.329342][T26819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.372432][T26880] FAULT_INJECTION: forcing a failure. [ 1859.372432][T26880] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.395473][T26880] CPU: 1 UID: 0 PID: 26880 Comm: syz.0.5932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.395492][T26880] Tainted: [L]=SOFTLOCKUP [ 1859.395496][T26880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1859.395504][T26880] Call Trace: [ 1859.395508][T26880] [ 1859.395513][T26880] dump_stack_lvl+0x100/0x190 [ 1859.395531][T26880] should_fail_ex.cold+0x5/0xa [ 1859.395547][T26880] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1859.395566][T26880] should_failslab+0xc2/0x120 [ 1859.395579][T26880] __kmalloc_noprof+0xe0/0x850 [ 1859.395597][T26880] ? kfree+0x1dd/0x6c0 [ 1859.395614][T26880] tomoyo_realpath_from_path+0xb6/0x690 [ 1859.395636][T26880] tomoyo_path_number_perm+0x23c/0x580 [ 1859.395651][T26880] ? tomoyo_path_number_perm+0x22e/0x580 [ 1859.395668][T26880] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1859.395702][T26880] ? find_held_lock+0x2b/0x80 [ 1859.395713][T26880] ? __fget_files+0x215/0x3d0 [ 1859.395727][T26880] ? hook_file_ioctl_common+0x149/0x410 [ 1859.395739][T26880] ? __fget_files+0x215/0x3d0 [ 1859.395755][T26880] ? __fget_files+0x21f/0x3d0 [ 1859.395772][T26880] security_file_ioctl+0xd3/0x230 [ 1859.395790][T26880] __x64_sys_ioctl+0xb7/0x210 [ 1859.395803][T26880] do_syscall_64+0x115/0x870 [ 1859.395819][T26880] ? clear_bhb_loop+0x40/0x90 [ 1859.395832][T26880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.395844][T26880] RIP: 0033:0x7f438af9ce59 [ 1859.395854][T26880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.395866][T26880] RSP: 002b:00007f438be87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1859.395877][T26880] RAX: ffffffffffffffda RBX: 00007f438b215fa0 RCX: 00007f438af9ce59 [ 1859.395885][T26880] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 1859.395892][T26880] RBP: 00007f438be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.395898][T26880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.395905][T26880] R13: 00007f438b216038 R14: 00007f438b215fa0 R15: 00007fff8cdaa7a8 [ 1859.395920][T26880] [ 1859.395924][T26880] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1859.443185][ T5746] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1859.632564][T26819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.777242][ T5746] usb 3-1: no configurations [ 1859.783375][ T5746] usb 3-1: can't read configurations, error -22 [ 1859.866150][T26819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1859.876168][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1859.884986][T26819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1859.894377][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1859.927271][ T5746] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1859.950211][T26819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1859.960876][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1859.968533][T26819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1859.980736][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1860.134726][ T5746] usb 3-1: no configurations [ 1860.139912][ T5746] usb 3-1: can't read configurations, error -22 [ 1860.159248][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1860.165745][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.179804][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1860.353063][T18400] dvb-usb: error while querying for an remote control event. [ 1860.365740][ T5746] usb usb3-port1: attempt power cycle [ 1860.439823][T26892] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1860.485900][T26819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1860.514624][T26819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1860.532974][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.540071][T18242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.558663][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.565817][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.763932][ T5746] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1860.840945][ T5746] usb 3-1: no configurations [ 1860.845767][ T5746] usb 3-1: can't read configurations, error -22 [ 1861.001534][T26819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1861.009761][ T5746] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1861.055268][ T5746] usb 3-1: no configurations [ 1861.070292][ T5746] usb 3-1: can't read configurations, error -22 [ 1861.076987][T18400] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1861.090627][T26819] veth0_vlan: entered promiscuous mode [ 1861.099080][ T5746] usb usb3-port1: unable to enumerate USB device [ 1861.118491][T26819] veth1_vlan: entered promiscuous mode [ 1861.129115][ T50] Bluetooth: hci1: command tx timeout [ 1861.229991][T26819] veth0_macvtap: entered promiscuous mode [ 1861.252153][T26819] veth1_macvtap: entered promiscuous mode [ 1861.272803][T18400] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1861.293133][T18400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.307027][T26819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.314414][T18400] usb 2-1: config 0 has no interface