last executing test programs: 21.871211911s ago: executing program 3 (id=577): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "be"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) prlimit64(r1, 0x5, &(0x7f00000004c0)={0x3, 0x7}, &(0x7f0000000500)) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x3c, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x0, @uvalue=0x80000001}, {0x3, @uvalue=0xa}, {0x2, @uvalue=0x1}]}, 0x3}, {0x2d, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @svalue=0x1ff}, {0x1, @svalue=0x2}]}, 0xffd}, {0x17, '\x00', @st={0x4, [{0x3, @uvalue=0x4}, {0x2, @uvalue=0x7}, {0x3, @svalue=0x8}, {0x1, @svalue=0x8000}]}, 0x100005}, {0x39, '\x00', @data=0x1002, 0x45}]}) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x83c1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0x500, 0x2d0, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x104, 0x5}, {0x6, 0x10001}}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1, 0x0}, &(0x7f0000000040)=0xc) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000380)) ioctl(r6, 0x3b8f, &(0x7f00000000c0)="2800000006") sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x2c, 0x7, r5, 0x3b}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="4785bee11d8645c819941d87b62b6f4d6323683b63a0c4d07cfe1e089892b80048e86632d2779e975a4c9bb4eab564ddfad214ed894de5dabe56e892a4ec887a9beed96f725a3e615038e27589ba4e6f2418f8c900579b9e2a60b3867600c5da443b413a76c7e074abfbd6cc97071f6d248511bdcf1a6b3981b13a0f27df182d183c2dc566e186643a945e3470f7c997f9ba601f5006", 0x96}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="1e1fc03da2952a187614d23ca05fd52cb97be152a41cdaaa3a105cbc7054195450169eb492fabcac58b03b882bd4ff6718dfdbd111dafa1b7d3f1e979d8053a06d7211502a160e163d9771306ed1a80abb77dc64d600023b9daf5d50990a1255dd03054e949dc90390054734651bcf", 0x6f}], 0x3, 0x0, 0x0, 0x1}, 0x8004) 21.245046723s ago: executing program 3 (id=580): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) write(r2, &(0x7f0000000000)='7', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x44080) r4 = gettid() timer_create(0x2, &(0x7f0000000380)={0x0, 0x1f, 0x4, @tid=r4}, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000b18000/0x4000)=nil, 0x4000, 0x6000002) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa4856b3b506d58f5, 0x8031, r1, 0xe4387000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) r6 = io_uring_setup(0x4b26, &(0x7f0000000000)={0x0, 0xd884, 0x8, 0x3, 0x2ec}) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x0, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, r8, 0x0) 19.590618541s ago: executing program 3 (id=583): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000480), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) close(0x3) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 18.835816059s ago: executing program 3 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x9e) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="200a0200000093f7a68907d4f86271c568253d6fe678a90d88ad297ad46c26748c65306083dfcae7fb80544eadf7b832f69afb5087a825ef3af03d525514f4c08ab48017a652fd9bec3d8387b61516e95d2a85da9d0e6f18da7998e1fd77"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, &(0x7f0000000200)) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000140)="0b0002000200000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/greybus/devices/1-svc/watchdog_action\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='r', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 17.696536339s ago: executing program 4 (id=589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xde) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x21) write(r0, &(0x7f0000000000)='27', 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth0\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000000280)={0x0, 0xcf33, 0x2000, 0x0, 0x38e, 0x0, r0}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8778, 0xd62, 0x2, 0x275, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe172, 0x1, 0x3, 0x17a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf346, 0x2, 0x1, 0x25f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2899, 0x2000, 0x3, 0x201, 0x0, r0}}], 0x4, 0x0, &(0x7f0000002980)) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000100)={0x2, 0xaf}, &(0x7f0000000180)=0x8) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r10}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r10, 0x0, 0x100000000000000}, 0x38) read$dsp(r5, &(0x7f0000000280)=""/189, 0xbd) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x7, 0xfe00}, &(0x7f0000000200)=0x8) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r11, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x20008013) openat$sysfs(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/kernel/hardlockup_count', 0x800a0, 0x15f) 16.013609463s ago: executing program 4 (id=592): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "0530de3f673c92fbe38ca14625352e96df6d394504ca684b5d0dec6032f890bfd4bf52c319369fec55ea7d3a8a8a77"}}) 12.337791623s ago: executing program 1 (id=605): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x4}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b55", 0x24}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) dup3(r3, r3, 0x80000) 11.322030765s ago: executing program 3 (id=607): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000480), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) close(0x3) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) 11.223823663s ago: executing program 2 (id=608): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00090582", @ANYRESDEC], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000000680)=@l2tp={0x2, 0x0, @rand_addr=0x64810100}, 0x80, 0x0}, 0xc040) syz_usb_connect(0x4, 0x8b0, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0x1a, 0xb0, 0x4d, 0xff, 0x19d2, 0x1089, 0x2d4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89e, 0x3, 0xd, 0x40, 0x40, 0xb, "", [{{0x9, 0x4, 0xbc, 0x2, 0xf, 0xff, 0xff, 0xff, 0x1, [@generic={0x43, 0x21, "0a46662a57da0f9dc3a4f4de25157225ada153474b0c919c7af6e1772909f34bacd2e351a130c5d55ebc93cd544446694c77ceea8f9513ab6771264da4284869c1"}, @uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x54, 0x1, 0x1, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x1002}]}], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x6, 0x4, 0x5, [@generic={0x6a, 0x21, "b5c2fb8a0fc7fd7ce529ed38eb827dd622115a6682bd8ec946bf87f26307c44539858b54d1bd04bc922eed3c77a72efddefb3e477f3c8fe11e1a03f96629686fd463f7cfab2ecf87f5b7d231aea9251de477968250646ae6fea43abcfcbd69126030f0348f789508"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xfc, 0xd, 0x7, [@generic={0xdc, 0xe, "a2256230c90e5765fa668576e48bb415308895b2e34c447062f4fbeb7d4d65ad3339c4b757a4ad9c9cf42c7227977628692fa03898f61c99724dcd76cbd73e33bb4c6e24c408ca442d5aea35ab93f491945d089c00cfb1bed065456a6f441238752db60be068acdf1508eb1dd0ab1885e1b9dec356778c79c4fd9a75c7b1148835d7afd243bf045b927381887c00a1b8ecda367f94a301d39b11ca53d5e08e03db99361e42f8ad4cef2fccdd561ab65913d0ec4ab6b7805b0457d671d48f5153f8f9da082cff44b0ed7777bfa03147eaf8dfbffc8c6c7ca5d8c6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x42, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x42, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x83, 0x3, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x80, 0x5, 0x6d}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xb, 0x38, 0x5}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x3, 0x5, 0x63, [@generic={0x35, 0x13, "d8897182d2bf8a41221972ad2316c74fe996f546c5ef1951e27b1b1a3eac372d35068097f274c9e97b4a3e7213fde9ebaa7434"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x0, 0x7, 0xb, [@generic={0x7f, 0xe, "7c3e0f31dcb81f8508b49d42e012e5b9d9e10a615095db9cebde1e317ceb5b16e1d007b464ed972151bb9530b7208135c81bb6fa446c3c0320c1323b1622f81b0ea252072ad35374cac5d2386ec96dd38727f16c8a8b3b6c41d65f43ed18a1c302304d67488772926294ca6eef549a766603a5cc38c2ba3d0a6f9400bb"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xff, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x43, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xd4, 0x4, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x80, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x7, 0x2, 0x5, [@generic={0x31, 0x7, "55ded1ae32460fc1900441d0693df91747efac2bb023b4963a16c7dd27c5205c2f7e64db99bab031986d29cfebe088"}, @generic={0x4d, 0x5, "59c7d4fdb73156fab4f068b62c3d35bf72abf4de7be242c6488ae4f87f47c0b2e53062c784d064fe2d5e03da36f66668e8b64d23c3ed22348fadd6b84494ea339ab3b49622bb3bf3658687"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x2, 0x6}}]}}, {{0x9, 0x4, 0xca, 0x0, 0x9, 0x61, 0x38, 0xa8, 0x5d, [@hid_hid={0x9, 0x21, 0x3f1b, 0x2, 0x1, {0x22, 0x1b2}}, @generic={0x8a, 0xb, "b0beff05305312c32a9b7f0747bbeef9b836219eab6feca5895979d05d8f028220dbc94674273f70a8be660ca708e32e222d1cfb85a14cc47734d88a068440aa213c30c896d6f84d086b2996cf20631e1994a01747b45ddbd559d02731d9c016f8c06375254855f49426c218a8c7cbd73a56ba186ad9531d3519e56d5311431f05c72610e2759c33"}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x80, 0x7, [@generic={0x4e, 0x4, "a026181b1124073e40d28efc1252a974a0dfd0566c0b2f39544ddd40ed609918e93b5ababf08b411850cb775213e1b8e110782a37512f58075898d1af26537b673ff74cc44efe1fd714510c0"}, @generic={0x93, 0x24, "42af03187ad9ea38591dceb712bf043e76fd9bacc96663185931de78bdddc624b1b0641b7905731775c45fe071bbdbd35550829bd81adfb0a57069343e52838dcfbb7ba9fafc10dc21e466c8bfd0f0bdfd32e833a5293fbb429e3012c53d9777264692ebed25edccbfb0709a3a99a8b963231a4c085ec3de531f36d9880d007da9f76848674565de818bf7b71b865752e0"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xbc, 0x12, 0x0, [@generic={0xce, 0x2a, "75d9f905f5722989b102ba60a0de1590c818ff0db4368fa3887845929830fc0c9fef6b7b965670b5a37f41f6c5086deb8b2c60194363abc1a9a03beffa08e9a867f7a4781f2d810426e5dc1fdf2d0afd5c337bde635732816382b26f9a657b68264fc0ed2634170c332c1751dfd145f35d2295699025b1111025d0273973f5a810f226ea40c976ff1ec35506a14324e0d2cac02843ff3761f055dae57a2fc2a17cfd381987b7ed6a57c1a578cdb33650ae48e53d5bd9cb76253881ce2a3c1cc9952d698e7348cf6b9dba2cdd"}, @generic={0x2a, 0x0, "f2edeab409dd125915fe3c5b31798f105e613ed999bc0174db1a46d1d4b7fd462ec65baed29e021e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x7}, @generic={0x99, 0x31, "ff01ba490c4c41d8757f643a7f1f4796e60df567c9170d76a77b0d80907b1b92c871bcdb151223fbcc6e36e54aae299357cf5a7cfeb08477088b6ccf2b419720e2fd9b9cabf51f3b70db6146faddaa384a4fbb29586174bb0653a20af31e3fa37647db4427ae3f3998f1ef98305189d453ff962ed4e0d96690d6e33a022e37907fbf0ceca57f6e389f17a9017febd0469c353a635594d8"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x34, 0x0, [@generic={0x5b, 0x4, "edeafb912bc27922d5cf2d192fac7844038b7e94db5a3186a057dd48fafd8f321bec487b914f73b8b7794fca39a9dde620ad25e4540b1dd4c05372781eaf237859a9432711e99a4e8b94c936ddb023570a2d36e7b5d14a2727"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xff, 0xe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xc4, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x10, 0x9, 0x5, [@generic={0x86, 0x21, "2fa75221e794876005cf3597f70373b38719349b88350a967cf483f3e002660bad52657fae21634002090c1f511739310d8fad5446cbd69f4fb4ec215d82809c5f9c0591ce952ce491ccbb78e8eb9dffa954548e2df643e2cc8ef5b7bfa1cad041e3f496196066136b59697c91820e37fbb62c8f9523e5a211630eb3213a6bff998be6c5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7f, 0x66, 0x7, [@generic={0xa5, 0x23, "d2da720520a1de582e993cb8ea1c727147e42152709c800d80773e9015d717e501795badf30e993e3cf47af6e7fc608931a95a008e4ce86f0d23156721b4bdef45ac7f14ac1d26e056e6c107dce08829549198aeceda9c725c5870e9a7fface0d042522fdddf7ba8578f88aca16f12c3975649414fd501a5b9461253d9335a95f3a517cf5fe27087bbd6a1b9da51e223b1dc418d89041c73c96eadd5e511b78bbe8421"}]}}, {{0x9, 0x5, 0xfb595c62d38f7bad, 0x2, 0x10, 0x9, 0xfc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x5}]}}]}}, {{0x9, 0x4, 0xd2, 0x8, 0x0, 0x6c, 0x21, 0xee, 0xaf}}]}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x300, 0x0, 0x9, 0x5, 0x40, 0x6}, 0x7b, &(0x7f0000001880)={0x5, 0xf, 0x7b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xd, 0x5}, @generic={0x5a, 0x10, 0x2, "c40fb574e49ddde40f75eb07e05f08e3e889927928f5cadbbeaf0f0731672de6ee5928e39b6d49edb827e29b829e318833c7e1446a3f2e89ce98b00ea5c9a83ff5f5910f0ef3acda0981189ce7574bea837c639ee5b046"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1d, 0x0, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x4, 0x0, 0x1, 0x7}]}, 0x2, [{0xf0, &(0x7f0000001900)=@string={0xf0, 0x3, "968c508061f171149a0a7c1cbc215f80132adafa879620d3cfffce88fd63404cc304a24b7a38114010f02e5f89815e08804f1584eb819b9a261db948ad2cef173cdad78d9481f29e65a42e86b7d764bb0e4c777aafda24ee422aa6de454251c793b77343a6ea248c27e6aa4a09aa2e5883b84a1642916084e2057a01b8c02dcfba02d1f52d90d0aa12dc0760facf3ce1df51ee5f6001699fd8769b54e3516a4029c463a902156f18499ef82a6cb88937c1a6494de1bd2335ddf1f299409c07db97cd010cf57a6052a431208e2a5dc6c381536b9d18347d5dc0368996db245673dd4bd24e825c783a75b250fb79f1"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x6, 0x32, {0x32, 0x21, "4aeaa114358bd4b495157db963ba6a8c170dfc7124811c3915552e539d93154b36419a101b4f876d15f946e6cd8d7483"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000140)={0x20, 0x1, 0x6b, "9fc976c8c4000f1255d7d2fd96785a7499961bb601aed25fe5af2f55bbebbd7f1a749c562e64de0f57fe1bf1e7e997d909e7e23278523e9c34ffb92522c3f9a35faf5cafb6b51be6a7034aa9c3e13df73f24db920aa5e2735d9f91f143b75373013dfec92c3dea87bbc241"}, &(0x7f00000001c0)={0xa1, 0x1, 0x400, "c4c567a6f92c11d30c33366241712725e1d316c7afc34427563cac2d7f90181a3c6b5a649c63e66033ddf41e509f3cbdcdf9ce255457cd86baf31260a12f6aa4bb0b52e2c83f861268a7d933a35fdb79e8676e2ea44f458d60caa829f65d81e77eb04b1372490751437f5c5e4df212d48c8e134b186bb8e2ddc6216d02549bf6bca7a2d27ee3b25775025929b3fbf0b7d579c8961b68fadb7d625d3cdae24e2e78ee7876ab2d4f4bbe63d185ccd598fd2d6217d1405ff1617743e842c757c52f7166fc08f63a097120d5bb1ff6a4c01edecb52381b5b3165d8b5b96186aceda7054765840c4c230e56ba8b89d7d5566934d29b9bcc86084094aeae3f2845b26c3dd34e9abb078916c3d207808043a4c38dc708b05b80db3c2ced58fb59dcf6a7b1b81c9fb229c90a0a89b9d1030fc92d600c5ed30a90f0a50904ff70dd5ac72284ce68563b34b5baa4b8c752cc8c2f8056cdce1a331f376de4f836989990278337b080934be35f58fe1c5b8355c49986eefb2bd22cfedca13ba6766a2d912555efd44b92a798756c61b803e7ccbdfc3da3ddbd7b34f9ea21867e226ec746f550de2c3040bd24db44c51e7793c8af97e343f5a7db3116ba6658bad5f507e80fae535bb6b56455aa28a3125404924fc4db29b84dca956abe3a95d016b31fe5810a0e3b2d8d353d3493c46d97e2bb75db6746cebe2e490d5c35632d8c891f5030ca02caee519d7b58672543de04fb13023286b26fa5c81fe5996dc1eef9686adb7dcc75a93a28aebe77712ba67d1e1dd599076015cc566744b0b10ed36295e44cc16d85e7f0deaf726303a996f1b395ae3b23c1cc3282791f3c7667fa94aaa882f346be74c84644f243a01b5b780ac0b608574d783057900bb695aa4adb136edfd6f24960c736135e0f7e30c5c7096a4ef24fbefaa0e9751f30607418a5163661b748f5c086bbbb0b53c860b1c6cea3bfddb84c5bd48f02b23b0f6e486df0499615948e081a243867fee5b51922e819bc9b3c66a7ce211d3888eec47f57592d458182cb8bcbae48c2343deffacaaf109d5784d6d149f62f18b1f522a972c409a35355bf456a5c99591a9834b3595fb84e5e2c199c2fb08fddd0ab0e86a55bc043749983bb65dfd291066e29e0e49d2988b9491eadc5965a14972c2a8d2d290bc4dbe16de522187a769b6a3c97ab37eb4e81940920b476e6ef0712b1e9bf366601ec0e725b88390c8fe20f7de87ad84e6b10bb4f6ed04821811f31f817b454006867c173ed2a59219a163f4e7c4deadd9b3fe2511c6a5826b868147da0a222d18cd3c1b71536d59e2fc3e928c7e53246b7b8851710f3a5f228f04cfff84a56f526f78e39e0a7b8ee5ab0586bf29d328ad08511c061351800d9a3a45c1f47b40e6fac6f87f84f6696899940f2ac4b14556be95f3f47bfc4996948b25f5dc210a4607b"}, &(0x7f0000000600)={0x21, 0x0, 0x3, "6ed174"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000009c0)={0x2c, &(0x7f0000000680)={0x0, 0x11, 0xaf, {0xaf, 0x5, "e3cf01845bb780e2001218f4209b6c2ce74d50d09e0c27d785dd00ca1f3496f477abe202cbedd804c40c48a305730baaa09b2e2f74afd9c9f7c5b7fc68b5504c825bbe2fcf4e154af0b6e4d33999889f7d1824a71fa5fda4fd7750e4b3cc37856589977e0699f24ad77635d12a996fc7d64044929ed14b2413b01132379e08c4c942fa19ca8abb12aa6f5437d10cb0948de998aff4dba62ae3bc718db53afe76f9df56389835c90ba778020b0c"}}, &(0x7f0000000840)={0x0, 0x3, 0x94, @string={0x94, 0x3, "3837c4a5ef5aa246060b1160c3ce71889848771058d36a2429b10201be6a6928e1c485c7e90e5998c382760db3de1fc5027ad0ed32a864262b65cf8219c8df8aa591200d844d18daa6bbb77182765118bfafe715e566ee9013d4fe09a30861b1f01ebde3a64461576b463aa21d38b7b2fb9892d24916d1508c106776b86dc5c0a1121b7de3fbae36d0524658c9caef0af8c7"}}, &(0x7f0000000900)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x4, 0x2, "067adcad", "08393c88"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x1, 0x6, 0x3, 0x1000, 0x5}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x20, 0x16, 0xf0, "b9b766c1225ccd037473bff13230c35ad1dae43ed7f031e3a7514314ebdbe0be00df24d6730c47fa3ed6c275809ffd80f449b012d53eca093a2f92cbee126bf5a3c03932a1af7c218cc61052a9864294ecd165ef3fb50c318b3d8242d78630c0898aba428636442143ab792b01b11787a8572499f0ac6cc1b123015d8077779402db85a97493603171e2fa6e83542e7386f94d50b01f572c402ea2c665658a0fc73a64b638379293d6ed7fc539ea3667068d82f936ea8a334183db1a59abb3960360fd9a0384ac34ae03608d02162debde6aa38a2920a8a5b4a1b01a78db28cd6ee102334e72bb50b2d105b46da4ad88"}, &(0x7f0000000b00)={0x0, 0xa, 0x1}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x365}, &(0x7f00000000c0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000c80)={0x40, 0xb, 0x2, '#i'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "1807"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x1c, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x1}}) 11.220439929s ago: executing program 4 (id=609): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x80000001, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x80, 0x8000, 0x1}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080)="a697af58b769d79b55c119b7a95e13fce451d19964ba7d11d13fd1f10279b062d2c89f0bb2da67bd4c010043fe29305a5236b55374a62707f4635acb74066536", &(0x7f00000004c0)=@udp6}, 0x20) (async) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x8000, 0x2, 0x0, 0x20}, {0xfffffffffffffffc, 0x9, 0x0, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x8}, {0x200, 0x6, 0x0, 0x2}, 0x28, 0x0, 0xfffffffffffffffc, 0x1, 0x3, 0x2}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x0, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) setns(0xc9, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) r4 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async, rerun: 64) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 11.172291744s ago: executing program 1 (id=610): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x1, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7ffffffe}, 0x24008000) 10.509705468s ago: executing program 3 (id=611): socket(0x10, 