number 0 [ 1861.324470][T18400] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 1861.337483][T26819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1861.347427][T18400] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1861.363895][T18400] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1861.377715][ T6591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.386696][T18400] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.397446][T18400] usb 2-1: Product: syz [ 1861.402650][T18400] usb 2-1: Manufacturer: syz [ 1861.404895][ T6591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.410536][T18400] usb 2-1: SerialNumber: syz [ 1861.430927][T18400] usb 2-1: config 0 descriptor?? [ 1861.440568][T26900] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1861.451964][ T6591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.455571][T18400] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1861.471047][T18400] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1861.480291][T26759] dvb-usb: bulk message failed: -22 (7/0) [ 1861.483615][ T6591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.486852][T26759] dvb-usb: error while querying for an remote control event. [ 1861.509244][T18400] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1861.637527][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.663174][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1861.834310][ T6591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.859076][ T30] audit: type=1400 audit(1780629211.350:10315): avc: denied { cmd } for pid=26898 comm="syz.1.5935" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1861.882968][ T6591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.042214][T26907] overlayfs: missing 'lowerdir' [ 1862.487157][T26916] FAULT_INJECTION: forcing a failure. [ 1862.487157][T26916] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.515127][T26916] CPU: 0 UID: 0 PID: 26916 Comm: syz.3.5938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1862.515155][T26916] Tainted: [L]=SOFTLOCKUP [ 1862.515161][T26916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1862.515171][T26916] Call Trace: [ 1862.515176][T26916] [ 1862.515183][T26916] dump_stack_lvl+0x100/0x190 [ 1862.515207][T26916] should_fail_ex.cold+0x5/0xa [ 1862.515231][T26916] should_failslab+0xc2/0x120 [ 1862.515251][T26916] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1862.515276][T26916] ? do_getname+0x35/0x390 [ 1862.515300][T26916] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1862.515328][T26916] do_getname+0x35/0x390 [ 1862.515355][T26916] do_fchownat+0xc6/0x1f0 [ 1862.515379][T26916] ? __pfx_do_fchownat+0x10/0x10 [ 1862.515401][T26916] ? ksys_write+0x1ac/0x250 [ 1862.515419][T26916] ? __pfx_ksys_write+0x10/0x10 [ 1862.515441][T26916] __x64_sys_lchown+0x7e/0xc0 [ 1862.515464][T26916] ? lockdep_hardirqs_on+0x78/0x100 [ 1862.515487][T26916] do_syscall_64+0x115/0x870 [ 1862.515507][T26916] ? clear_bhb_loop+0x40/0x90 [ 1862.515532][T26916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.515549][T26916] RIP: 0033:0x7fbe50f9ce59 [ 1862.515565][T26916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.515581][T26916] RSP: 002b:00007fbe51eb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1862.515598][T26916] RAX: ffffffffffffffda RBX: 00007fbe51215fa0 RCX: 00007fbe50f9ce59 [ 1862.515609][T26916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1862.515620][T26916] RBP: 00007fbe51eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.515630][T26916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.515644][T26916] R13: 00007fbe51216038 R14: 00007fbe51215fa0 R15: 00007ffff27e1558 [ 1862.515665][T26916] [ 1862.712634][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1862.767945][T18400] dvb-usb: error while querying for an remote control event. [ 1863.347532][T26926] evm: overlay not supported [ 1863.381431][ T50] Bluetooth: hci1: command tx timeout [ 1863.548515][T26934] FAULT_INJECTION: forcing a failure. [ 1863.548515][T26934] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.619510][T26934] CPU: 1 UID: 0 PID: 26934 Comm: syz.0.5941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.619542][T26934] Tainted: [L]=SOFTLOCKUP [ 1863.619549][T26934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1863.619559][T26934] Call Trace: [ 1863.619566][T26934] [ 1863.619573][T26934] dump_stack_lvl+0x100/0x190 [ 1863.619604][T26934] should_fail_ex.cold+0x5/0xa [ 1863.619629][T26934] should_failslab+0xc2/0x120 [ 1863.619654][T26934] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1863.619680][T26934] ? do_getname+0x35/0x390 [ 1863.619705][T26934] ? find_held_lock+0x2b/0x80 [ 1863.619720][T26934] ? ksys_write+0x190/0x250 [ 1863.619744][T26934] do_getname+0x35/0x390 [ 1863.619771][T26934] do_sys_openat2+0xc5/0x1e0 [ 1863.619796][T26934] ? __pfx_do_sys_openat2+0x10/0x10 [ 1863.619820][T26934] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1863.619848][T26934] ? __fget_files+0x21f/0x3d0 [ 1863.619874][T26934] __x64_sys_openat+0x12d/0x210 [ 1863.619901][T26934] ? __pfx___x64_sys_openat+0x10/0x10 [ 1863.619925][T26934] ? ksys_write+0x1ac/0x250 [ 1863.619947][T26934] ? rcu_is_watching+0x12/0xc0 [ 1863.619977][T26934] do_syscall_64+0x115/0x870 [ 