0x803, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010001ffffff40460801100001010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, 0x0, 0x4000100) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x100000, 0x2000, 0x1}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000062c00"], 0xb4}}, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r9, @ANYBLOB="0a0006000802110000010000060066008e880000220033"], 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8010) 7.452364702s ago: executing program 4 (id=613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) 7.451406226s ago: executing program 2 (id=614): r0 = timerfd_create(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0xc) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x44000, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000340)={0xd4, 0x0, 0x3}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.307174728s ago: executing program 1 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, 0x0) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000080)=0x3) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYRES16=r3, @ANYRES8=r2, @ANYRES16], 0x3c}}, 0x4061) 7.264552022s ago: executing program 4 (id=616): socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$MSR(0x0, 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040300) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0xffffffff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 6.385380168s ago: executing program 4 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x9e) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="200a0200000093f7a68907d4f86271c568253d6fe678a90d88ad297ad46c26748c65306083dfcae7fb80544eadf7b832f69afb5087a825ef3af03d525514f4c08ab48017a652fd9bec3d8387b61516e95d2a85da9d0e6f18da7998e1fd77"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x2, &(0x7f0000000200)='\x00\x00') syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000100)="0a000100010000000001") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000140)="0b0002000200000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/greybus/devices/1-svc/watchdog_action\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='r', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.956152003s ago: executing program 2 (id=620): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0x547, 0x47314356, 0x34324241, 0x3, [{0x9, 0x2}, {0x5, 0xfffffffe}, {0x0, 0x2003}, {0x292, 0x9}, {0x7, 0x4}, {0x2ee, 0x201}, {0xffffff03, 0x7ffe}, {0x1, 0x4}], 0x2, 0xa, 0x8, 0x2, 0x6}}) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x8001, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000400)) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r7, 0x0, 0x0, 0x80000002, 0x7, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000042e800002000000000c4d86ddcc3ec9a2500625c60", @ANYRES32=0x0, @ANYBLOB="0000000010030000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015"], 0xc8}}, 0x0) 5.953560242s ago: executing program 1 (id=621): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(r1, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r3, 0x0, 0xffe) socket(0x11, 0x800, 0x0) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, 0x0, 0xffffffffffffffcb}, 0x80}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000700)=""/255, 0xff}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/6, 0x6}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000ac0)=""/204, 0xcc}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/31, 0x1f}], 0xc}, 0x1}, {{&(0x7f0000000240)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000980)=""/231, 0xe7}], 0x4}, 0x4}], 0x4, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x150) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc\x00', 0x6002, 0x1) write(r5, &(0x7f0000000180)='0 2000000000 0\n', 0xf) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000001c0), 0xffffff67) listen(r6, 0xfff) 3.294935269s ago: executing program 2 (id=624): clock_getres(0x6, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0xbb42) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="177d42d51b17a0d2", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0xe, 0x4f}, {0x6, 0xdb}, 0xc, 0x6, 0x7}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xbb, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500200000020392ad23f4000010203010902a9000301070008080b00010100200f09040000000101200009240109000a3f000308240902ff0702d007240c0706004008240a0a040209020b240604030b000300090008240a03fbff03030c2403010000090204", @ANYRES8=r0], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 3.06448055s ago: executing program 1 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x785, 0x20000) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) splice(r1, &(0x7f0000000240)=0xfffffffffffffff7, r1, &(0x7f0000000400)=0x7, 0x7, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f00000002c0)='./file1/file4/file7\x00', &(0x7f0000000440)='pvfs2\x00', 0x2881000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080402c8000932132754431d0f862316648b620c252446f571c08ed83da32c0753a5864a8bcf6db8b07956d16131969ab46d1e38a3a36c1fd7c144dfb3049df2626d8bd49cd74d4609c393b6ca228d36decf490be023dfe6a91ec654a6141bdb46cd1fa2255f9e532445da02827af36f84563fa8"], 0x7) mkdirat(0xffffffffffffffff, 0x0, 0x1c1) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') epoll_create1(0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x7ff, 0x12) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.339138764s ago: executing program 1 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xde) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x21) write(r0, &(0x7f0000000000)='27', 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'veth0\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r0, r3, &(0x7f0000000280)={0x0, 0xcf33, 0x2000, 0x0, 0x38e, 0x0, r0}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8778, 0xd62, 0x2, 0x275, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe172, 0x1, 0x3, 0x17a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf346, 0x2, 0x1, 0x25f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2899, 0x2000, 0x3, 0x201, 0x0, r0}}], 0x4, &(0x7f0000002900)={0x2e, 0x8, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xeb1b}, 0x0, r2, '\x00', {0x1, 0xd5b, 0x0, 0x0}}, &(0x7f0000002980)) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000100)={0x2, 0xaf}, &(0x7f0000000180)=0x8) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r12}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r12, 0x0, 0x100000000000000}, 0x38) read$dsp(r7, &(0x7f0000000280)=""/189, 0xbd) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0x7, 0xfe00}, &(0x7f0000000200)=0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r13, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x20008013) openat$sysfs(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/kernel/hardlockup_count', 0x800a0, 0x15f) 1.764001165s ago: executing program 2 (id=631): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r1, r0) unshare(0x20000400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0xfe3d, 0x10c6b) lseek(r0, 0x9, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) 1.657138726s ago: executing program 0 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xffffffffffffff4e}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x2) socket$inet6(0xa, 0x2, 0x25) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.593409334s ago: executing program 2 (id=633): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0xfffffff1, 0x7fffffff, 0x4000000, 0x3, 0xf95a, 0x3ff}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x0, 0x5}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x3ffc000}]}}]}, 0x150}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ef) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) writev(r5, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x400, 0x4, 0x3}, &(0x7f0000000280)=0x14) write(r4, &(0x7f0000000000)='7', 0x1) keyctl$get_persistent(0x16, 0x0, r6) close_range(r0, r0, 0x0) 368.538037ms ago: executing program 0 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$FIOCLEX(r3, 0x5451) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x10000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, 0x400087, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) unshare(0x38020000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473001a00028005db010003000000", 0x38) 194.093497ms ago: executing program 0 (id=635): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2000c005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='2', 0x49) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) personality(0x400000) 88.309044ms ago: executing program 0 (id=636): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 77.937314ms ago: executing program 0 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0) read(r4, &(0x7f0000001180)=""/4096, 0x1000) syz_fuse_handle_req(r4, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0xc0002003}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="93", &(0x7f0000000080)=""/137}, 0x20) 0s ago: executing program 0 (id=638): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) kernel console output (not intermixed with test programs): 1.23 [ 165.646111][ T5698] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 165.646151][ T5698] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.646171][ T5698] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.646191][ T5698] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.646210][ T5698] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.646250][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.675423][ T5783] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.700105][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 165.702028][ T5783] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 165.706075][ T5783] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.706100][ T5783] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.706119][ T5783] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 165.706140][ T5783] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.706164][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.712269][ T5783] usb 2-1: config 0 descriptor?? [ 165.879316][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.896542][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.541833][ T31] audit: type=1400 audit(1791490666.904:418): avc: denied { create } for pid=6998 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.970465][ T5783] hid (null): unknown global tag 0xd [ 167.044332][ T5698] usb 4-1: GET_CAPABILITIES returned 9f [ 167.052181][ T5698] usbtmc 4-1:16.0: can't read capabilities [ 167.086351][ T5891] rpcbind: server 127.0.0.1 not responding, timed out [ 167.139469][ T31] audit: type=1400 audit(1791490667.504:419): avc: denied { open } for pid=7017 comm="syz.2.292" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 167.252664][ T7013] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input11 [ 167.257790][ T31] audit: type=1400 audit(1791490667.504:420): avc: denied { ioctl } for pid=7017 comm="syz.2.292" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 167.715043][ T7029] FAULT_INJECTION: forcing a failure. [ 167.715043][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 167.715075][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT(full) [ 167.715095][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 167.715106][ T7029] Call Trace: [ 167.715112][ T7029] [ 167.715120][ T7029] dump_stack_lvl+0x100/0x190 [ 167.715151][ T7029] should_fail_ex.cold+0x5/0xa [ 167.715178][ T7029] should_failslab+0xc2/0x120 [ 167.715208][ T7029] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 167.715231][ T7029] ? sock_alloc_inode+0x26/0x2c0 [ 167.715252][ T7029] ? __pfx_sock_alloc_inode+0x10/0x10 [ 167.715271][ T7029] sock_alloc_inode+0x26/0x2c0 [ 167.715290][ T7029] ? __pfx_sock_alloc_inode+0x10/0x10 [ 167.715311][ T7029] alloc_inode+0x68/0x250 [ 167.715332][ T7029] sock_alloc+0x44/0x280 [ 167.715357][ T7029] ? security_socket_create+0x7f/0x250 [ 167.715381][ T7029] __sock_create+0xc2/0x860 [ 167.715406][ T7029] __sys_socket+0x14d/0x260 [ 167.715420][ T7029] ? __pfx___sys_socket+0x10/0x10 [ 167.715437][ T7029] __x64_sys_socket+0x72/0xb0 [ 167.715449][ T7029] ? lockdep_hardirqs_on+0x7d/0x110 [ 167.715461][ T7029] do_syscall_64+0x123/0x790 [ 167.715475][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.715487][ T7029] RIP: 0033:0x7f86be19e199 [ 167.715497][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.715507][ T7029] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 167.715518][ T7029] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 167.715527][ T7029] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 167.715534][ T7029] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 167.715541][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.715548][ T7029] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 167.715563][ T7029] [ 167.716344][ T7029] socket: no more sockets [ 168.167236][ T31] audit: type=1400 audit(1791490668.534:421): avc: denied { mounton } for pid=7036 comm="syz.2.310" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 168.167614][ T7037] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 168.393785][ T5783] usb 4-1: USB disconnect, device number 12 [ 168.464743][ T5698] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 168.486230][ T30] usb 2-1: USB disconnect, device number 12 [ 168.811926][ T5891] rpcbind: server 127.0.0.1 not responding, timed out [ 168.993437][ T5698] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.995047][ T5698] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.995072][ T5698] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.005386][ T5891] rpcbind: server 127.0.0.1 not responding, timed out [ 169.039029][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.039056][ T5698] usb 3-1: Product: syz [ 169.039070][ T5698] usb 3-1: Manufacturer: syz [ 169.039084][ T5698] usb 3-1: SerialNumber: syz [ 169.056305][ T5698] usb 3-1: 0:2 : does not exist [ 169.056365][ T5698] usb 3-1: unit 9 not found! [ 170.112111][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 170.289998][ T7037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.394609][ T7037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.711031][ T5698] usb 3-1: USB disconnect, device number 17 [ 170.783821][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.284569][ T5712] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.804582][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 171.805399][ T5712] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 171.806382][ T5712] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 171.806405][ T5712] usb 5-1: config 0 has no interface number 0 [ 171.806437][ T5712] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 171.812464][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.812489][ T5712] usb 5-1: Product: syz [ 171.812502][ T5712] usb 5-1: Manufacturer: syz [ 171.812515][ T5712] usb 5-1: SerialNumber: syz [ 171.860720][ T5712] usb 5-1: config 0 descriptor?? [ 171.869243][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.227065][ T7066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.511829][ T7084] 9p: Bad value for 'rfdno' [ 173.027540][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 173.790159][ T5712] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 233 [ 174.214725][ T7110] netlink: 128 bytes leftover after parsing attributes in process `syz.1.331'. [ 175.831963][ T7127] 9p: Bad value for 'rfdno' [ 176.231350][ T7125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.336'. [ 176.379973][ T5783] usb 5-1: USB disconnect, device number 21 [ 179.320368][ T31] audit: type=1400 audit(1791490679.684:422): avc: denied { unlink } for pid=7156 comm="syz.1.345" name="#1" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 179.392514][ T31] audit: type=1400 audit(1791490679.754:423): avc: denied { read } for pid=7156 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.873317][ T7176] netlink: 128 bytes leftover after parsing attributes in process `syz.3.348'. [ 180.623019][ T7181] FAULT_INJECTION: forcing a failure. [ 180.623019][ T7181] name failslab, interval 1, probability 0, space 0, times 0 [ 180.623049][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.2.339 Not tainted syzkaller #0 PREEMPT(full) [ 180.623063][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 180.623070][ T7181] Call Trace: [ 180.623075][ T7181] [ 180.623081][ T7181] dump_stack_lvl+0x100/0x190 [ 180.623101][ T7181] should_fail_ex.cold+0x5/0xa [ 180.623121][ T7181] should_failslab+0xc2/0x120 [ 180.623138][ T7181] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 180.623153][ T7181] ? __d_alloc+0x35/0xa50 [ 180.623167][ T7181] __d_alloc+0x35/0xa50 [ 180.623179][ T7181] d_alloc_pseudo+0x1c/0xc0 [ 180.623192][ T7181] alloc_file_pseudo+0x118/0x290 [ 180.623210][ T7181] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 180.623229][ T7181] ? alloc_fd+0x471/0x7a0 [ 180.623247][ T7181] sock_alloc_file+0x50/0x210 [ 180.623265][ T7181] __sys_socket+0x1c0/0x260 [ 180.623278][ T7181] ? __pfx___sys_socket+0x10/0x10 [ 180.623295][ T7181] __x64_sys_socket+0x72/0xb0 [ 180.623307][ T7181] ? lockdep_hardirqs_on+0x7d/0x110 [ 180.623320][ T7181] do_syscall_64+0x123/0x790 [ 180.623333][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.623345][ T7181] RIP: 0033:0x7f86be19e199 [ 180.623354][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.623365][ T7181] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 180.623376][ T7181] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 180.623383][ T7181] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 180.623389][ T7181] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 180.623395][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.623401][ T7181] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 180.623416][ T7181] [ 180.796379][ T1076] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.088044][ T7187] netlink: 128 bytes leftover after parsing attributes in process `syz.4.349'. [ 181.688113][ T5868] rpcbind: server 127.0.0.1 not responding, timed out [ 181.692696][ T1076] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice=12.00 [ 181.697127][ T1076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.697154][ T1076] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.698418][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.698437][ T1076] usb 2-1: Product: syz [ 181.698449][ T1076] usb 2-1: Manufacturer: syz [ 182.265021][ T1076] usbhid 2-1:1.0: can't add hid device: -71 [ 182.265105][ T1076] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 182.296029][ T1076] usb 2-1: USB disconnect, device number 13 [ 182.429916][ T7191] netlink: 'syz.2.352': attribute type 2 has an invalid length. [ 182.613158][ T7199] netlink: 'syz.0.355': attribute type 4 has an invalid length. [ 182.705029][ T7203] FAULT_INJECTION: forcing a failure. [ 182.705029][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 182.705057][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.3.351 Not tainted syzkaller #0 PREEMPT(full) [ 182.705079][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 182.705090][ T7203] Call Trace: [ 182.705103][ T7203] [ 182.705111][ T7203] dump_stack_lvl+0x100/0x190 [ 182.705143][ T7203] should_fail_ex.cold+0x5/0xa [ 182.705169][ T7203] should_failslab+0xc2/0x120 [ 182.705195][ T7203] __kmalloc_cache_noprof+0x91/0x6d0 [ 182.705216][ T7203] ? serio_queue_event+0x109/0x330 [ 182.705247][ T7203] serio_queue_event+0x109/0x330 [ 182.705276][ T7203] serport_ldisc_read+0x326/0x680 [ 182.705300][ T7203] ? __pfx_serport_ldisc_read+0x10/0x10 [ 182.705324][ T7203] ? __pfx___might_resched+0x10/0x10 [ 182.705352][ T7203] tty_read+0x2cf/0x550 [ 182.705379][ T7203] ? __pfx_tty_read+0x10/0x10 [ 182.705409][ T7203] ? __lock_acquire+0x5c0/0x1f40 [ 182.705434][ T7203] do_iter_readv_writev+0x616/0x930 [ 182.705458][ T7203] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 182.705476][ T7203] ? avc_policy_seqno+0x9/0x20 [ 182.705493][ T7203] ? selinux_file_permission+0x8f/0x6d0 [ 182.705521][ T7203] ? bpf_lsm_file_permission+0x9/0x10 [ 182.705547][ T7203] ? security_file_permission+0x76/0x210 [ 182.705573][ T7203] ? rw_verify_area+0xce/0x6d0 [ 182.705595][ T7203] vfs_readv+0x4d3/0x8d0 [ 182.705616][ T7203] ? __lock_acquire+0x5c0/0x1f40 [ 182.705640][ T7203] ? __pfx_vfs_readv+0x10/0x10 [ 182.705665][ T7203] ? lock_acquire+0x1d1/0x380 [ 182.705685][ T7203] ? __fget_files+0x34/0x3d0 [ 182.705720][ T7203] ? __fget_files+0x21f/0x3d0 [ 182.705752][ T7203] ? do_readv+0x13e/0x340 [ 182.705769][ T7203] do_readv+0x13e/0x340 [ 182.705790][ T7203] ? __pfx_do_readv+0x10/0x10 [ 182.705817][ T7203] do_syscall_64+0x123/0x790 [ 182.705842][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.705862][ T7203] RIP: 0033:0x7fe9bed9e199 [ 182.705878][ T7203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.705895][ T7203] RSP: 002b:00007fe9bfbb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 182.705912][ T7203] RAX: ffffffffffffffda RBX: 00007fe9bf026090 RCX: 00007fe9bed9e199 [ 182.705924][ T7203] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 182.705935][ T7203] RBP: 00007fe9bfbb9090 R08: 0000000000000000 R09: 0000000000000000 [ 182.705947][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.705957][ T7203] R13: 00007fe9bf026128 R14: 00007fe9bf026090 R15: 00007ffe040ce708 [ 182.705983][ T7203] [ 182.705991][ T7203] serio: Not enough memory to queue event 3 [ 182.706004][ T7203] serio: Serial port ttyS3 [ 185.343783][ T7231] openvswitch: netlink: Missing valid actions attribute. [ 185.343813][ T7231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.482641][ T31] audit: type=1400 audit(1791490685.844:424): avc: denied { mount } for pid=7237 comm="syz.0.366" name="/" dev="hugetlbfs" ino=13709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 185.704335][ T7249] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 185.962773][ T31] audit: type=1400 audit(1791490686.324:425): avc: denied { ioctl } for pid=7257 comm="syz.0.370" path="socket:[13723]" dev="sockfs" ino=13723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.357551][ T7269] netlink: 128 bytes leftover after parsing attributes in process `syz.4.372'. [ 187.018346][ T5868] rpcbind: server 127.0.0.1 not responding, timed out [ 187.253802][ T7274] FAULT_INJECTION: forcing a failure. [ 187.253802][ T7274] name failslab, interval 1, probability 0, space 0, times 0 [ 187.253822][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 187.253835][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 187.253841][ T7274] Call Trace: [ 187.253845][ T7274] [ 187.253849][ T7274] dump_stack_lvl+0x100/0x190 [ 187.253871][ T7274] should_fail_ex.cold+0x5/0xa [ 187.253889][ T7274] should_failslab+0xc2/0x120 [ 187.253905][ T7274] __kmalloc_cache_noprof+0x91/0x6d0 [ 187.253916][ T7274] ? rcu_is_watching+0x13/0xc0 [ 187.253932][ T7274] ? vhost_task_create+0xee/0x370 [ 187.253944][ T7274] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 187.253960][ T7274] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 187.253978][ T7274] vhost_task_create+0xee/0x370 [ 187.253988][ T7274] ? __pfx_vhost_task_create+0x10/0x10 [ 187.254003][ T7274] ? __pfx_vhost_task_fn+0x10/0x10 [ 187.254017][ T7274] ? register_lock_class+0x3f/0x7b0 [ 187.254030][ T7274] ? rcu_is_watching+0x13/0xc0 [ 187.254046][ T7274] ? trace_contention_end+0x126/0x160 [ 187.254063][ T7274] kvm_mmu_post_init_vm+0x1b3/0x360 [ 187.254078][ T7274] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 187.254093][ T7274] ? __pfx___mutex_lock+0x10/0x10 [ 187.254106][ T7274] ? kasan_quarantine_put+0x104/0x240 [ 187.254122][ T7274] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 187.254135][ T7274] ? lock_acquire+0x1d1/0x380 [ 187.254148][ T7274] ? do_raw_write_lock+0x11e/0x260 [ 187.254163][ T7274] ? find_held_lock+0x2b/0x80 [ 187.254180][ T7274] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 187.254195][ T7274] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 187.254213][ T7274] kvm_vcpu_ioctl+0x730/0x1700 [ 187.254230][ T7274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 187.254246][ T7274] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.254261][ T7274] ? do_vfs_ioctl+0x226/0x13e0 [ 187.254274][ T7274] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 187.254286][ T7274] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 187.254303][ T7274] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 187.254321][ T7274] ? __fget_files+0x34/0x3d0 [ 187.254342][ T7274] ? selinux_file_ioctl+0x13b/0x290 [ 187.254359][ T7274] ? selinux_file_ioctl+0xb6/0x290 [ 187.254381][ T7274] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 187.254404][ T7274] __x64_sys_ioctl+0x18e/0x210 [ 187.254425][ T7274] do_syscall_64+0x123/0x790 [ 187.254448][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.254467][ T7274] RIP: 0033:0x7f3f7c39e199 [ 187.254482][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.254499][ T7274] RSP: 002b:00007f3f7d345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.254522][ T7274] RAX: ffffffffffffffda RBX: 00007f3f7c625fa0 RCX: 00007f3f7c39e199 [ 187.254529][ T7274] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 187.254536][ T7274] RBP: 00007f3f7d345090 R08: 0000000000000000 R09: 0000000000000000 [ 187.254542][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.254548][ T7274] R13: 00007f3f7c626038 R14: 00007f3f7c625fa0 R15: 00007ffeeed07558 [ 187.254563][ T7274] [ 187.783917][ T7284] IPVS: dh: UDP 127.0.0.1:21 - no destination available [ 188.131662][ T153] IPVS: starting estimator thread 0... [ 188.192223][ T31] audit: type=1400 audit(1791490688.554:426): avc: denied { map } for pid=7287 comm="syz.0.379" path="socket:[13835]" dev="sockfs" ino=13835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.192255][ T31] audit: type=1400 audit(1791490688.554:427): avc: denied { read } for pid=7287 comm="syz.0.379" path="socket:[13835]" dev="sockfs" ino=13835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.285911][ T7286] IPVS: using max 76 ests per chain, 182400 per kthread [ 188.349423][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'. [ 188.846642][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.873738][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.873805][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.103906][ T31] audit: type=1400 audit(1791490689.464:428): avc: denied { mount } for pid=7305 comm="syz.2.384" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 189.160979][ T7308] FAULT_INJECTION: forcing a failure. [ 189.160979][ T7308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.161008][ T7308] CPU: 0 UID: 0 PID: 7308 Comm: syz.3.385 Not tainted syzkaller #0 PREEMPT(full) [ 189.161028][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 189.161045][ T7308] Call Trace: [ 189.161052][ T7308] [ 189.161059][ T7308] dump_stack_lvl+0x100/0x190 [ 189.161091][ T7308] should_fail_ex.cold+0x5/0xa [ 189.161116][ T7308] _copy_from_user+0x2e/0xd0 [ 189.161140][ T7308] bpf_test_init.isra.0+0xaf/0x100 [ 189.161165][ T7308] bpf_prog_test_run_xdp+0x587/0x1670 [ 189.161198][ T7308] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.161229][ T7308] ? fput+0x7c/0x100 [ 189.161254][ T7308] ? __bpf_prog_get+0x97/0x290 [ 189.161280][ T7308] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.161304][ T7308] __sys_bpf+0x2265/0x4a30 [ 189.161331][ T7308] ? __pfx___sys_bpf+0x10/0x10 [ 189.161351][ T7308] ? find_held_lock+0x2b/0x80 [ 189.161377][ T7308] ? get_pid_task+0xfc/0x250 [ 189.161401][ T7308] ? get_pid_task+0xfc/0x250 [ 189.161434][ T7308] ? find_held_lock+0x2b/0x80 [ 189.161466][ T7308] ? rcu_read_lock_any_held+0x6a/0x90 [ 189.161494][ T7308] ? find_held_lock+0x2b/0x80 [ 189.161518][ T7308] ? ksys_write+0x190/0x250 [ 189.161538][ T7308] ? ksys_write+0x190/0x250 [ 189.161557][ T7308] ? lock_acquire+0x1d1/0x380 [ 189.161592][ T7308] ? fput+0x7c/0x100 [ 189.161617][ T7308] ? ksys_write+0x1ac/0x250 [ 189.161641][ T7308] ? __x64_sys_bpf+0xce/0x140 [ 189.161660][ T7308] __x64_sys_bpf+0xce/0x140 [ 189.161681][ T7308] ? do_syscall_64+0xae/0x790 [ 189.161703][ T7308] do_syscall_64+0x123/0x790 [ 189.161725][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.161744][ T7308] RIP: 0033:0x7fe9bed9e199 [ 189.161760][ T7308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.161777][ T7308] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.161795][ T7308] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 189.161807][ T7308] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 189.161818][ T7308] RBP: 00007fe9bfbda090 R08: 0000000000000000 R09: 0000000000000000 [ 189.161828][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.161838][ T7308] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 189.161864][ T7308] [ 189.639008][ T5698] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 189.704984][ T7316] FAULT_INJECTION: forcing a failure. [ 189.704984][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 189.705007][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 189.705021][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 189.705028][ T7316] Call Trace: [ 189.705032][ T7316] [ 189.705037][ T7316] dump_stack_lvl+0x100/0x190 [ 189.705058][ T7316] should_fail_ex.cold+0x5/0xa [ 189.705076][ T7316] should_failslab+0xc2/0x120 [ 189.705093][ T7316] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 189.705109][ T7316] ? x509_cert_parse+0x3bd/0x910 [ 189.705125][ T7316] kmemdup_noprof+0x29/0x60 [ 189.705138][ T7316] x509_cert_parse+0x3bd/0x910 [ 189.705153][ T7316] x509_key_preparse+0x65/0x9c0 [ 189.705169][ T7316] asymmetric_key_preparse+0xce/0x1d0 [ 189.705179][ T7316] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 189.705191][ T7316] __key_create_or_update+0x413/0xe30 [ 189.705209][ T7316] ? __pfx___key_create_or_update+0x10/0x10 [ 189.705226][ T7316] ? lookup_user_key+0x3f3/0x1300 [ 189.705247][ T7316] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 189.705264][ T7316] key_create_or_update+0x42/0x60 [ 189.705282][ T7316] __do_sys_add_key+0x2e8/0x460 [ 189.705294][ T7316] ? __pfx___do_sys_add_key+0x10/0x10 [ 189.705310][ T7316] do_syscall_64+0x123/0x790 [ 189.705324][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.705335][ T7316] RIP: 0033:0x7fe9bed9e199 [ 189.705345][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.705355][ T7316] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 189.705366][ T7316] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 189.705373][ T7316] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 189.705380][ T7316] RBP: 00007fe9bee35888 R08: ffffffffffffffff R09: 0000000000000000 [ 189.705386][ T7316] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 189.705393][ T7316] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 189.705411][ T7316] [ 189.718519][ T7316] ======================================================= [ 189.718519][ T7316] WARNING: The mand mount option has been deprecated and [ 189.718519][ T7316] and is ignored by this kernel. Remove the mand [ 189.718519][ T7316] option from the mount to silence this warning. [ 189.718519][ T7316] ======================================================= [ 189.720953][ T7316] comedi comedi1: aio_aio12_8: I/O base address or length out of range [ 189.721461][ T31] audit: type=1400 audit(1791490690.084:429): avc: denied { append } for pid=7314 comm="syz.3.388" name="cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 189.721734][ T31] audit: type=1400 audit(1791490690.084:430): avc: denied { open } for pid=7314 comm="syz.3.388" path="/87/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 189.723043][ T31] audit: type=1400 audit(1791490690.084:431): avc: denied { ioctl } for pid=7314 comm="syz.3.388" path="/87/dev/cpu_dma_latency" dev="devtmpfs" ino=1312 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 189.725546][ T7316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.388'. [ 190.573241][ T5698] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 190.623987][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 190.624015][ T5698] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 190.645593][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.645615][ T5698] usb 3-1: Product: syz [ 190.645627][ T5698] usb 3-1: Manufacturer: syz [ 190.645639][ T5698] usb 3-1: SerialNumber: syz [ 190.839150][ T31] audit: type=1400 audit(1791490691.204:432): avc: denied { write } for pid=7329 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 190.900437][ T5698] usb 3-1: Limiting number of CPorts to U8_MAX [ 190.904720][ T5712] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 190.921752][ T7335] FAULT_INJECTION: forcing a failure. [ 190.921752][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 190.921781][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.3.392 Not tainted syzkaller #0 PREEMPT(full) [ 190.921803][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 190.921813][ T7335] Call Trace: [ 190.921819][ T7335] [ 190.921827][ T7335] dump_stack_lvl+0x100/0x190 [ 190.921861][ T7335] should_fail_ex.cold+0x5/0xa [ 190.921888][ T7335] should_failslab+0xc2/0x120 [ 190.921915][ T7335] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 190.921937][ T7335] ? __d_alloc+0x35/0xa50 [ 190.921955][ T7335] __d_alloc+0x35/0xa50 [ 190.921973][ T7335] d_alloc_pseudo+0x1c/0xc0 [ 190.922005][ T7335] alloc_file_pseudo+0x118/0x290 [ 190.922036][ T7335] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 190.922064][ T7335] ? alloc_fd+0x471/0x7a0 [ 190.922094][ T7335] sock_alloc_file+0x50/0x210 [ 190.922126][ T7335] __sys_socket+0x1c0/0x260 [ 190.922149][ T7335] ? __pfx___sys_socket+0x10/0x10 [ 190.922176][ T7335] __x64_sys_socket+0x72/0xb0 [ 190.922196][ T7335] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.922217][ T7335] do_syscall_64+0x123/0x790 [ 190.922240][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.922259][ T7335] RIP: 0033:0x7fe9bed9e199 [ 190.922274][ T7335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.922292][ T7335] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 190.922308][ T7335] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 190.922319][ T7335] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 190.922329][ T7335] RBP: 00007fe9bee35888 R08: 0000000000000000 R09: 0000000000000000 [ 190.922338][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.922347][ T7335] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 190.922371][ T7335] [ 191.114509][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 191.128144][ T5712] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=4c.1d [ 191.129682][ T5712] usb 2-1: config 11 has an invalid interface number: 207 but max is 2 [ 191.129703][ T5712] usb 2-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 191.129719][ T5712] usb 2-1: config 11 has an invalid interface number: 127 but max is 2 [ 191.129738][ T5712] usb 2-1: config 11 has an invalid interface number: 5 but max is 2 [ 191.129757][ T5712] usb 2-1: config 11 has no interface number 0 [ 191.129792][ T5712] usb 2-1: config 11 has no interface number 1 [ 191.129806][ T5712] usb 2-1: config 11 has no interface number 2 [ 191.129847][ T5712] usb 2-1: config 11 interface 207 altsetting 7 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 191.129868][ T5712] usb 2-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 191.129887][ T5712] usb 2-1: config 11 interface 207 altsetting 7 bulk endpoint 0xF has invalid maxpacket 64 [ 191.129905][ T5712] usb 2-1: config 11 interface 207 altsetting 7 endpoint 0x6 has an invalid bInterval 225, changing to 7 [ 191.129946][ T5712] usb 2-1: config 11 interface 207 altsetting 7 endpoint 0x7 has invalid wMaxPacketSize 0 [ 191.129965][ T5712] usb 2-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 191.129982][ T5712] usb 2-1: config 11 interface 207 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 191.130001][ T5712] usb 2-1: config 11 interface 207 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 191.130018][ T5712] usb 2-1: config 11 interface 207 altsetting 7 endpoint 0x4 has invalid maxpacket 1975, setting to 1024 [ 191.130046][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 191.130081][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 191.130097][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 191.130115][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x8E, skipping [ 191.130131][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 191.130146][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has an endpoint descriptor with address 0x11, changing to 0x1 [ 191.130164][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 191.130180][ T5712] usb 2-1: config 11 interface 127 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 191.130198][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 191.130232][ T5712] usb 2-1: config 11 interface 127 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 191.130252][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 191.130267][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 