1863.619999][T26934] ? clear_bhb_loop+0x40/0x90 [ 1863.620021][T26934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.620039][T26934] RIP: 0033:0x7f438af9ce59 [ 1863.620056][T26934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.620073][T26934] RSP: 002b:00007f438be45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1863.620091][T26934] RAX: ffffffffffffffda RBX: 00007f438b216180 RCX: 00007f438af9ce59 [ 1863.620103][T26934] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1863.620114][T26934] RBP: 00007f438be45090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.620124][T26934] R10: 0000000000000045 R11: 0000000000000246 R12: 0000000000000001 [ 1863.620134][T26934] R13: 00007f438b216218 R14: 00007f438b216180 R15: 00007fff8cdaa7a8 [ 1863.620166][T26934] [ 1863.951397][T26943] fuse: Unknown parameter '000000000000000000110x000000000000000e' [ 1864.138861][T26759] usb 2-1: USB disconnect, device number 126 [ 1864.164818][T26759] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1864.204007][T26759] cyberjack 2-1:0.69: device disconnected [ 1864.376027][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1864.382509][ T5746] dvb-usb: error while querying for an remote control event. [ 1864.739837][T26956] FAULT_INJECTION: forcing a failure. [ 1864.739837][T26956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.763386][T26958] comedi comedi1: comedi_config --init_data is deprecated [ 1864.771266][T26956] CPU: 1 UID: 0 PID: 26956 Comm: syz.2.5949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1864.771293][T26956] Tainted: [L]=SOFTLOCKUP [ 1864.771300][T26956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1864.771310][T26956] Call Trace: [ 1864.771317][T26956] [ 1864.771324][T26956] dump_stack_lvl+0x100/0x190 [ 1864.771350][T26956] should_fail_ex.cold+0x5/0xa [ 1864.771374][T26956] strncpy_from_user+0x3b/0x2d0 [ 1864.771395][T26956] ? find_held_lock+0x2b/0x80 [ 1864.771415][T26956] path_getxattrat+0x102/0x430 [ 1864.771443][T26956] ? __pfx_path_getxattrat+0x10/0x10 [ 1864.771466][T26956] ? ksys_write+0x190/0x250 [ 1864.771490][T26956] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1864.771514][T26956] ? kernel_write+0x673/0x6c0 [ 1864.771551][T26956] ? __pfx_ksys_write+0x10/0x10 [ 1864.771571][T26956] ? rcu_is_watching+0x12/0xc0 [ 1864.771598][T26956] do_syscall_64+0x115/0x870 [ 1864.771619][T26956] ? clear_bhb_loop+0x40/0x90 [ 1864.771639][T26956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.771656][T26956] RIP: 0033:0x7f372bd9ce59 [ 1864.771671][T26956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.771686][T26956] RSP: 002b:00007f372cd08028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 1864.771704][T26956] RAX: ffffffffffffffda RBX: 00007f372c016090 RCX: 00007f372bd9ce59 [ 1864.771714][T26956] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000005140 [ 1864.771723][T26956] RBP: 00007f372cd08090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.771732][T26956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.771743][T26956] R13: 00007f372c016128 R14: 00007f372c016090 R15: 00007ffebc5619f8 [ 1864.771767][T26956] [ 1865.546078][T26974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5953'. [ 1865.644793][ T50] Bluetooth: hci1: command tx timeout [ 1865.751354][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1865.757218][T18400] dvb-usb: error while querying for an remote control event. [ 1866.526096][T26991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.543862][T26991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.772412][T27000] netlink: 'syz.3.5959': attribute type 62 has an invalid length. [ 1866.933647][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1867.114342][T18400] dvb-usb: error while querying for an remote control event. [ 1867.221739][T26999] FAULT_INJECTION: forcing a failure. [ 1867.221739][T26999] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.237204][T26999] CPU: 0 UID: 0 PID: 26999 Comm: syz.1.5961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1867.237230][T26999] Tainted: [L]=SOFTLOCKUP [ 1867.237236][T26999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1867.237246][T26999] Call Trace: [ 1867.237253][T26999] [ 1867.237260][T26999] dump_stack_lvl+0x100/0x190 [ 1867.237301][T26999] should_fail_ex.cold+0x5/0xa [ 1867.237326][T26999] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1867.237353][T26999] should_failslab+0xc2/0x120 [ 1867.237372][T26999] __kmalloc_noprof+0xe0/0x850 [ 1867.237395][T26999] ? kfree+0x1dd/0x6c0 [ 1867.237417][T26999] tomoyo_realpath_from_path+0xb6/0x690 [ 1867.237446][T26999] tomoyo_path_number_perm+0x23c/0x580 [ 1867.237466][T26999] ? tomoyo_path_number_perm+0x22e/0x580 [ 1867.237488][T26999] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1867.237536][T26999] ? find_held_lock+0x2b/0x80 [ 1867.237551][T26999] ? __fget_files+0x215/0x3d0 [ 1867.237569][T26999] ? hook_file_ioctl_common+0x149/0x410 [ 1867.237586][T26999] ? __fget_files+0x215/0x3d0 [ 1867.237610][T26999] ? __fget_files+0x21f/0x3d0 [ 1867.237636][T26999] security_file_ioctl+0xd3/0x230 [ 1867.237662][T26999] __x64_sys_ioctl+0xb7/0x210 [ 1867.237683][T26999] do_syscall_64+0x115/0x870 [ 1867.237704][T26999] ? clear_bhb_loop+0x40/0x90 [ 