191.130282][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 191.130297][ T5712] usb 2-1: config 11 interface 127 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 191.130320][ T5712] usb 2-1: config 11 interface 5 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 191.130337][ T5712] usb 2-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 191.130370][ T5712] usb 2-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 191.130387][ T5712] usb 2-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 191.130402][ T5712] usb 2-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 191.130419][ T5712] usb 2-1: config 11 interface 5 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 191.130437][ T5712] usb 2-1: config 11 interface 5 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 191.130452][ T5712] usb 2-1: config 11 interface 207 has no altsetting 0 [ 191.130466][ T5712] usb 2-1: config 11 interface 127 has no altsetting 0 [ 191.130479][ T5712] usb 2-1: config 11 interface 5 has no altsetting 0 [ 191.167129][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.167171][ T5712] usb 2-1: Product: syz [ 191.167184][ T5712] usb 2-1: Manufacturer: syz [ 191.167195][ T5712] usb 2-1: SerialNumber: syz [ 191.284881][ T7328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.285393][ T7328] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.455059][ T7343] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 192.613609][ T31] audit: type=1400 audit(1791490692.974:433): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 192.674165][ T5944] usb 3-1: failed to submit out-urb: -90 [ 192.674188][ T5944] greybus greybus1: 0/0:0: failed to send response 0 for type 0x01: -90 [ 192.699536][ T5712] flexcop_usb: set interface failed. [ 192.699599][ T5712] b2c2_flexcop_usb 2-1:11.207: probe with driver b2c2_flexcop_usb failed with error -22 [ 192.756714][ T5712] flexcop_usb: set interface failed. [ 192.756791][ T5712] b2c2_flexcop_usb 2-1:11.127: probe with driver b2c2_flexcop_usb failed with error -22 [ 192.783050][ T5712] flexcop_usb: set interface failed. [ 192.783126][ T5712] b2c2_flexcop_usb 2-1:11.5: probe with driver b2c2_flexcop_usb failed with error -22 [ 192.817824][ T5712] usb 2-1: USB disconnect, device number 14 [ 192.876298][ C0] greybus greybus1: 0/0:0: incomplete message 0x0002 of type 0x02 received (9 < 11) [ 193.099824][ T5712] usb 3-1: USB disconnect, device number 18 [ 193.099873][ C0] usb 3-1: failed to resubmit arpc in-urb: -19 [ 193.099893][ C0] usb 3-1: failed to resubmit arpc in-urb: -19 [ 193.099910][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 193.099926][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 193.099942][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 193.099957][ C0] usb 3-1: failed to resubmit in-urb: -19 [ 193.150504][ T5712] usb 3-1: failed to send ARPC request 4: -19 [ 193.150595][ T5712] usb 3-1: failed to execute ARPC: -19 [ 193.150610][ T5712] usb 3-1: failed to flush cport 0: -19 [ 193.150626][ T5712] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 193.150732][ T5712] usb 3-1: failed to send ARPC request 2: -19 [ 193.150787][ T5712] usb 3-1: failed to execute ARPC: -19 [ 193.150800][ T5712] usb 3-1: failed to quiesce cport 0: -19 (0) [ 193.150817][ T5712] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 193.150923][ T5712] usb 3-1: failed to send ARPC request 3: -19 [ 193.150980][ T5712] usb 3-1: failed to execute ARPC: -19 [ 193.150993][ T5712] usb 3-1: failed to clear cport 0: -19 [ 193.151008][ T5712] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 193.288412][ T31] audit: type=1400 audit(1791490693.654:434): avc: denied { read write } for pid=7357 comm="syz.3.398" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 193.288787][ T31] audit: type=1400 audit(1791490693.654:435): avc: denied { open } for pid=7357 comm="syz.3.398" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 193.455611][ T31] audit: type=1400 audit(1791490693.824:436): avc: denied { map } for pid=7357 comm="syz.3.398" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.047710][ T7369] FAULT_INJECTION: forcing a failure. [ 194.047710][ T7369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.047743][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) [ 194.047764][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 194.047774][ T7369] Call Trace: [ 194.047780][ T7369] [ 194.047787][ T7369] dump_stack_lvl+0x100/0x190 [ 194.047820][ T7369] should_fail_ex.cold+0x5/0xa [ 194.047848][ T7369] _copy_from_iter+0x1f4/0x1690 [ 194.047878][ T7369] ? __pfx__copy_from_iter+0x10/0x10 [ 194.047903][ T7369] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.047932][ T7369] ? lock_acquire+0x1d1/0x380 [ 194.047965][ T7369] copy_page_from_iter+0x238/0x300 [ 194.047991][ T7369] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 194.048026][ T7369] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 194.048050][ T7369] ? unwind_get_return_address+0x59/0xa0 [ 194.048077][ T7369] ? arch_stack_walk+0xa6/0xf0 [ 194.048115][ T7369] ? _kstrtoull+0x144/0x200 [ 194.048141][ T7369] ? __pfx__kstrtoull+0x10/0x10 [ 194.048171][ T7369] tun_get_user+0x1674/0x3cc0 [ 194.048205][ T7369] ? __lock_acquire+0x5c0/0x1f40 [ 194.048226][ T7369] ? __pfx_tun_get_user+0x10/0x10 [ 194.048252][ T7369] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 194.048289][ T7369] ? find_held_lock+0x2b/0x80 [ 194.048315][ T7369] ? tun_get+0x191/0x370 [ 194.048335][ T7369] ? tun_get+0x191/0x370 [ 194.048364][ T7369] tun_chr_write_iter+0xdc/0x200 [ 194.048391][ T7369] vfs_write+0x6af/0x1050 [ 194.048413][ T7369] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 194.048439][ T7369] ? __pfx_vfs_write+0x10/0x10 [ 194.048457][ T7369] ? find_held_lock+0x2b/0x80 [ 194.048499][ T7369] ksys_write+0x12a/0x250 [ 194.048520][ T7369] ? __pfx_ksys_write+0x10/0x10 [ 194.048548][ T7369] do_syscall_64+0x123/0x790 [ 194.048572][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.048591][ T7369] RIP: 0033:0x7f86be15e9ce [ 194.048607][ T7369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.048626][ T7369] RSP: 002b:00007f86bf106fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.048644][ T7369] RAX: ffffffffffffffda RBX: 00007f86bf1076c0 RCX: 00007f86be15e9ce [ 194.048656][ T7369] RDX: 000000000000009a RSI: 00002000000000c0 RDI: 00000000000000c8 [ 194.048667][ T7369] RBP: 00007f86bf107090 R08: 0000000000000000 R09: 0000000000000000 [ 194.048678][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.048688][ T7369] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 194.048714][ T7369] [ 194.435807][ T5783] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.603995][ T31] audit: type=1400 audit(1791490694.964:437): avc: denied { ioctl } for pid=7378 comm="syz.3.406" path="socket:[13118]" dev="sockfs" ino=13118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 194.882992][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 194.919712][ T5783] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 194.999603][ T5783] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.999634][ T5783] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 194.999657][ T5783] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.999685][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.245002][ T5914] rpcbind: server 127.0.0.1 not responding, timed out [ 195.804157][ T5783] usb 2-1: config 0 descriptor?? [ 196.144560][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 196.534584][ T5928] rpcbind: server 127.0.0.1 not responding, timed out [ 196.574065][ T5783] input: HID 1e7d:2ced as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2CED.0003/input/input12 [ 196.626335][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 196.627031][ T9] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 196.631030][ T9] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.631063][ T9] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.631087][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.631116][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.640876][ T9] usb 5-1: config 0 descriptor?? [ 196.790154][ T5783] kone 0003:1E7D:2CED.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 197.150821][ T7386] FAULT_INJECTION: forcing a failure. [ 197.150821][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 197.150855][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.4.405 Not tainted syzkaller #0 PREEMPT(full) [ 197.150877][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 197.150888][ T7386] Call Trace: [ 197.150895][ T7386] [ 197.150903][ T7386] dump_stack_lvl+0x100/0x190 [ 197.150934][ T7386] should_fail_ex.cold+0x5/0xa [ 197.150966][ T7386] should_failslab+0xc2/0x120 [ 197.150996][ T7386] __kmalloc_noprof+0xfc/0x840 [ 197.151025][ T7386] ? __memcg_list_lru_alloc+0x418/0x680 [ 197.151060][ T7386] __memcg_list_lru_alloc+0x418/0x680 [ 197.151093][ T7386] ? xa_load+0x149/0x2c0 [ 197.151125][ T7386] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 197.151162][ T7386] ? rcu_read_unlock+0x17/0x60 [ 197.151187][ T7386] memcg_list_lru_alloc+0xd3/0x100 [ 197.151208][ T7386] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 197.151237][ T7386] ? kasan_save_track+0x14/0x30 [ 197.151265][ T7386] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 197.151291][ T7386] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 197.151321][ T7386] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 197.151344][ T7386] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 197.151370][ T7386] alloc_inode+0x68/0x250 [ 197.151391][ T7386] new_inode+0x22/0x1c0 [ 197.151414][ T7386] hugetlbfs_get_inode+0x39a/0x700 [ 197.151438][ T7386] ? security_capable+0x80/0x260 [ 197.151462][ T7386] hugetlb_file_setup+0x3cc/0x5b0 [ 197.151489][ T7386] newseg+0xaf0/0xed0 [ 197.151520][ T7386] ? __pfx_newseg+0x10/0x10 [ 197.151547][ T7386] ? down_write+0x146/0x1f0 [ 197.151572][ T7386] ? ksys_write+0x190/0x250 [ 197.151597][ T7386] ipcget+0xee/0xf50 [ 197.151624][ T7386] ? __pfx_do_futex+0x10/0x10 [ 197.151655][ T7386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.151679][ T7386] ? __pfx_ipcget+0x10/0x10 [ 197.151705][ T7386] ? __x64_sys_futex+0x34f/0x4d0 [ 197.151731][ T7386] ? __x64_sys_futex+0x358/0x4d0 [ 197.151762][ T7386] __x64_sys_shmget+0x13b/0x1b0 [ 197.151790][ T7386] ? __pfx___x64_sys_shmget+0x10/0x10 [ 197.151825][ T7386] do_syscall_64+0x123/0x790 [ 197.151849][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.151868][ T7386] RIP: 0033:0x7f69c059e199 [ 197.151885][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.151903][ T7386] RSP: 002b:00007f69c1516028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 197.151922][ T7386] RAX: ffffffffffffffda RBX: 00007f69c0825fa0 RCX: 00007f69c059e199 [ 197.151934][ T7386] RDX: 0000000078001900 RSI: 0000000000001000 RDI: 0000000000000000 [ 197.151945][ T7386] RBP: 00007f69c0635888 R08: 0000000000000000 R09: 0000000000000000 [ 197.151956][ T7386] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000000 [ 197.151967][ T7386] R13: 00007f69c0826038 R14: 00007f69c0825fa0 R15: 00007fff58d51a78 [ 197.151994][ T7386] [ 197.550785][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 197.551473][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 197.655363][ T9] usb 5-1: USB disconnect, device number 22 [ 199.003461][ T25] usb 2-1: USB disconnect, device number 15 [ 199.165638][ T31] audit: type=1400 audit(1791490699.534:438): avc: denied { read } for pid=7414 comm="syz.4.418" path="socket:[13203]" dev="sockfs" ino=13203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.223859][ T31] audit: type=1400 audit(1791490699.584:439): avc: denied { setopt } for pid=7414 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.406297][ T5868] rpcbind: server 127.0.0.1 not responding, timed out [ 199.509063][ T7433] jffs2: notice: (7433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.941558][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 200.104443][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 200.104944][ T25] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.107437][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.107460][ T25] usb 2-1: Product: syz [ 200.107475][ T25] usb 2-1: Manufacturer: syz [ 200.107489][ T25] usb 2-1: SerialNumber: syz [ 200.114020][ T25] usb 2-1: config 0 descriptor?? [ 200.377863][ T31] audit: type=1400 audit(1791490700.744:440): avc: denied { setopt } for pid=7431 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.438520][ T7438] Bluetooth: MGMT ver 1.23 [ 200.562193][ T25] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 200.597778][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.601818][ T25] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 200.601865][ T25] usb 2-1: media controller created [ 200.649090][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.767371][ T25] zl10353_read_register: readreg error (reg=127, ret==0) [ 200.767413][ T25] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 200.767425][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 200.802591][ T25] usb 2-1: USB disconnect, device number 16 [ 201.332762][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 201.365677][ T25] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 201.645248][ T5868] rpcbind: server 127.0.0.1 not responding, timed out [ 201.783893][ T31] audit: type=1400 audit(1791490702.144:441): avc: denied { create } for pid=7460 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.812968][ T31] audit: type=1400 audit(1791490702.174:442): avc: denied { bind } for pid=7460 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.874706][ T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 201.934569][ T862] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 202.032459][ T31] audit: type=1400 audit(1791490702.394:443): avc: denied { setopt } for pid=7465 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.054683][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 202.061724][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.063977][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 202.064018][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.064039][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.064066][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.064085][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.064119][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.284216][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056a8f000: rx timeout, send abort [ 202.407557][ T31] audit: type=1400 audit(1791490702.774:444): avc: denied { read } for pid=4950 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 202.407609][ T31] audit: type=1400 audit(1791490702.774:445): avc: denied { search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.410792][ T31] audit: type=1400 audit(1791490702.774:446): avc: denied { write search } for pid=4950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.410834][ T31] audit: type=1400 audit(1791490702.774:447): avc: denied { add_name } for pid=4950 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.784959][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056a8ec00: rx timeout, send abort [ 202.785343][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056a8f000: abort rx timeout. Force session deactivation [ 202.786580][ T862] usb 5-1: Using ep0 maxpacket: 8 [ 202.985088][ T862] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 203.038527][ T862] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.038560][ T862] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.038585][ T862] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.038613][ T862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.093482][ T862] usb 5-1: config 0 descriptor?? [ 203.240024][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 203.284998][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056a8ec00: abort rx timeout. Force session deactivation [ 203.484518][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.485204][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.528027][ T7481] FAULT_INJECTION: forcing a failure. [ 203.528027][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 203.528061][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.3.432 Not tainted syzkaller #0 PREEMPT(full) [ 203.528082][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 203.528093][ T7481] Call Trace: [ 203.528099][ T7481] [ 203.528107][ T7481] dump_stack_lvl+0x100/0x190 [ 203.528137][ T7481] should_fail_ex.cold+0x5/0xa [ 203.528163][ T7481] should_failslab+0xc2/0x120 [ 203.528190][ T7481] kmem_cache_alloc_noprof+0x92/0x6a0 [ 203.528214][ T7481] ? do_getname+0x35/0x390 [ 203.528237][ T7481] do_getname+0x35/0x390 [ 203.528258][ T7481] do_sys_openat2+0xc7/0x1e0 [ 203.528285][ T7481] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.528313][ T7481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.528337][ T7481] ? __fget_files+0x21f/0x3d0 [ 203.528366][ T7481] __x64_sys_openat+0x12d/0x210 [ 203.528395][ T7481] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.528420][ T7481] ? ksys_write+0x1ac/0x250 [ 203.528449][ T7481] do_syscall_64+0x123/0x790 [ 203.528472][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.528491][ T7481] RIP: 0033:0x7fe9bed9e199 [ 203.528506][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.528524][ T7481] RSP: 002b:00007fe9bfb98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.528542][ T7481] RAX: ffffffffffffffda RBX: 00007fe9bf026180 RCX: 00007fe9bed9e199 [ 203.528553][ T7481] RDX: 0000000000010000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 203.528564][ T7481] RBP: 00007fe9bfb98090 R08: 0000000000000000 R09: 0000000000000000 [ 203.528574][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.528585][ T7481] R13: 00007fe9bf026218 R14: 00007fe9bf026180 R15: 00007ffe040ce708 [ 203.528610][ T7481] [ 203.810064][ T25] usb 3-1: usb_control_msg returned -32 [ 203.810125][ T25] usbtmc 3-1:16.0: can't read capabilities [ 204.346955][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 204.346979][ T31] audit: type=1400 audit(1791490704.714:451): avc: denied { write } for pid=7454 comm="syz.2.423" name="usbtmc0" dev="devtmpfs" ino=2959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.408880][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 204.429239][ T7492] overlayfs: failed to set uuid (101/file0, err=-1); falling back to uuid=null. [ 204.429287][ T7492] overlayfs: failed to verify upper root origin [ 204.492217][ T862] usbhid 5-1:0.0: can't add hid device: -71 [ 204.492305][ T862] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.502301][ T862] usb 5-1: USB disconnect, device number 23 [ 204.999862][ T31] audit: type=1400 audit(1791490705.364:452): avc: denied { create } for pid=7494 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.002271][ T31] audit: type=1400 audit(1791490705.364:453): avc: denied { ioctl } for pid=7494 comm="syz.1.435" path="socket:[14529]" dev="sockfs" ino=14529 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.002654][ T31] audit: type=1400 audit(1791490705.364:454): avc: denied { ioctl } for pid=7494 comm="syz.1.435" path="socket:[14528]" dev="sockfs" ino=14528 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 205.144525][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.380077][ T25] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 205.383997][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.384017][ T25] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.384029][ T25] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.384044][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.384060][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.395552][ T25] usb 4-1: config 0 descriptor?? [ 205.437565][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 205.440166][ T862] usb 3-1: USB disconnect, device number 19 [ 205.577419][ T7515] bridge_slave_1: entered promiscuous mode [ 205.580313][ T31] audit: type=1400 audit(1791490705.944:455): avc: denied { ioctl } for pid=7514 comm="syz.4.442" path="socket:[14176]" dev="sockfs" ino=14176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.540672][ T5921] rpcbind: server 127.0.0.1 not responding, timed out [ 206.635200][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 206.635286][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.638272][ T25] usb 4-1: USB disconnect, device number 13 [ 206.899262][ T7532] smpboot: CPU 1 is now offline [ 208.680754][ T31] audit: type=1400 audit(1791490709.044:456): avc: denied { wake_alarm } for pid=7534 comm="syz.2.446" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.095454][ T31] audit: type=1400 audit(1791490709.464:457): avc: denied { setopt } for pid=7552 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.996501][ T5914] rpcbind: server 127.0.0.1 not responding, timed out [ 211.056430][ T31] audit: type=1400 audit(1791490711.424:458): avc: denied { create } for pid=7571 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 211.061483][ T7575] FAULT_INJECTION: forcing a failure. [ 211.061483][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 211.061719][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.4.456 Not tainted syzkaller #0 PREEMPT(full) [ 211.061733][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 211.061739][ T7575] Call Trace: [ 211.061743][ T7575] [ 211.061748][ T7575] dump_stack_lvl+0x100/0x190 [ 211.061768][ T7575] should_fail_ex.cold+0x5/0xa [ 211.061785][ T7575] should_failslab+0xc2/0x120 [ 211.061801][ T7575] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 211.061816][ T7575] ? __alloc_skb+0x5b7/0x710 [ 211.061831][ T7575] ? __alloc_skb+0x140/0x710 [ 211.061849][ T7575] __alloc_skb+0x140/0x710 [ 211.061863][ T7575] ? __alloc_skb+0x5b7/0x710 [ 211.061878][ T7575] ? __pfx___alloc_skb+0x10/0x10 [ 211.061892][ T7575] ? lock_acquire+0x1d1/0x380 [ 211.061914][ T7575] alloc_skb_with_frags+0xdd/0x760 [ 211.061932][ T7575] ? __might_fault+0xc5/0x140 [ 211.061942][ T7575] ? __might_fault+0xc5/0x140 [ 211.061955][ T7575] sock_alloc_send_pskb+0x801/0x980 [ 211.061971][ T7575] ? _copy_from_iter+0x270/0x1690 [ 211.061988][ T7575] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 211.062002][ T7575] ? __lock_acquire+0x5c0/0x1f40 [ 211.062014][ T7575] ? _parse_integer_limit+0x1ac/0x220 [ 211.062033][ T7575] ? _kstrtoull+0x144/0x200 [ 211.062048][ T7575] ? iov_iter_advance+0xac/0x6d0 [ 211.062060][ T7575] ? __pfx__kstrtoull+0x10/0x10 [ 211.062078][ T7575] tun_get_user+0x7d0/0x3cc0 [ 211.062099][ T7575] ? __lock_acquire+0x5c0/0x1f40 [ 211.062111][ T7575] ? __pfx_tun_get_user+0x10/0x10 [ 211.062128][ T7575] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 211.062149][ T7575] ? find_held_lock+0x2b/0x80 [ 211.062165][ T7575] ? tun_get+0x191/0x370 [ 211.062177][ T7575] ? tun_get+0x191/0x370 [ 211.062195][ T7575] tun_chr_write_iter+0xdc/0x200 [ 211.062211][ T7575] vfs_write+0x6af/0x1050 [ 211.062225][ T7575] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 211.062241][ T7575] ? __pfx_vfs_write+0x10/0x10 [ 211.062253][ T7575] ? find_held_lock+0x2b/0x80 [ 211.062278][ T7575] ksys_write+0x12a/0x250 [ 211.062290][ T7575] ? __pfx_ksys_write+0x10/0x10 [ 211.062307][ T7575] do_syscall_64+0x123/0x790 [ 211.062321][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.062333][ T7575] RIP: 0033:0x7f69c059e199 [ 211.062343][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.062353][ T7575] RSP: 002b:00007f69c1516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.062364][ T7575] RAX: ffffffffffffffda RBX: 00007f69c0825fa0 RCX: 00007f69c059e199 [ 211.062371][ T7575] RDX: 0000000000000064 RSI: 0000200000000700 RDI: 0000000000000003 [ 211.062377][ T7575] RBP: 00007f69c1516090 R08: 0000000000000000 R09: 0000000000000000 [ 211.062383][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.062390][ T7575] R13: 00007f69c0826038 R14: 00007f69c0825fa0 R15: 00007fff58d51a78 [ 211.062404][ T7575] [ 211.085082][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.276285][ T9] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 211.311715][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.311747][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.469116][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.469133][ T9] usb 3-1: Product: syz [ 211.469141][ T9] usb 3-1: Manufacturer: syz [ 211.469150][ T9] usb 3-1: SerialNumber: syz [ 211.800842][ T9] usb 3-1: Limiting number of CPorts to U8_MAX [ 211.801206][ T9] usb 3-1: Not enough endpoints found in device, aborting! [ 212.723060][ T7588] FAULT_INJECTION: forcing a failure. [ 212.723060][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.723080][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.3.459 Not tainted syzkaller #0 PREEMPT(full) [ 212.723093][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 212.723099][ T7588] Call Trace: [ 212.723103][ T7588] [ 212.723108][ T7588] dump_stack_lvl+0x100/0x190 [ 212.723128][ T7588] should_fail_ex.cold+0x5/0xa [ 212.723145][ T7588] _copy_from_user+0x2e/0xd0 [ 212.723161][ T7588] __ext4_ioctl+0x10e2/0x4200 [ 212.723178][ T7588] ? __pfx___ext4_ioctl+0x10/0x10 [ 212.723193][ T7588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.723208][ T7588] ? do_vfs_ioctl+0x226/0x13e0 [ 212.723222][ T7588] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 212.723233][ T7588] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 212.723253][ T7588] ? __fget_files+0x34/0x3d0 [ 212.723274][ T7588] ? selinux_file_ioctl+0x13b/0x290 [ 212.723288][ T7588] ? selinux_file_ioctl+0xb6/0x290 [ 212.723303][ T7588] ? __pfx_ext4_ioctl+0x10/0x10 [ 212.723315][ T7588] __x64_sys_ioctl+0x18e/0x210 [ 212.723329][ T7588] do_syscall_64+0x123/0x790 [ 212.723344][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.723355][ T7588] RIP: 0033:0x7fe9bed9e199 [ 212.723365][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.723375][ T7588] RSP: 002b:00007fe9bfbb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.723386][ T7588] RAX: ffffffffffffffda RBX: 00007fe9bf026090 RCX: 00007fe9bed9e199 [ 212.723393][ T7588] RDX: 0000000000000000 RSI: 0000000040286608 RDI: 0000000000000007 [ 212.723400][ T7588] RBP: 00007fe9bfbb9090 R08: 0000000000000000 R09: 0000000000000000 [ 212.723406][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.723413][ T7588] R13: 00007fe9bf026128 R14: 00007fe9bf026090 R15: 00007ffe040ce708 [ 212.723427][ T7588] [ 212.963469][ T9] usb 3-1: USB disconnect, device number 20 [ 213.169514][ T7599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 213.169532][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.171417][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 213.199075][ T7599] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 213.199092][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.199113][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 213.200034][ T7599] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 213.200047][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.200066][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 213.251845][ T7599] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 213.251863][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.251882][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 213.283126][ T31] audit: type=1400 audit(1791490713.644:459): avc: denied { remount } for pid=7597 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 213.352000][ T7599] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 213.365097][ T7605] vhci_hcd: connection closed [ 213.366447][ T7607] vhci_hcd: connection closed [ 213.372643][ T7603] vhci_hcd: connection closed [ 213.373509][ T7601] vhci_hcd: connection closed [ 213.394046][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 213.409886][ T9] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 213.418522][ T7602] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 213.426412][ T5921] vhci_hcd vhci_hcd.1: release socket [ 213.430236][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 213.430665][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 213.430679][ T5921] vhci_hcd vhci_hcd.1: release socket [ 213.430736][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 213.432328][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 213.432337][ T5921] vhci_hcd vhci_hcd.1: release socket [ 213.432361][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 213.432386][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 213.432393][ T5921] vhci_hcd vhci_hcd.1: release socket [ 213.432401][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 213.541110][ T31] audit: type=1400 audit(1791490713.904:460): avc: denied { mount } for pid=7613 comm="syz.3.465" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 213.583451][ T31] audit: type=1400 audit(1791490713.944:461): avc: denied { mount } for pid=7609 comm="syz.4.464" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 213.662764][ T31] audit: type=1400 audit(1791490714.024:462): avc: denied { create } for pid=7617 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 213.740454][ T7618] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.804715][ T5902] rpcbind: server 127.0.0.1 not responding, timed out [ 213.854485][ T5698] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.978219][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 214.005289][ T5698] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 214.006057][ T5698] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.006071][ T5698] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 214.008569][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 214.008583][ T5698] usb 4-1: Product: syz [ 214.008591][ T5698] usb 4-1: Manufacturer: syz [ 214.072417][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 214.147275][ T5690] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 214.690410][ T5698] usb 4-1: USB disconnect, device number 14 [ 214.717548][ T31] audit: type=1400 audit(1791490715.084:463): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 214.746878][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 214.747925][ T5690] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 214.767090][ T5690] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.767109][ T5690] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.767125][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.767142][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.771250][ T5690] usb 3-1: config 0 descriptor?? [ 215.111402][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 216.244850][ T31] audit: type=1400 audit(1791490715.714:464): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 216.297565][ T7629] FAULT_INJECTION: forcing a failure. [ 216.297565][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 216.297587][ T7629] CPU: 0 UID: 0 PID: 7629 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT(full) [ 216.297602][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 216.297610][ T7629] Call Trace: [ 216.297614][ T7629] [ 216.297619][ T7629] dump_stack_lvl+0x100/0x190 [ 216.297644][ T7629] should_fail_ex.cold+0x5/0xa [ 216.297662][ T7629] should_failslab+0xc2/0x120 [ 216.297680][ T7629] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 216.297695][ T7629] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 216.297713][ T7629] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 216.297726][ T7629] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 216.297742][ T7629] alloc_inode+0x68/0x250 [ 216.297756][ T7629] new_inode+0x22/0x1c0 [ 216.297769][ T7629] hugetlbfs_get_inode+0x39a/0x700 [ 216.297782][ T7629] ? security_capable+0x80/0x260 [ 216.297797][ T7629] hugetlb_file_setup+0x3cc/0x5b0 [ 216.297814][ T7629] newseg+0xaf0/0xed0 [ 216.297833][ T7629] ? __pfx_newseg+0x10/0x10 [ 216.297847][ T7629] ? down_write+0x146/0x1f0 [ 216.297862][ T7629] ? ksys_write+0x190/0x250 [ 216.297876][ T7629] ipcget+0xee/0xf50 [ 216.297894][ T7629] ? __pfx_do_futex+0x10/0x10 [ 216.297911][ T7629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.297926][ T7629] ? __pfx_ipcget+0x10/0x10 [ 216.297947][ T7629] ? __x64_sys_futex+0x34f/0x4d0 [ 216.297963][ T7629] ? __x64_sys_futex+0x358/0x4d0 [ 216.297981][ T7629] __x64_sys_shmget+0x13b/0x1b0 [ 216.297999][ T7629] ? __pfx___x64_sys_shmget+0x10/0x10 [ 216.298019][ T7629] do_syscall_64+0x123/0x790 [ 216.298034][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.298046][ T7629] RIP: 0033:0x7f86be19e199 [ 216.298056][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.298069][ T7629] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 216.298082][ T7629] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 216.298091][ T7629] RDX: 0000000078001900 RSI: 0000000000001000 RDI: 0000000000000000 [ 216.298097][ T7629] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 216.298104][ T7629] R10: 0000200000ffe000 R11: 0000000000000246 R12: 0000000000000000 [ 216.298110][ T7629] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 216.298125][ T7629] [ 216.816265][ T5690] usbhid 3-1:0.0: can't add hid device: -71 [ 216.816319][ T5690] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 216.817612][ T5690] usb 3-1: USB disconnect, device number 21 [ 217.034545][ T5712] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.063408][ T7654] capability: warning: `syz.0.475' uses deprecated v2 capabilities in a way that may be insecure [ 217.064004][ T7654] overlayfs: failed to clone upperpath [ 217.187218][ T5712] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.187249][ T5712] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 217.304197][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.304213][ T5712] usb 4-1: Product: syz [ 217.304221][ T5712] usb 4-1: Manufacturer: syz [ 217.304230][ T5712] usb 4-1: SerialNumber: syz [ 217.591912][ T7661] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 217.591931][ T7661] overlayfs: missing 'lowerdir' [ 218.274567][ T7665] fuse: Bad value for 'fd' [ 218.590014][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 219.742808][ T7679] FAULT_INJECTION: forcing a failure. [ 219.742808][ T7679] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 219.742828][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) [ 219.742848][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 219.742857][ T7679] Call Trace: [ 219.742861][ T7679] [ 219.742866][ T7679] dump_stack_lvl+0x100/0x190 [ 219.742886][ T7679] should_fail_ex.cold+0x5/0xa [ 219.742900][ T7679] ? prepare_alloc_pages+0x16d/0x5b0 [ 219.742918][ T7679] should_fail_alloc_page+0xeb/0x140 [ 219.742935][ T7679] prepare_alloc_pages+0x1f0/0x5b0 [ 219.742951][ T7679] ? down_write+0x146/0x1f0 [ 219.742967][ T7679] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 219.742982][ T7679] ? process_measurement+0x1f4/0x2350 [ 219.742999][ T7679] ? __lock_acquire+0x5c0/0x1f40 [ 219.743014][ T7679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.743030][ T7679] ? lock_acquire+0x1d1/0x380 [ 219.743042][ T7679] ? unwind_next_frame+0xbd/0x2090 [ 219.743061][ T7679] ? lock_acquire+0x1d1/0x380 [ 219.743073][ T7679] ? is_bpf_text_address+0x25/0x1a0 [ 219.743091][ T7679] ? is_bpf_text_address+0x8a/0x1a0 [ 219.743107][ T7679] ? bpf_ksym_find+0x128/0x1c0 [ 219.743118][ T7679] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 219.743131][ T7679] ? is_bpf_text_address+0x94/0x1a0 [ 219.743147][ T7679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.743162][ T7679] ? policy_nodemask+0xed/0x4f0 [ 219.743180][ T7679] alloc_pages_mpol+0x201/0x550 [ 219.743197][ T7679] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.743218][ T7679] alloc_pages_noprof+0x1a/0x160 [ 219.743229][ T7679] __pud_alloc+0x3b/0x690 [ 219.743246][ T7679] __handle_mm_fault+0x1078/0x2f60 [ 219.743268][ T7679] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.743285][ T7679] ? __pfx_mt_find+0x10/0x10 [ 219.743306][ T7679] ? find_vma+0xbf/0x140 [ 219.743320][ T7679] ? __pfx_find_vma+0x10/0x10 [ 219.743335][ T7679] handle_mm_fault+0x363/0xa20 [ 219.743348][ T7679] do_user_addr_fault+0x745/0x12f0 [ 219.743367][ T7679] exc_page_fault+0x6f/0xd0 [ 219.743379][ T7679] asm_exc_page_fault+0x26/0x30 [ 219.743390][ T7679] RIP: 0010:__put_user_4+0xd/0x30 [ 219.743402][ T7679] Code: 66 89 01 31 c9 0f 01 ca e9 90 ed 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 219.743412][ T7679] RSP: 0018:ffffc90003567e10 EFLAGS: 00050206 [ 219.743422][ T7679] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 219.743429][ T7679] RDX: ffff88801f392580 RSI: ffffffff8261d7a1 RDI: ffffffff8c623a80 [ 219.743436][ T7679] RBP: 1ffff920006acfc6 R08: 0000000000006d05 R09: 00000000000001cf [ 219.743443][ T7679] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000004 [ 219.743449][ T7679] R13: 0000000000000005 R14: 0000000000000002 R15: dffffc0000000000 [ 219.743460][ T7679] ? __might_fault+0x111/0x140 [ 219.743473][ T7679] __sys_socketpair+0x120/0x5b0 [ 219.743488][ T7679] ? __pfx___sys_socketpair+0x10/0x10 [ 219.743504][ T7679] ? __pfx_ksys_write+0x10/0x10 [ 219.743520][ T7679] __x64_sys_socketpair+0x96/0x100 [ 219.743533][ T7679] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.743545][ T7679] do_syscall_64+0x123/0x790 [ 