1867.237725][T26999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.237743][T26999] RIP: 0033:0x7f4086d9ce59 [ 1867.237758][T26999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.237775][T26999] RSP: 002b:00007f4087d0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.237795][T26999] RAX: ffffffffffffffda RBX: 00007f4087015fa0 RCX: 00007f4086d9ce59 [ 1867.237806][T26999] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000004 [ 1867.237816][T26999] RBP: 00007f4087d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.237826][T26999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.237836][T26999] R13: 00007f4087016038 R14: 00007f4087015fa0 R15: 00007fff8eb56f18 [ 1867.237860][T26999] [ 1867.237913][T26999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1867.995284][T27019] FAULT_INJECTION: forcing a failure. [ 1867.995284][T27019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1868.008474][T27019] CPU: 0 UID: 0 PID: 27019 Comm: syz.2.5966 Tainted: G L syzkaller #0 PREEMPT(full) [ 1868.008502][T27019] Tainted: [L]=SOFTLOCKUP [ 1868.008509][T27019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1868.008519][T27019] Call Trace: [ 1868.008525][T27019] [ 1868.008533][T27019] dump_stack_lvl+0x100/0x190 [ 1868.008557][T27019] should_fail_ex.cold+0x5/0xa [ 1868.008579][T27019] _copy_from_user+0x2e/0xd0 [ 1868.008603][T27019] core_sys_select+0x2d0/0xbb0 [ 1868.008632][T27019] ? __pfx_core_sys_select+0x10/0x10 [ 1868.008653][T27019] ? find_held_lock+0x2b/0x80 [ 1868.008670][T27019] ? get_pid_task+0xfc/0x250 [ 1868.008718][T27019] ? __pfx_set_user_sigmask+0x10/0x10 [ 1868.008740][T27019] ? kernel_write+0x673/0x6c0 [ 1868.008760][T27019] ? __fget_files+0x215/0x3d0 [ 1868.008788][T27019] do_pselect.constprop.0+0x238/0x270 [ 1868.008814][T27019] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1868.008841][T27019] ? ksys_write+0x1ac/0x250 [ 1868.008865][T27019] __x64_sys_pselect6+0x149/0x1c0 [ 1868.008891][T27019] do_syscall_64+0x115/0x870 [ 1868.008914][T27019] ? clear_bhb_loop+0x40/0x90 [ 1868.008937][T27019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1868.008954][T27019] RIP: 0033:0x7f372bd9ce59 [ 1868.008971][T27019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.008987][T27019] RSP: 002b:00007f372cd08028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1868.009005][T27019] RAX: ffffffffffffffda RBX: 00007f372c016090 RCX: 00007f372bd9ce59 [ 1868.009017][T27019] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1868.009028][T27019] RBP: 00007f372cd08090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.009039][T27019] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.009050][T27019] R13: 00007f372c016128 R14: 00007f372c016090 R15: 00007ffebc5619f8 [ 1868.009081][T27019] [ 1868.422396][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1868.458800][ T5746] dvb-usb: error while querying for an remote control event. [ 1868.765640][T27023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1869.638873][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1869.670671][T18400] dvb-usb: error while querying for an remote control event. [ 1870.845510][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1871.053879][ T5746] dvb-usb: error while querying for an remote control event. [ 1872.087851][T27061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1872.168538][ T24] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1872.311239][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1872.335954][ T5746] dvb-usb: error while querying for an remote control event. [ 1872.376530][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.429149][ T24] usb 2-1: config 0 has no interfaces? [ 1872.450644][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1872.486611][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.517027][ T24] usb 2-1: config 0 descriptor?? [ 1872.553205][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1872.572706][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1872.584558][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1872.689423][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1872.725291][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1872.980510][T18400] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1873.015939][ T24] usb 2-1: USB disconnect, device number 127 [ 1873.153304][T18400] usb 3-1: Using ep0 maxpacket: 16 [ 1873.191141][T18400] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1873.214224][T18400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.246626][T18400] usb 3-1: Product: syz [ 1873.275156][T18400] usb 3-1: Manufacturer: syz [ 1873.287142][T18400] usb 3-1: SerialNumber: syz [ 1873.339958][T18400] usb 3-1: config 0 descriptor?? [ 1873.399100][T18400] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1873.519072][T26759] dvb-usb: bulk message failed: -22 (7/0) [ 1873.543947][T26759] dvb-usb: error while querying for an remote control event. [ 1873.999771][T18400] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1874.079314][ T30] audit: type=1400 audit(1780629222.734:10316): avc: denied { write } for pid=27078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.265762][ T30] audit: type=1400 audit(1780629222.910:10317): avc: denied { write } for pid=27102 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.351795][T27050] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5975'. [ 1874.362790][T27050] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5975'. [ 1874.391441][T18400] usb 3-1: USB disconnect, device number 124 [ 1874.397425][T27067] lo speed is unknown, defaulting to 1000 [ 1874.404584][T27067] lo speed is unknown, defaulting to 1000 [ 1874.421521][T18400] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1874.468199][T18400] visor 3-1:0.0: device disconnected [ 1874.711110][T27111] ieee802154 phy0 wpan0: encryption failed: -22 [ 1874.732437][T18400] dvb-usb: bulk message failed: -22 (7/0) [ 1874.757761][T18400] dvb-usb: error while querying for an remote control event. [ 1874.832573][ T30] audit: type=1400 audit(1780629223.436:10318): avc: denied { write } for pid=27115 comm="syz.1.5987" name="mouse0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1875.116788][ T30] audit: type=1400 audit(1780629223.695:10319): avc: denied { write } for pid=27104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1875.143329][T27074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1875.153445][T27074] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1875.165874][ T5619] Bluetooth: hci5: command tx timeout [ 1875.242685][T18400] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1875.320073][ T30] audit: type=1400 audit(1780629223.889:10320): avc: denied { write } for pid=27129 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1875.358766][T27074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1875.388851][T27074] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1875.427414][T18400] usb 2-1: Using ep0 maxpacket: 16 [ 1875.434273][T18400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.454271][T18400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.464312][T18400] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1875.478534][T18400] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1875.488407][T18400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.501693][T18400] usb 2-1: config 0 descriptor?? [ 1875.692963][T27074] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1875.706046][T27074] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1875.880092][T27146] Option ' /msr' to dns_resolver key: bad/missing value [ 1875.946035][ T5746] dvb-usb: bulk message failed: -22 (7/0) [ 1875.946495][T22641] syz_tun (unregistering): left allmulticast mode [ 1875.978011][T27154] qnx6: unable to read the first superblock [ 1876.027085][ T30] audit: type=1400 audit(1780629224.516:10321): avc: denied { write } for pid=27136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1876.453951][ T5746] dvb-usb: error while querying for an remote control event. [ 1876.935341][T27067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.963991][T27067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.994864][T27067] bridge_slave_0: entered allmulticast mode [ 1877.027759][T27067] bridge_slave_0: entered promiscuous mode [ 1877.049821][ T30] audit: type=1400 audit(1780629225.476:10322): avc: denied { write } for pid=27160 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1877.079172][T27067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.107085][T27067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.132691][T27067] bridge_slave_1: entered allmulticast mode [ 1877.152971][T27146] usb 1-1: USB disconnect, device number 20 [ 1877.199222][T27067] bridge_slave_1: entered promiscuous mode [ 1877.257385][ T24] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1877.867593][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.925001][ T24] usb 3-1: config 0 has no interfaces? [ 1877.986403][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1878.028250][T18400] usbhid 2-1:0.0: can't add hid device: -71 [ 1878.074855][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.132720][ T5737] dvb-usb: bulk message failed: -22 (7/0) [ 1878.201996][ T5737] dvb-usb: error while querying for an remote control event. [ 1878.209859][T18400] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1878.216370][ T24] usb 3-1: config 0 descriptor?? [ 1878.219617][T18400] usb 2-1: USB disconnect, device number 2 [ 1878.246865][T27067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1878.312416][T27067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1878.473346][T27067] team0: Port device team_slave_0 added [ 1878.488264][T27067] team0: Port device team_slave_1 added [ 1878.503670][T18400] usb 3-1: USB disconnect, device number 125 [ 1878.547113][T27067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1878.554060][T27067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.581886][T27067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1878.596261][T27067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1878.604155][T27067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1878.632685][T27067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1878.677220][ T30] audit: type=1400 audit(1780629226.990:10323): avc: denied { write } for pid=27167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1878.735455][T27067] hsr_slave_0: entered promiscuous mode [ 1878.746285][T27067] hsr_slave_1: entered promiscuous mode [ 1878.753006][T27067] debugfs: 'hsr0' already exists in 'hsr' [ 1878.760409][T27067] Cannot create hsr debugfs directory [ 1878.806794][ T30] audit: type=1400 audit(1780629227.110:10324): avc: denied { write } for pid=27179 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.154959][T27067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1879.166767][T27067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1879.178195][T27067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1879.189938][T27067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1879.208231][T27067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1879.226591][ T30] audit: type=1400 audit(1780629227.489:10325): avc: denied { write } for pid=27181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.235711][T27067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1879.262801][T27067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1879.277802][T27067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1879.374351][T27067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1879.398997][T27067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1879.410007][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.417191][ T7807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1879.434802][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1879.441949][ T7807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1879.628342][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1879.628362][ T30] audit: type=1400 audit(1780629227.858:10327): avc: denied { write } for pid=27200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.697776][ T30] audit: type=1400 audit(1780629227.923:10328): avc: denied { write } for pid=27215 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1879.830394][T27067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1879.959855][T27067] veth0_vlan: entered promiscuous mode [ 1879.969216][T27067] veth1_vlan: entered promiscuous mode [ 1879.988787][T27067] veth0_macvtap: entered promiscuous mode [ 1879.997744][T27067] veth1_macvtap: entered promiscuous mode [ 1880.011056][T27067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1880.024881][T27067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1880.036562][ T1046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.047698][ T1046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.056884][ T1046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.069040][ T1046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1880.194996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.207691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.231891][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.239846][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.651195][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1926.657497][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1993.191671][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1993.198082][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2053.501806][ T31] INFO: task syz.3.5990:27146 blocked for more than 143 seconds. [ 2053.509596][ T31] Tainted: G L syzkaller #0 [ 2053.516216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2053.525106][ T31] task:syz.3.5990 state:D stack:24664 pid:27146 tgid:27140 ppid:26819 task_flags:0x480140 flags:0x00080002 [ 2053.537112][ T31] Call Trace: [ 2053.540379][ T31] [ 2053.543296][ T31] __schedule+0x1295/0x67a0 [ 2053.548025][ T31] ? __pfx___schedule+0x10/0x10 [ 2053.552893][ T31] ? find_held_lock+0x2b/0x80 [ 2053.557597][ T31] ? schedule+0x2bf/0x390 [ 2053.561925][ T31] schedule+0xdd/0x390 [ 2053.565992][ T31] schedule_timeout+0x1b2/0x280 [ 2053.570980][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2053.576354][ T31] ? __wait_for_common+0x2da/0x4c0 [ 2053.581499][ T31] ? rcu_is_watching+0x12/0xc0 [ 2053.586299][ T31] __wait_for_common+0x2e7/0x4c0 [ 2053.591462][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2053.596848][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2053.602355][ T31] ? __pfx_device_del+0x10/0x10 [ 2053.607203][ T31] ? kobject_put+0xb9/0x640 [ 2053.611736][ T31] i2c_del_adapter+0x62d/0x820 [ 2053.616518][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2053.621839][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 2053.627117][ T31] ? rcu_is_watching+0x12/0xc0 [ 2053.631944][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 2053.636627][ T31] dvb_usb_device_exit+0x313/0x520 [ 2053.641732][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 2053.647507][ T31] ? find_held_lock+0x2b/0x80 [ 2053.652185][ T31] ? __pm_runtime_resume+0xc3/0x170 [ 2053.657424][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2053.663224][ T31] ? usb_disable_interface+0x211/0x4c0 [ 2053.668816][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2053.674633][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 2053.679955][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2053.685723][ T31] device_remove+0x12a/0x180 [ 2053.690380][ T31] device_release_driver_internal+0x44e/0x620 [ 2053.696469][ T31] bus_remove_device+0x2bc/0x560 [ 2053.701443][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 2053.706885][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 2053.712564][ T31] device_del+0x376/0x9b0 [ 2053.716892][ T31] ? __pfx_device_del+0x10/0x10 [ 2053.721763][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 2053.727513][ T31] usb_disable_device+0x367/0x810 [ 2053.732614][ T31] usb_disconnect+0x2e2/0x9a0 [ 2053.737296][ T31] ? rcu_is_watching+0x12/0xc0 [ 2053.742116][ T31] hub_quiesce+0x16d/0x320 [ 2053.746552][ T31] hub_disconnect+0xd5/0x510 [ 2053.751165][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 2053.756360][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2053.762865][ T31] device_remove+0x12a/0x180 [ 2053.767482][ T31] device_release_driver_internal+0x44e/0x620 [ 2053.773614][ T31] ? __pfx___might_fault+0x10/0x10 [ 2053.778741][ T31] usb_driver_release_interface+0x10e/0x190 [ 2053.784760][ T31] proc_ioctl+0x5cd/0x6f0 [ 2053.789094][ T31] usbdev_ioctl+0x1017/0x3aa0 [ 2053.793756][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2053.798840][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2053.804750][ T31] ? do_vfs_ioctl+0x226/0x13e0 [ 2053.809529][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2053.814552][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2053.821446][ T31] ? __fget_files+0x215/0x3d0 [ 2053.826125][ T31] ? hook_file_ioctl_common+0x149/0x410 [ 2053.831710][ T31] ? selinux_file_ioctl+0x13b/0x290 [ 2053.836934][ T31] ? selinux_file_ioctl+0xb6/0x290 [ 2053.842102][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2053.847126][ T31] __x64_sys_ioctl+0x18e/0x210 [ 2053.851970][ T31] do_syscall_64+0x115/0x870 [ 2053.856582][ T31] ? clear_bhb_loop+0x40/0x90 [ 2053.861357][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.867317][ T31] RIP: 0033:0x7fbe50f9ce59 [ 2053.871797][ T31] RSP: 002b:00007fbe51e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2053.880212][ T31] RAX: ffffffffffffffda RBX: 00007fbe51216090 RCX: 00007fbe50f9ce59 [ 2053.888309][ T31] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000005 [ 2053.896321][ T31] RBP: 00007fbe51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2053.904395][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2053.912377][ T31] R13: 00007fbe51216128 R14: 00007fbe51216090 R15: 00007ffff27e1558 [ 2053.920383][ T31] [ 2053.923399][ T31] INFO: task syz.3.5990:27155 blocked for more than 143 seconds. [ 2053.931198][ T31] Tainted: G L syzkaller #0 [ 2053.937799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2053.946533][ T31] task:syz.3.5990 state:D stack:26008 pid:27155 tgid:27140 ppid:26819 task_flags:0x400040 flags:0x00080002 [ 2053.958513][ T31] Call Trace: [ 2053.961832][ T31] [ 2053.964770][ T31] __schedule+0x1295/0x67a0 [ 2053.969345][ T31] ? __pfx___schedule+0x10/0x10 [ 2053.974193][ T31] ? find_held_lock+0x2b/0x80 [ 2053.978896][ T31] ? schedule+0x2bf/0x390 [ 2053.983238][ T31] schedule+0xdd/0x390 [ 2053.987286][ T31] schedule_preempt_disabled+0x13/0x30 [ 2053.992799][ T31] __mutex_lock+0xced/0x1b10 [ 2053.997387][ T31] ? usbdev_ioctl+0x1a7/0x3aa0 [ 2054.002302][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2054.007343][ T31] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 2054.013281][ T31] ? find_held_lock+0x2b/0x80 [ 2054.018070][ T31] ? usbdev_ioctl+0x1a7/0x3aa0 [ 2054.023454][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 2054.029113][ T31] usbdev_ioctl+0x1a7/0x3aa0 [ 2054.033735][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2054.038787][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2054.044696][ T31] ? do_vfs_ioctl+0x226/0x13e0 [ 2054.049453][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2054.054527][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2054.061386][ T31] ? __fget_files+0x215/0x3d0 [ 2054.066092][ T31] ? hook_file_ioctl_common+0x149/0x410 [ 2054.071651][ T31] ? selinux_file_ioctl+0x13b/0x290 [ 2054.076873][ T31] ? selinux_file_ioctl+0xb6/0x290 [ 2054.081982][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2054.087054][ T31] __x64_sys_ioctl+0x18e/0x210 [ 2054.091829][ T31] do_syscall_64+0x115/0x870 [ 2054.096397][ T31] ? clear_bhb_loop+0x40/0x90 [ 2054.101096][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2054.106995][ T31] RIP: 0033:0x7fbe50f9ce59 [ 2054.111632][ T31] RSP: 002b:00007fbe51e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2054.120153][ T31] RAX: ffffffffffffffda RBX: 00007fbe51216180 RCX: 00007fbe50f9ce59 [ 2054.128125][ T31] RDX: 0000000000000000 RSI: 0000000000005522 RDI: 0000000000000005 [ 2054.136108][ T31] RBP: 00007fbe51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2054.144212][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2054.152233][ T31] R13: 00007fbe51216218 R14: 00007fbe51216180 R15: 00007ffff27e1558 [ 2054.160226][ T31] [ 2054.163313][ T31] [ 2054.163313][ T31] Showing all locks held in the system: [ 2054.171017][ T31] 1 lock held by khungtaskd/31: [ 2054.175890][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2054.185807][ T31] 2 locks held by getty/5376: [ 2054.190454][ T31] #0: ffff888034dc00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2054.200300][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 2054.210507][ T31] 4 locks held by syz.3.5990/27146: [ 2054.215727][ T31] #0: ffff88802b5d61d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3aa0 [ 2054.224899][ T31] #1: ffff88802b5d51a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 2054.235459][ T31] #2: ffff888056e0f1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 2054.244793][ T31] #3: ffff88807d8a21a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 2054.255357][ T31] 1 lock held by syz.3.5990/27155: [ 2054.260563][ T31] #0: ffff88802b5d61d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3aa0 [ 2054.269739][ T31] [ 2054.272083][ T31] ============================================= [ 2054.272083][ T31] [ 2054.280476][ T31] NMI backtrace for cpu 1 [ 2054.280489][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2054.280504][ T31] Tainted: [L]=SOFTLOCKUP [ 2054.280508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2054.280515][ T31] Call Trace: [ 2054.280519][ T31] [ 2054.280524][ T31] dump_stack_lvl+0x100/0x190 [ 2054.280540][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2054.280555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2054.280570][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2054.280591][ T31] sys_info+0x141/0x190 [ 2054.280607][ T31] watchdog+0xcb1/0x1030 [ 2054.280623][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2054.280638][ T31] ? __pfx_watchdog+0x10/0x10 [ 2054.280651][ T31] ? __kthread_parkme+0x18c/0x230 [ 2054.280671][ T31] ? kthread+0x13a/0x450 [ 2054.280682][ T31] ? __pfx_watchdog+0x10/0x10 [ 2054.280694][ T31] kthread+0x370/0x450 [ 2054.280711][ T31] ? __pfx_kthread+0x10/0x10 [ 2054.280725][ T31] ret_from_fork+0x72b/0xd50 [ 2054.280739][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2054.280754][ T31] ? __switch_to+0x800/0x1100 [ 2054.280771][ T31] ? __pfx_kthread+0x10/0x10 [ 2054.280785][ T31] ret_from_fork_asm+0x1a/0x30 [ 2054.280807][ T31] [ 2054.280818][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2054.411567][ C0] NMI backtrace for cpu 0 [ 2054.411583][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2054.411601][ C0] Tainted: [L]=SOFTLOCKUP [ 2054.411606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2054.411621][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2054.411642][ C0] Code: b6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 11 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2054.411656][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2054.411668][ C0] RAX: 00000000067768d3 RBX: ffffffff8e4955c0 RCX: ffffffff8b898225 [ 2054.411677][ C0] RDX: 0000000000000000 RSI: ffffffff8df0f8f1 RDI: ffffffff8c1c4680 [ 2054.411685][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 2054.411694][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 2054.411702][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d71150 [ 2054.411711][ C0] FS: 0000000000000000(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 2054.411725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2054.411743][ C0] CR2: 0000560084dec168 CR3: 000000000e596000 CR4: 00000000003526f0 [ 2054.411752][ C0] Call Trace: [ 2054.411756][ C0] [ 2054.411761][ C0] default_idle+0x9/0x10 [ 2054.411779][ C0] default_idle_call+0x6c/0xb0 [ 2054.411796][ C0] do_idle+0x464/0x590 [ 2054.411824][ C0] ? __pfx_do_idle+0x10/0x10 [ 2054.411842][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 2054.411881][ C0] cpu_startup_entry+0x4f/0x60 [ 2054.411893][ C0] rest_init+0x251/0x260 [ 2054.411905][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2054.411920][ C0] start_kernel+0x484/0x490 [ 2054.411940][ C0] x86_64_start_reservations+0x24/0x30 [ 2054.411953][ C0] x86_64_start_kernel+0x12b/0x130 [ 2054.411967][ C0] common_startup_64+0x13e/0x148 [ 2054.411990][ C0] [ 2054.603688][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2054.610533][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2054.621184][ T31] Tainted: [L]=SOFTLOCKUP [ 2054.625478][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2054.635507][ T31] Call Trace: [ 2054.638767][ T31] [ 2054.641682][ T31] dump_stack_lvl+0x100/0x190 [ 2054.646346][ T31] vpanic+0x552/0x970 [ 2054.650309][ T31] ? __pfx_vpanic+0x10/0x10 [ 2054.654794][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2054.660940][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2054.667087][ T31] panic+0xd1/0xe0 [ 2054.670789][ T31] ? __pfx_panic+0x10/0x10 [ 2054.675187][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2054.681328][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2054.687469][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2054.693610][ T31] ? watchdog.cold+0x1ec/0x234 [ 2054.698361][ T31] ? watchdog+0xcc1/0x1030 [ 2054.702760][ T31] watchdog.cold+0x1fd/0x234 [ 2054.707336][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2054.713125][ T31] ? __pfx_watchdog+0x10/0x10 [ 2054.717784][ T31] ? __kthread_parkme+0x18c/0x230 [ 2054.722799][ T31] ? kthread+0x13a/0x450 [ 2054.727023][ T31] ? __pfx_watchdog+0x10/0x10 [ 2054.731680][ T31] kthread+0x370/0x450 [ 2054.735731][ T31] ? __pfx_kthread+0x10/0x10 [ 2054.740306][ T31] ret_from_fork+0x72b/0xd50 [ 2054.744881][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2054.749976][ T31] ? __switch_to+0x800/0x1100 [ 2054.754640][ T31] ? __pfx_kthread+0x10/0x10 [ 2054.759214][ T31] ret_from_fork_asm+0x1a/0x30 [ 2054.763973][ T31] [ 2054.767172][ T31] Kernel Offset: disabled [ 2054.771479][ T31] Rebooting in 86400 seconds..