219.743559][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.743569][ T7679] RIP: 0033:0x7f86be19e199 [ 219.743578][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.743588][ T7679] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 219.743598][ T7679] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 219.743605][ T7679] RDX: 0000000000000005 RSI: 0000000000000002 RDI: 0000000000000029 [ 219.743611][ T7679] RBP: 00007f86bf107090 R08: 0000000000000000 R09: 0000000000000000 [ 219.743618][ T7679] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.743624][ T7679] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 219.743639][ T7679] [ 219.850742][ T31] audit: type=1400 audit(1791490720.214:465): avc: denied { setopt } for pid=7648 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.225174][ T5712] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 220.225206][ T5712] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 220.225901][ T5712] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 220.281725][ T5712] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 220.309422][ T5712] usb 4-1: USB disconnect, device number 15 [ 221.519877][ T7698] FAULT_INJECTION: forcing a failure. [ 221.519877][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 221.519898][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.3.493 Not tainted syzkaller #0 PREEMPT(full) [ 221.519911][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 221.519917][ T7698] Call Trace: [ 221.519921][ T7698] [ 221.519926][ T7698] dump_stack_lvl+0x100/0x190 [ 221.519945][ T7698] should_fail_ex.cold+0x5/0xa [ 221.519961][ T7698] should_failslab+0xc2/0x120 [ 221.519978][ T7698] __kmalloc_noprof+0xfc/0x840 [ 221.519992][ T7698] ? video_usercopy+0x1a3/0x1730 [ 221.520006][ T7698] video_usercopy+0x1a3/0x1730 [ 221.520018][ T7698] ? __pfx___video_do_ioctl+0x10/0x10 [ 221.520027][ T7698] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 221.520046][ T7698] ? __pfx_video_usercopy+0x10/0x10 [ 221.520066][ T7698] v4l2_ioctl+0x1bd/0x250 [ 221.520077][ T7698] ? __pfx_v4l2_ioctl+0x10/0x10 [ 221.520089][ T7698] __x64_sys_ioctl+0x18e/0x210 [ 221.520104][ T7698] do_syscall_64+0x123/0x790 [ 221.520118][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.520129][ T7698] RIP: 0033:0x7fe9bed9e199 [ 221.520139][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.520149][ T7698] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.520160][ T7698] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 221.520168][ T7698] RDX: 0000200000000280 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 221.520174][ T7698] RBP: 00007fe9bfbda090 R08: 0000000000000000 R09: 0000000000000000 [ 221.520181][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.520187][ T7698] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 221.520201][ T7698] [ 222.393320][ T5902] rpcbind: server 127.0.0.1 not responding, timed out [ 222.603658][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.494'. [ 222.822102][ T7711] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 222.840726][ T31] audit: type=1400 audit(1791490723.204:466): avc: denied { map } for pid=7687 comm="syz.0.487" path="socket:[15296]" dev="sockfs" ino=15296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 223.510993][ T31] audit: type=1400 audit(1791490723.874:467): avc: denied { getopt } for pid=7712 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.368828][ T7731] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 224.368843][ T7731] audit: out of memory in audit_log_start [ 224.514022][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 226.130535][ T7739] netlink: 128 bytes leftover after parsing attributes in process `syz.4.507'. [ 226.335550][ T5712] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 226.927304][ T7751] tmpfs: Bad value for 'mpol' [ 226.947521][ T7751] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 227.007566][ T5712] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.011058][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.011074][ T5712] usb 2-1: Product: syz [ 227.011082][ T5712] usb 2-1: Manufacturer: syz [ 227.011091][ T5712] usb 2-1: SerialNumber: syz [ 227.012416][ T5712] usb 2-1: config 0 descriptor?? [ 227.092722][ T31] audit: type=1400 audit(1791490727.454:468): avc: denied { write } for pid=7754 comm="syz.0.512" path="socket:[15514]" dev="sockfs" ino=15514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.238655][ T5712] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.245134][ T5902] rpcbind: server 127.0.0.1 not responding, timed out [ 227.324575][ T5698] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 227.474510][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 227.475614][ T5698] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 227.479154][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.479171][ T5698] usb 3-1: Product: syz [ 227.479182][ T5698] usb 3-1: Manufacturer: syz [ 227.479192][ T5698] usb 3-1: SerialNumber: syz [ 227.484135][ T5698] usb 3-1: config 0 descriptor?? [ 227.891762][ T31] audit: type=1400 audit(1791490728.254:469): avc: denied { name_bind } for pid=7759 comm="syz.4.510" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 227.959158][ T5698] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 228.000517][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.002359][ T5698] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 228.002399][ T5698] usb 3-1: media controller created [ 228.055023][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.860104][ T5698] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 228.860118][ T5698] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 228.964323][ T5712] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 228.983279][ T5712] usb 2-1: USB disconnect, device number 17 [ 229.063238][ T5698] usb 3-1: USB disconnect, device number 22 [ 229.114269][ T5698] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 229.977679][ T5914] rpcbind: RPC call returned error 22 [ 230.140603][ T31] audit: type=1400 audit(1791490730.504:470): avc: denied { create } for pid=7771 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.235154][ T31] audit: type=1400 audit(1791490730.604:471): avc: denied { mounton } for pid=7776 comm="syz.3.517" path="/116/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 230.389575][ T31] audit: type=1400 audit(1791490730.754:472): avc: denied { getopt } for pid=7786 comm="syz.0.519" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.475914][ T5698] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 230.481929][ T7787] bond1: (slave virt_wifi0): Device is not bonding slave [ 230.481946][ T7787] bond1: option active_slave: invalid value (virt_wifi0) [ 230.509956][ T7787] bond1 (unregistering): Released all slaves [ 231.258659][ T5698] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.260790][ T5698] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.261943][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.261958][ T5698] usb 4-1: SerialNumber: syz [ 231.607506][ T31] audit: type=1400 audit(1791490731.964:473): avc: denied { read } for pid=7799 comm="syz.1.523" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.608436][ T31] audit: type=1400 audit(1791490731.974:474): avc: denied { open } for pid=7799 comm="syz.1.523" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.773809][ T31] audit: type=1400 audit(1791490732.134:475): avc: denied { ioctl } for pid=7799 comm="syz.1.523" path="socket:[15698]" dev="sockfs" ino=15698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 231.802757][ T31] audit: type=1400 audit(1791490732.174:476): avc: denied { map } for pid=7799 comm="syz.1.523" path="socket:[15697]" dev="sockfs" ino=15697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.802787][ T31] audit: type=1400 audit(1791490732.174:477): avc: denied { read } for pid=7799 comm="syz.1.523" path="socket:[15697]" dev="sockfs" ino=15697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.878610][ T7800] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.974210][ T5698] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 232.138822][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'. [ 232.138837][ T7808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'. [ 232.138844][ T7808] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 232.218544][ T5698] usb 4-1: USB disconnect, device number 16 [ 232.235424][ T5698] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 232.419469][ T7813] FAULT_INJECTION: forcing a failure. [ 232.419469][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 232.419493][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.2.521 Not tainted syzkaller #0 PREEMPT(full) [ 232.419508][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 232.419515][ T7813] Call Trace: [ 232.419520][ T7813] [ 232.419525][ T7813] dump_stack_lvl+0x100/0x190 [ 232.419545][ T7813] should_fail_ex.cold+0x5/0xa [ 232.419562][ T7813] should_failslab+0xc2/0x120 [ 232.419580][ T7813] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 232.419594][ T7813] ? do_futex+0x190/0x440 [ 232.419611][ T7813] ? alloc_inode+0x183/0x250 [ 232.419626][ T7813] alloc_inode+0x183/0x250 [ 232.419638][ T7813] create_pipe_files+0x4c/0x970 [ 232.419656][ T7813] do_pipe2+0xbd/0x1e0 [ 232.419671][ T7813] ? __pfx_do_pipe2+0x10/0x10 [ 232.419692][ T7813] __x64_sys_pipe+0x33/0x50 [ 232.419707][ T7813] do_syscall_64+0x123/0x790 [ 232.419722][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.419733][ T7813] RIP: 0033:0x7f86be19e199 [ 232.419743][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.419753][ T7813] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 232.419770][ T7813] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 232.419777][ T7813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.419783][ T7813] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 232.419790][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.419797][ T7813] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 232.419813][ T7813] [ 233.284051][ T7821] tipc: Started in network mode [ 233.284071][ T7821] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 233.284096][ T7821] tipc: Enabling of bearer rejected, failed to enable media [ 233.621161][ T7829] FAULT_INJECTION: forcing a failure. [ 233.621161][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 233.621193][ T7829] CPU: 0 UID: 0 PID: 7829 Comm: syz.3.531 Not tainted syzkaller #0 PREEMPT(full) [ 233.621208][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 233.621216][ T7829] Call Trace: [ 233.621220][ T7829] [ 233.621225][ T7829] dump_stack_lvl+0x100/0x190 [ 233.621247][ T7829] should_fail_ex.cold+0x5/0xa [ 233.621265][ T7829] should_failslab+0xc2/0x120 [ 233.621283][ T7829] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 233.621299][ T7829] ? lock_acquire+0x1d1/0x380 [ 233.621312][ T7829] ? security_netlbl_sid_to_secattr+0x94/0x4d0 [ 233.621323][ T7829] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 233.621337][ T7829] kstrdup+0x51/0xe0 [ 233.621350][ T7829] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 233.621363][ T7829] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 233.621379][ T7829] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 233.621395][ T7829] selinux_socket_post_create+0x368/0x7e0 [ 233.621410][ T7829] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 233.621424][ T7829] ? tcp_v6_init_sock+0x15/0xb0 [ 233.621437][ T7829] ? __pfx_tcp_v6_init_sock+0x10/0x10 [ 233.621450][ T7829] ? inet6_create+0xb34/0x12b0 [ 233.621465][ T7829] security_socket_post_create+0xaf/0x270 [ 233.621480][ T7829] __sock_create+0x70b/0x860 [ 233.621496][ T7829] __sys_socket+0x14d/0x260 [ 233.621511][ T7829] ? __pfx___sys_socket+0x10/0x10 [ 233.621529][ T7829] __x64_sys_socket+0x72/0xb0 [ 233.621541][ T7829] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.621554][ T7829] do_syscall_64+0x123/0x790 [ 233.621567][ T7829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.621578][ T7829] RIP: 0033:0x7fe9bed9e199 [ 233.621588][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.621599][ T7829] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 233.621610][ T7829] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 233.621618][ T7829] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 233.621624][ T7829] RBP: 00007fe9bee35888 R08: 0000000000000000 R09: 0000000000000000 [ 233.621630][ T7829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.621636][ T7829] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 233.621650][ T7829] [ 235.198038][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 235.941786][ T31] audit: type=1400 audit(1791490736.304:478): avc: denied { write } for pid=7812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.484602][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'. [ 236.515915][ T7854] dummy0: entered promiscuous mode [ 236.603272][ T31] audit: type=1400 audit(1791490736.964:479): avc: denied { write } for pid=7856 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.802875][ T7829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.034083][ T31] audit: type=1400 audit(1791490738.394:480): avc: denied { associate } for pid=7868 comm="syz.4.540" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.104039][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 240.122345][ T31] audit: type=1400 audit(1791490740.484:481): avc: denied { write } for pid=7862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.263100][ T7896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7896 comm=syz.2.537 [ 240.284747][ T7897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7897 comm=syz.2.537 [ 240.358766][ T31] audit: type=1400 audit(1791490740.724:482): avc: denied { write } for pid=7898 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.586088][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 240.735013][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 240.735768][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 240.735792][ T9] usb 3-1: config 7 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 240.735806][ T9] usb 3-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.735827][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.861424][ T31] audit: type=1400 audit(1791490741.224:483): avc: denied { write } for pid=7903 comm="syz.4.544" name="usb_gadget" dev="configfs" ino=3526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.899550][ T31] audit: type=1400 audit(1791490741.264:484): avc: denied { add_name } for pid=7903 comm="syz.4.544" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.945135][ T5712] usb 3-1: USB disconnect, device number 23 [ 240.960951][ T31] audit: type=1400 audit(1791490741.324:485): avc: denied { create } for pid=7903 comm="syz.4.544" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 241.010655][ T31] audit: type=1400 audit(1791490741.374:486): avc: denied { mount } for pid=7907 comm="syz.3.546" name="/" dev="ramfs" ino=15955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.061018][ T31] audit: type=1400 audit(1791490741.424:487): avc: denied { execute } for pid=7907 comm="syz.3.546" path="/file1" dev="ramfs" ino=15965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 241.179884][ T31] audit: type=1400 audit(1791490741.544:488): avc: denied { create } for pid=7916 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.272849][ T31] audit: type=1400 audit(1791490742.634:489): avc: denied { read } for pid=7909 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.987843][ T7917] netlink: 'syz.0.548': attribute type 2 has an invalid length. [ 243.251648][ T7923] FAULT_INJECTION: forcing a failure. [ 243.251648][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 243.251670][ T7923] CPU: 0 UID: 0 PID: 7923 Comm: syz.2.549 Not tainted syzkaller #0 PREEMPT(full) [ 243.251685][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 243.251693][ T7923] Call Trace: [ 243.251697][ T7923] [ 243.251702][ T7923] dump_stack_lvl+0x100/0x190 [ 243.251724][ T7923] should_fail_ex.cold+0x5/0xa [ 243.251742][ T7923] should_failslab+0xc2/0x120 [ 243.251760][ T7923] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 243.251775][ T7923] ? __d_alloc+0x35/0xa50 [ 243.251787][ T7923] __d_alloc+0x35/0xa50 [ 243.251799][ T7923] d_alloc_pseudo+0x1c/0xc0 [ 243.251811][ T7923] alloc_file_pseudo+0x118/0x290 [ 243.251829][ T7923] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 243.251846][ T7923] ? alloc_fd+0x471/0x7a0 [ 243.251865][ T7923] sock_alloc_file+0x50/0x210 [ 243.251883][ T7923] __sys_socket+0x1c0/0x260 [ 243.251895][ T7923] ? __pfx___sys_socket+0x10/0x10 [ 243.251913][ T7923] __x64_sys_socket+0x72/0xb0 [ 243.251925][ T7923] ? lockdep_hardirqs_on+0x7d/0x110 [ 243.251937][ T7923] do_syscall_64+0x123/0x790 [ 243.251951][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.251962][ T7923] RIP: 0033:0x7f86be19e199 [ 243.251972][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.251982][ T7923] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 243.251993][ T7923] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 243.252000][ T7923] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 243.252006][ T7923] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 243.252012][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.252018][ T7923] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 243.252033][ T7923] [ 243.594518][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.667840][ T31] audit: type=1400 audit(1791490744.034:490): avc: denied { setattr } for pid=7928 comm="syz.3.551" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.723786][ T31] audit: type=1400 audit(1791490744.084:491): avc: denied { mounton } for pid=7928 comm="syz.3.551" path="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.766001][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 243.767945][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 243.769877][ T9] usb 2-1: config 3 has an invalid interface number: 79 but max is 0 [ 243.769893][ T9] usb 2-1: config 3 has no interface number 0 [ 243.769910][ T9] usb 2-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 243.769924][ T9] usb 2-1: config 3 interface 79 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.769936][ T9] usb 2-1: config 3 interface 79 has no altsetting 0 [ 243.805881][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.805896][ T9] usb 2-1: Product: syz [ 243.805905][ T9] usb 2-1: Manufacturer: syz [ 243.805913][ T9] usb 2-1: SerialNumber: syz [ 243.913321][ T7931] 9p: Could not find request transport: Qd [ 244.455151][ T7944] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 245.370066][ T9] kobil_sct 2-1:3.79: KOBIL USB smart card terminal converter detected [ 245.401708][ T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 245.415519][ T31] audit: type=1400 audit(1791490745.784:492): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 245.417978][ T9] usb 2-1: USB disconnect, device number 18 [ 245.451325][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 245.451575][ T9] kobil_sct 2-1:3.79: device disconnected [ 245.604450][ T1076] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 245.741747][ T1076] usb 4-1: device descriptor read/64, error -71 [ 246.086767][ T1076] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 246.274583][ T7923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.311182][ T1076] usb 4-1: device descriptor read/64, error -71 [ 246.415883][ T1076] usb usb4-port1: attempt power cycle [ 246.554515][ T31] audit: type=1400 audit(1791490746.914:493): avc: denied { listen } for pid=7952 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.554765][ T31] audit: type=1400 audit(1791490746.924:494): avc: denied { accept } for pid=7952 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.755399][ T1076] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 246.775192][ T1076] usb 4-1: device descriptor read/8, error -71 [ 247.059305][ T1076] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 247.093234][ T5791] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 247.325857][ T1076] usb 4-1: device descriptor read/8, error -71 [ 247.398578][ T5791] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 247.402886][ T5791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.402905][ T5791] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 247.435032][ T1076] usb usb4-port1: unable to enumerate USB device [ 247.741526][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.741545][ T5791] usb 3-1: Product: syz [ 247.741554][ T5791] usb 3-1: Manufacturer: syz [ 247.741562][ T5791] usb 3-1: SerialNumber: syz [ 247.905923][ T31] audit: type=1400 audit(1791490748.274:495): avc: denied { read } for pid=7968 comm="syz.4.564" path="socket:[16145]" dev="sockfs" ino=16145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.086075][ T5791] usb 3-1: Limiting number of CPorts to U8_MAX [ 248.091500][ T31] audit: type=1400 audit(1791490748.454:496): avc: denied { map } for pid=7968 comm="syz.4.564" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.091708][ T31] audit: type=1400 audit(1791490748.454:497): avc: denied { execute } for pid=7968 comm="syz.4.564" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.990952][ T5791] usb 3-1: failed to set cport flags for port 0 [ 248.990991][ T5791] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 249.061031][ T5791] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 249.249624][ T31] audit: type=1400 audit(1791490749.614:498): avc: denied { append } for pid=7968 comm="syz.4.564" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.249812][ T31] audit: type=1400 audit(1791490749.614:499): avc: denied { ioctl } for pid=7968 comm="syz.4.564" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.204268][ T7979] EXT4-fs warning (device sda1): verify_group_input:161: Bad blocks count 0 [ 250.234027][ T1076] usb 3-1: USB disconnect, device number 24 [ 250.290005][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.290038][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.076078][ T7987] FAULT_INJECTION: forcing a failure. [ 251.076078][ T7987] name failslab, interval 1, probability 0, space 0, times 0 [ 251.076101][ T7987] CPU: 0 UID: 0 PID: 7987 Comm: syz.2.569 Not tainted syzkaller #0 PREEMPT(full) [ 251.076116][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 251.076123][ T7987] Call Trace: [ 251.076129][ T7987] [ 251.076134][ T7987] dump_stack_lvl+0x100/0x190 [ 251.076157][ T7987] should_fail_ex.cold+0x5/0xa [ 251.076174][ T7987] should_failslab+0xc2/0x120 [ 251.076192][ T7987] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 251.076209][ T7987] ? __d_alloc+0x35/0xa50 [ 251.076223][ T7987] __d_alloc+0x35/0xa50 [ 251.076234][ T7987] d_alloc_pseudo+0x1c/0xc0 [ 251.076247][ T7987] alloc_file_pseudo+0x118/0x290 [ 251.076265][ T7987] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 251.076282][ T7987] ? alloc_fd+0x471/0x7a0 [ 251.076300][ T7987] sock_alloc_file+0x50/0x210 [ 251.076318][ T7987] __sys_socket+0x1c0/0x260 [ 251.076331][ T7987] ? __pfx___sys_socket+0x10/0x10 [ 251.076348][ T7987] __x64_sys_socket+0x72/0xb0 [ 251.076360][ T7987] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.076372][ T7987] do_syscall_64+0x123/0x790 [ 251.076386][ T7987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.076397][ T7987] RIP: 0033:0x7f86be19e199 [ 251.076407][ T7987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.076418][ T7987] RSP: 002b:00007f86bf107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 251.076429][ T7987] RAX: ffffffffffffffda RBX: 00007f86be425fa0 RCX: 00007f86be19e199 [ 251.076436][ T7987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 251.076443][ T7987] RBP: 00007f86be235888 R08: 0000000000000000 R09: 0000000000000000 [ 251.076449][ T7987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.076456][ T7987] R13: 00007f86be426038 R14: 00007f86be425fa0 R15: 00007ffd0e9fd918 [ 251.076470][ T7987] [ 252.712143][ T8011] netlink: 31 bytes leftover after parsing attributes in process `syz.1.578'. [ 252.714055][ T8011] FAULT_INJECTION: forcing a failure. [ 252.714055][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.714075][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.1.578 Not tainted syzkaller #0 PREEMPT(full) [ 252.714088][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 252.714094][ T8011] Call Trace: [ 252.714098][ T8011] [ 252.714103][ T8011] dump_stack_lvl+0x100/0x190 [ 252.714124][ T8011] should_fail_ex.cold+0x5/0xa [ 252.714141][ T8011] _copy_from_iter+0x1f4/0x1690 [ 252.714157][ T8011] ? __asan_memset+0x23/0x50 [ 252.714171][ T8011] ? __pfx__copy_from_iter+0x10/0x10 [ 252.714184][ T8011] ? __pfx___alloc_skb+0x10/0x10 [ 252.714206][ T8011] netlink_sendmsg+0x808/0xda0 [ 252.714224][ T8011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.714241][ T8011] ? selinux_socket_sendmsg+0x198/0x2f0 [ 252.714258][ T8011] ____sys_sendmsg+0xa4d/0xbe0 [ 252.714269][ T8011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.714285][ T8011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.714301][ T8011] ? lock_acquire+0x1d1/0x380 [ 252.714313][ T8011] ? get_pid_task+0x2a/0x250 [ 252.714330][ T8011] ___sys_sendmsg+0x190/0x1e0 [ 252.714346][ T8011] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.714359][ T8011] ? get_pid_task+0x106/0x250 [ 252.714380][ T8011] ? find_held_lock+0x2b/0x80 [ 252.714405][ T8011] __sys_sendmsg+0x160/0x210 [ 252.714422][ T8011] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.714446][ T8011] do_syscall_64+0x123/0x790 [ 252.714460][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.714472][ T8011] RIP: 0033:0x7f3f7c39e199 [ 252.714481][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.714491][ T8011] RSP: 002b:00007f3f7d324028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.714503][ T8011] RAX: ffffffffffffffda RBX: 00007f3f7c626090 RCX: 00007f3f7c39e199 [ 252.714510][ T8011] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 252.714516][ T8011] RBP: 00007f3f7d324090 R08: 0000000000000000 R09: 0000000000000000 [ 252.714522][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.714529][ T8011] R13: 00007f3f7c626128 R14: 00007f3f7c626090 R15: 00007ffeeed07558 [ 252.714543][ T8011] [ 252.723654][ T31] audit: type=1400 audit(1791490753.074:500): avc: denied { write } for pid=8008 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.048729][ T8015] FAULT_INJECTION: forcing a failure. [ 254.048729][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 254.048754][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT(full) [ 254.048768][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 254.048775][ T8015] Call Trace: [ 254.048779][ T8015] [ 254.048784][ T8015] dump_stack_lvl+0x100/0x190 [ 254.048804][ T8015] should_fail_ex.cold+0x5/0xa [ 254.048822][ T8015] ? __pfx_ucma_event_handler+0x10/0x10 [ 254.048841][ T8015] should_failslab+0xc2/0x120 [ 254.048858][ T8015] ? __pfx_ucma_event_handler+0x10/0x10 [ 254.048874][ T8015] __kmalloc_cache_noprof+0x91/0x6d0 [ 254.048886][ T8015] ? lock_acquire+0x1d1/0x380 [ 254.048899][ T8015] ? __rdma_create_id+0x5b/0x8f0 [ 254.048917][ T8015] ? __pfx_ucma_event_handler+0x10/0x10 [ 254.048933][ T8015] __rdma_create_id+0x5b/0x8f0 [ 254.048949][ T8015] ? __pfx_ucma_event_handler+0x10/0x10 [ 254.048967][ T8015] rdma_create_user_id+0x7d/0xe0 [ 254.048984][ T8015] ucma_create_id+0x189/0x380 [ 254.049000][ T8015] ? __pfx_ucma_create_id+0x10/0x10 [ 254.049017][ T8015] ? __might_fault+0xc5/0x140 [ 254.049036][ T8015] ? __pfx_ucma_create_id+0x10/0x10 [ 254.049052][ T8015] ucma_write+0x1fb/0x330 [ 254.049067][ T8015] ? __pfx_ucma_write+0x10/0x10 [ 254.049081][ T8015] ? bpf_lsm_file_permission+0x9/0x10 [ 254.049097][ T8015] ? security_file_permission+0x76/0x210 [ 254.049114][ T8015] ? rw_verify_area+0xce/0x6d0 [ 254.049126][ T8015] vfs_write+0x2aa/0x1050 [ 254.049139][ T8015] ? __pfx_ucma_write+0x10/0x10 [ 254.049153][ T8015] ? lock_acquire+0x1d1/0x380 [ 254.049165][ T8015] ? __fget_files+0x34/0x3d0 [ 254.049181][ T8015] ? __pfx_vfs_write+0x10/0x10 [ 254.049192][ T8015] ? find_held_lock+0x2b/0x80 [ 254.049208][ T8015] ? __fget_files+0x215/0x3d0 [ 254.049222][ T8015] ? __fget_files+0x215/0x3d0 [ 254.049239][ T8015] ? __fget_files+0x21f/0x3d0 [ 254.049258][ T8015] ksys_write+0x1f8/0x250 [ 254.049270][ T8015] ? __pfx_ksys_write+0x10/0x10 [ 254.049287][ T8015] do_syscall_64+0x123/0x790 [ 254.049302][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.049313][ T8015] RIP: 0033:0x7fe9bed9e199 [ 254.049324][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.049334][ T8015] RSP: 002b:00007fe9bfbda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.049346][ T8015] RAX: ffffffffffffffda RBX: 00007fe9bf025fa0 RCX: 00007fe9bed9e199 [ 254.049354][ T8015] RDX: 0000000000000020 RSI: 00002000000006c0 RDI: 0000000000000005 [ 254.049361][ T8015] RBP: 00007fe9bee35888 R08: 0000000000000000 R09: 0000000000000000 [ 254.049367][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.049374][ T8015] R13: 00007fe9bf026038 R14: 00007fe9bf025fa0 R15: 00007ffe040ce708 [ 254.049388][ T8015] [ 254.509772][ T8019] syzkaller1: entered promiscuous mode [ 254.509788][ T8019] syzkaller1: entered allmulticast mode [ 254.697927][ T31] audit: type=1400 audit(1791490755.064:501): avc: denied { setopt } for pid=8020 comm="syz.2.582" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.648324][ T8052] FAULT_INJECTION: forcing a failure. [ 256.648324][ T8052] name failslab, interval 1, probability 0, space 0, times 0 [ 256.648346][ T8052] CPU: 0 UID: 0 PID: 8052 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT(full) [ 256.648360][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 256.648368][ T8052] Call Trace: [ 256.648373][ T8052] [ 256.648378][ T8052] dump_stack_lvl+0x100/0x190 [ 256.648399][ T8052] should_fail_ex.cold+0x5/0xa [ 256.648415][ T8052] should_failslab+0xc2/0x120 [ 256.648432][ T8052] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 256.648448][ T8052] ? __d_alloc+0x35/0xa50 [ 256.648460][ T8052] __d_alloc+0x35/0xa50 [ 256.648471][ T8052] d_alloc_pseudo+0x1c/0xc0 [ 256.648484][ T8052] alloc_file_pseudo+0x118/0x290 [ 256.648510][ T8052] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 256.648529][ T8052] ? alloc_fd+0x471/0x7a0 [ 256.648548][ T8052] sock_alloc_file+0x50/0x210 [ 256.648567][ T8052] __sys_socket+0x1c0/0x260 [ 256.648581][ T8052] ? __pfx___sys_socket+0x10/0x10 [ 256.648598][ T8052] __x64_sys_socket+0x72/0xb0 [ 256.648612][ T8052] ? lockdep_hardirqs_on+0x7d/0x110 [ 256.648625][ T8052] do_syscall_64+0x123/0x790 [ 256.648639][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.648651][ T8052] RIP: 0033:0x7f69c059e199 [ 256.648661][ T8052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.648671][ T8052] RSP: 002b:00007f69c1516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 256.648683][ T8052] RAX: ffffffffffffffda RBX: 00007f69c0825fa0 RCX: 00007f69c059e199 [ 256.648690][ T8052] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 256.648696][ T8052] RBP: 00007f69c0635888 R08: 0000000000000000 R09: 0000000000000000 [ 256.648703][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.648709][ T8052] R13: 00007f69c0826038 R14: 00007f69c0825fa0 R15: 00007fff58d51a78 [ 256.648724][ T8052] [ 256.967155][ T8054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 256.967171][ T8054] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.967207][ T8054] vhci_hcd vhci_hcd.0: Device attached [ 256.968592][ T8058] vhci_hcd: xmit failed -107 [ 256.969754][ T5942] vhci_hcd vhci_hcd.0: stop threads [ 256.969764][ T5942] vhci_hcd vhci_hcd.0: release socket [ 256.969773][ T5942] vhci_hcd vhci_hcd.0: disconnect device [ 259.352716][ T5791] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.424434][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 260.276801][ T5791] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 260.277529][ T5791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 260.277543][ T5791] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 260.279941][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.279956][ T5791] usb 4-1: Product: syz [ 260.279964][ T5791] usb 4-1: Manufacturer: syz [ 260.279973][ T5791] usb 4-1: SerialNumber: syz [ 260.346444][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 260.346847][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 260.352928][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.352957][ T9] usb 5-1: Product: syz [ 260.352965][ T9] usb 5-1: Manufacturer: syz [ 260.352974][ T9] usb 5-1: SerialNumber: syz [ 260.394674][ T9] usb 5-1: config 0 descriptor?? [ 260.523300][ T5791] usb 4-1: Limiting number of CPorts to U8_MAX [ 260.871622][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 260.875077][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.896266][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 260.896295][ T9] usb 5-1: media controller created [ 261.117555][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.207393][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 261.207407][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 261.303915][ C0] usb 4-1: short aprc response received [ 261.540110][ T5698] usb 5-1: USB disconnect, device number 24 [ 261.595499][ T5791] usb 4-1: failed to execute ARPC: -110 [ 261.595515][ T5791] usb 4-1: failed to set connected state for cport 0: -110 [ 261.595527][ T5791] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 261.602539][ T5698] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 262.786491][ T5791] usb 4-1: failed to send ARPC request 3: -110 [ 262.786545][ T5791] usb 4-1: failed to execute ARPC: -110 [ 262.786553][ T5791] usb 4-1: failed to clear cport 0: -110 [ 262.786564][ T5791] greybus greybus1: 0/0:0: failed to clear host cport: -110 [ 262.820984][ T5791] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 262.913922][ T1076] usb 4-1: USB disconnect, device number 21 [ 264.094381][ T5791] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.315067][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 264.540650][ T5791] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 264.598844][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 264.598867][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 265.639374][ T5899] rpcbind: server 127.0.0.1 not responding, timed out [ 265.657204][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.657221][ T5791] usb 3-1: Product: syz [ 265.657229][ T5791] usb 3-1: Manufacturer: syz [ 265.657238][ T5791] usb 3-1: SerialNumber: syz [ 265.660928][ T5791] usb 3-1: config 0 descriptor?? [ 266.691956][ T5791] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 266.807382][ T5942] usb 3-1: Failed to submit usb control message: -71 [ 266.807406][ T5942] usb 3-1: unable to send the bmi data to the device: -71 [ 266.807415][ T5942] usb 3-1: unable to get target info from device [ 266.807423][ T5942] usb 3-1: could not get target info (-71) [ 266.807637][ T5942] usb 3-1: could not probe fw (-71) [ 266.808809][ T5791] usb 3-1: USB disconnect, device number 25 [ 267.007175][ T31] audit: type=1400 audit(1791490767.374:502): avc: denied { ioctl } for pid=8136 comm="syz.2.614" path="/98/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 267.796510][ T8147] tipc: Cannot configure node identity twice [ 267.883595][ T31] audit: type=1326 audit(1791490768.246:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 267.913804][ T31] audit: type=1326 audit(1791490768.286:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 267.942291][ T31] audit: type=1326 audit(1791490768.306:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 267.942321][ T31] audit: type=1326 audit(1791490768.306:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 268.001907][ T31] audit: type=1326 audit(1791490768.366:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 268.001937][ T31] audit: type=1326 audit(1791490768.366:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 268.001957][ T31] audit: type=1326 audit(1791490768.366:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 268.095473][ T31] audit: type=1326 audit(1791490768.466:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 268.095503][ T31] audit: type=1326 audit(1791490768.466:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.1.615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7c39e199 code=0x7ffc0000 [ 269.844310][ T8155] trusted_key: encrypted_key: insufficient parameters specified [ 269.850325][ T8155] netlink: 128 bytes leftover after parsing attributes in process `syz.2.620'. [ 269.872470][ T5908] rpcbind: server 127.0.0.1 not responding, timed out [ 271.403088][ T5712] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 271.564213][ T5712] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 271.565103][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.565121][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 271.566688][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.566704][ T5712] usb 4-1: Product: syz [ 271.566714][ T5712] usb 4-1: Manufacturer: syz [ 271.566724][ T5712] usb 4-1: SerialNumber: syz [ 271.682372][ T5791] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.836178][ T5791] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 271.836991][ T5791] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.837005][ T5791] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 271.840598][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.840611][ T5791] usb 5-1: Product: syz [ 271.840618][ T5791] usb 5-1: Manufacturer: syz [ 271.840625][ T5791] usb 5-1: SerialNumber: syz [ 271.889132][ T5712] kaweth 4-1:1.0: Firmware present in device. [ 271.966324][ T8190] FAULT_INJECTION: forcing a failure. [ 271.966324][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 271.966347][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.1.629 Not tainted syzkaller #0 PREEMPT(full) [ 271.966360][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 271.966366][ T8190] Call Trace: [ 271.966371][ T8190] [ 271.966376][ T8190] dump_stack_lvl+0x100/0x190 [ 271.966399][ T8190] should_fail_ex.cold+0x5/0xa [ 271.966418][ T8190] should_failslab+0xc2/0x120 [ 271.966441][ T8190] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 271.966457][ T8190] ? __d_alloc+0x35/0xa50 [ 271.966472][ T8190] __d_alloc+0x35/0xa50 [ 271.966485][ T8190] d_alloc_pseudo+0x1c/0xc0 [ 271.966498][ T8190] alloc_file_pseudo+0x118/0x290 [ 271.966519][ T8190] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 271.966536][ T8190] ? alloc_fd+0x471/0x7a0 [ 271.966554][ T8190] sock_alloc_file+0x50/0x210 [ 271.966572][ T8190] __sys_socket+0x1c0/0x260 [ 271.966585][ T8190] ? __pfx___sys_socket+0x10/0x10 [ 271.966602][ T8190] __x64_sys_socket+0x72/0xb0 [ 271.966614][ T8190] ? lockdep_hardirqs_on+0x7d/0x110 [ 271.966627][ T8190] do_syscall_64+0x123/0x790 [ 271.966640][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.966652][ T8190] RIP: 0033:0x7f3f7c39e199 [ 271.966662][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.966673][ T8190] RSP: 002b:00007f3f7d345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 271.966684][ T8190] RAX: ffffffffffffffda RBX: 00007f3f7c625fa0 RCX: 00007f3f7c39e199 [ 271.966691][ T8190] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 271.966697][ T8190] RBP: 00007f3f7c435888 R08: 0000000000000000 R09: 0000000000000000 [ 271.966703][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.966709][ T8190] R13: 00007f3f7c626038 R14: 00007f3f7c625fa0 R15: 00007ffeeed07558 [ 271.966723][ T8190] [ 272.357622][ T5791] usb 5-1: Limiting number of CPorts to U8_MAX [ 272.810578][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 272.810590][ T31] audit: type=1400 audit(1791490773.178:549): avc: denied { read write } for pid=8210 comm="syz.2.633" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 272.810796][ T31] audit: type=1400 audit(1791490773.178:550): avc: denied { open } for pid=8210 comm="syz.2.633" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.673321][ T5791] usb 5-1: failed to send ARPC request 1: -110 [ 273.673366][ T5791] usb 5-1: failed to execute ARPC: -110 [ 273.673374][ T5791] usb 5-1: failed to set connected state for cport 0: -110 [ 273.673408][ T5791] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 273.727327][ T5791] usb 5-1: failed to send ARPC request 3: -32 [ 273.727381][ T5791] usb 5-1: failed to execute ARPC: -32 [ 273.727390][ T5791] usb 5-1: failed to clear cport 0: -32 [ 273.727399][ T5791] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 273.794853][ T5791] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 274.025464][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 306.586887][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.859663][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.811615][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.909648][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 416.916620][ C0] rcu: (detected by 0, t=10502 jiffies, g=34261, q=541 ncpus=1) [ 416.924320][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294978846-4294968344), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 416.937659][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34261 f0x0 RCU_GP_ONOFF(3) ->state=R ->cpu=0 [ 416.948383][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 416.958320][ C0] rcu: RCU grace-period kthread stack dump: [ 416.964175][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 416.977618][ C0] Call Trace: [ 416.980873][ C0] [ 416.983780][ C0] __schedule+0x1259/0x6920 [ 416.988265][ C0] ? __pfx___schedule+0x10/0x10 [ 416.993095][ C0] ? rcu_is_watching+0x13/0xc0 [ 416.997843][ C0] preempt_schedule_irq+0x4e/0x90 [ 417.002838][ C0] irqentry_exit+0x205/0xa10 [ 417.007408][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.013359][ C0] RIP: 0010:rcu_gp_init+0x85d/0x1460 [ 417.018626][ C0] Code: 69 0b 00 00 41 c6 45 00 00 4d 85 e4 0f 85 ad fb ff ff 48 89 ef e8 b3 1b ff ff e9 a0 fb ff ff 8b 3d 28 e3 a9 19 e8 d3 6f ff ff <48> 63 1d 50 87 54 0f 41 ba 04 00 00 00 66 44 89 15 b8 aa ee 0c 48 [ 417.038205][ C0] RSP: 0018:ffffc90000167cb8 EFLAGS: 00000246 [ 417.044251][ C0] RAX: ffffffff8edf8240 RBX: ffffffff8edf8240 RCX: ffffffff8edf82a8 [ 417.052194][ C0] RDX: 0000000000000000 RSI: ffffffff8e38f6ca RDI: 0000000000000000 [ 417.060152][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 417.068094][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 417.076040][ C0] R13: ffffffff8edf82fa R14: 0000000000000001 R15: dffffc0000000000 [ 417.084000][ C0] ? rcu_gp_init+0x85d/0x1460 [ 417.088650][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 417.093559][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 417.098728][ C0] ? rcu_is_watching+0x13/0xc0 [ 417.103466][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 417.109242][ C0] rcu_gp_kthread+0xb0/0x220 [ 417.113802][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.118971][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 417.124748][ C0] ? __kthread_parkme+0x18f/0x230 [ 417.129745][ C0] ? kthread+0x13a/0x450 [ 417.133959][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 417.139128][ C0] kthread+0x373/0x450 [ 417.143177][ C0] ? __pfx_kthread+0x10/0x10 [ 417.147742][ C0] ret_from_fork+0x730/0xd60 [ 417.152318][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 417.157415][ C0] ? __switch_to+0x800/0x10f0 [ 417.162067][ C0] ? __pfx_kthread+0x10/0x10 [ 417.166637][ C0] ret_from_fork_asm+0x1a/0x30 [ 417.171381][ C0] [ 417.174377][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 417.180672][ C0] CPU: 0 UID: 0 PID: 8211 Comm: syz.2.633 Not tainted syzkaller #0 PREEMPT(full) [ 417.189841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 417.199901][ C0] RIP: 0010:__local_bh_enable_ip+0xaf/0x120 [ 417.205797][ C0] Code: c2 12 65 48 63 05 f9 cd c2 12 a9 00 ff 00 ff 74 4d bf 01 00 00 00 e8 40 62 0c 00 e8 7b 4f 4a 00 fb 65 48 83 3d d9 cd c2 12 00 <74> 50 5b 5d e9 48 d5 0b 0a 65 8b 05 d5 0f c3 12 85 c0 75 99 90 0f [ 417.225463][ C0] RSP: 0018:ffffc90003537ac8 EFLAGS: 00000286 [ 417.231502][ C0] RAX: 000000000d1ee427 RBX: fffffffffffffe01 RCX: 0000000000000000 [ 417.239443][ C0] RDX: 0000000000000000 RSI: ffffffff8e38f6ca RDI: ffffffff8c623a80 [ 417.247399][ C0] RBP: ffffffff81afe58b R08: 0000000000000001 R09: 0000000000000000 [ 417.255340][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 417.263283][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 417.271237][ C0] FS: 00007f86bf1076c0(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 417.280140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.286698][ C0] CR2: 0000001b32b0bff8 CR3: 0000000040646000 CR4: 00000000003526f0 [ 417.294651][ C0] Call Trace: [ 417.297914][ C0] [ 417.300821][ C0] __fpu_restore_sig+0x610/0x13b0 [ 417.305831][ C0] ? __pfx___fpu_restore_sig+0x10/0x10 [ 417.311271][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 417.317065][ C0] ? __might_fault+0xc5/0x140 [ 417.321723][ C0] fpu__restore_sig+0x151/0x190 [ 417.326546][ C0] restore_sigcontext+0x4cb/0x6a0 [ 417.331551][ C0] ? __pfx_restore_sigcontext+0x10/0x10 [ 417.337090][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 417.342437][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.347603][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 417.352782][ C0] __do_sys_rt_sigreturn+0x229/0x2c0 [ 417.358044][ C0] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 417.364003][ C0] do_syscall_64+0x123/0x790 [ 417.368639][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.374501][ C0] RIP: 0033:0x7f86be19e197 [ 417.378895][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 417.398481][ C0] RSP: 002b:00007f86bf1070e8 EFLAGS: 00000246 [ 417.404518][ C0] RAX: 00000000000000ca RBX: 00007f86be425fa8 RCX: 00007f86be19e199 [ 417.412457][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f86be425fa8 [ 417.420419][ C0] RBP: 00007f86be425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 417.428362][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.436305][ C0] R13: 00007f86be426038 R14: 00007ffd0e9fd830 R15: 00007ffd0e9fd918 [ 417.444256][ C0] [ 417.853358][ T8190] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 417.859152][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.869231][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 418.101341][ T4968] udevd[4968]: worker [8101] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 418.119384][ T5908] rpcbind: server 127.0.0.1 not responding, timed out [ 418.134950][ T5712] kaweth 4-1:1.0: Error reading configuration (-110), no net device created [ 418.135055][ T5712] kaweth 4-1:1.0: probe with driver kaweth failed with error -5 [ 418.282090][ T1076] usb 5-1: USB disconnect, device number 25 SYZFAIL: failed to send rpc fd=3 want=3664 sent=0 n=-1 (errno 32: Broken pipe) [ 418.383141][ T9] lg-g15 0003:046D:0A07.0004: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 418.451221][ T9] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0004/input/input14 [ 418.455184][ T31] audit: type=1400 audit(1791490918.891:551): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=3014 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.455216][ T31] audit: type=1400 audit(1791490918.891:552): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3014 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.536123][ T31] audit: type=1400 audit(1791490918.891:553): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3014 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 418.582369][ T1076] usb 4-1: USB disconnect, device number 22 [ 418.706021][ T5597] process 6095 (syz.4.62) no longer affine to cpu1 [ 418.888237][ T8237] fido_id[8237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 419.766742][ T5956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.872472][ T5956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.962143][ T5956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.019438][ T5956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.110272][ T31] audit: type=1400 audit(1791490920.552:554): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 420.512090][ T31] audit: type=1400 audit(1791490920.952:555): avc: denied { write } for pid=8239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.583629][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.586055][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.586750][ T5956] bond0 (unregistering): Released all slaves [ 420.646684][ T5956] tipc: Left network mode [ 420.689840][ T31] audit: type=1400 audit(1791490921.132:556): avc: denied { write } for pid=8250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.798162][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 420.967279][ T5956] hsr_slave_0: left promiscuous mode [ 420.973536][ T5956] hsr_slave_1: left promiscuous mode [ 420.975501][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.975525][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.976162][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.976172][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.034351][ T5956] dummy0: left promiscuous mode [ 421.034488][ T5956] veth1_macvtap: left promiscuous mode [ 421.034508][ T5956] veth0_macvtap: left promiscuous mode [ 421.034554][ T5956] veth1_vlan: left promiscuous mode [ 421.034601][ T5956] veth0_vlan: left promiscuous mode [ 421.205529][ T31] audit: type=1400 audit(1791490921.642:557): avc: denied { write } for pid=8253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.325492][ T31] audit: type=1400 audit(1791490921.762:558): avc: denied { write } for pid=8264 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.407131][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 421.425381][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 421.501185][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 421.793798][ T5956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.875490][ T31] audit: type=1400 audit(1791490922.323:559): avc: denied { write } for pid=8267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.916285][ T5956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.975320][ T5956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.040470][ T5956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.045052][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 422.298163][ T5956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.369810][ T5956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.440687][ T5956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.502696][ T5956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.566184][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 422.756049][ T5956] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.829677][ T5956] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.878117][ T5956] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.931950][ T5956] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.192777][ T5956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.212714][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 423.272624][ T5956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.361552][ T5956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.430046][ T5956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.569070][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 423.569083][ T31] audit: type=1400 audit(1791490924.014:565): avc: denied { write } for pid=8310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.619341][ T5956] bridge_slave_1: left allmulticast mode [ 423.619358][ T5956] bridge_slave_1: left promiscuous mode [ 423.620872][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.625533][ T5956] bridge_slave_0: left allmulticast mode [ 423.625548][ T5956] bridge_slave_0: left promiscuous mode [ 423.625633][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.685680][ T5956] bridge_slave_1: left allmulticast mode [ 423.685698][ T5956] bridge_slave_1: left promiscuous mode [ 423.685796][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.714200][ T5956] bridge_slave_0: left allmulticast mode [ 423.714218][ T5956] bridge_slave_0: left promiscuous mode [ 423.714316][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.742154][ T5956] dummy0: left allmulticast mode [ 423.742171][ T5956] dummy0: left promiscuous mode [ 423.742266][ T5956] bridge1: port 1(dummy0) entered disabled state [ 423.771407][ T5956] bridge_slave_1: left allmulticast mode [ 423.771425][ T5956] bridge_slave_1: left promiscuous mode [ 423.771524][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.775186][ T5956] bridge_slave_0: left allmulticast mode [ 423.775207][ T5956] bridge_slave_0: left promiscuous mode [ 423.775291][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.833077][ T5956] batman_adv: batadv0: Interface deactivated: gretap1 [ 423.862776][ T31] audit: type=1400 audit(1791490924.304:566): avc: denied { write } for pid=8321 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.032708][ T5956] batman_adv: batadv0: Removing interface: gretap1 [ 424.065120][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.079020][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.079715][ T5956] bond0 (unregistering): Released all slaves [ 424.159173][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.160197][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.162484][ T5956] bond0 (unregistering): Released all slaves [ 424.254141][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.255154][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.255768][ T5956] bond0 (unregistering): Released all slaves [ 424.350267][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.351251][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.354166][ T5956] bond0 (unregistering): Released all slaves [ 424.391041][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 424.971572][ T31] audit: type=1400 audit(1791490925.414:567): avc: denied { write } for pid=8326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.089898][ T31] audit: type=1400 audit(1791490925.534:568): avc: denied { write } for pid=8337 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.164371][ T5956] hsr_slave_0: left promiscuous mode [ 425.164644][ T5956] hsr_slave_1: left promiscuous mode [ 425.164976][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.164986][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.165263][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.165281][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.213712][ T5956] hsr_slave_0: left promiscuous mode [ 425.213985][ T5956] hsr_slave_1: left promiscuous mode [ 425.214316][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.214326][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.215809][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.215933][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.262053][ T5956] hsr_slave_0: left promiscuous mode [ 425.262326][ T5956] hsr_slave_1: left promiscuous mode [ 425.262666][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.262676][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.262938][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.262946][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.311193][ T5956] hsr_slave_0: left promiscuous mode [ 425.311581][ T5956] hsr_slave_1: left promiscuous mode [ 425.311926][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.311937][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.312215][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.312223][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.368399][ T5956] veth1_vlan: left promiscuous mode [ 425.368442][ T5956] veth0_vlan: left promiscuous mode [ 425.368976][ T5956] veth1_macvtap: left promiscuous mode [ 425.368991][ T5956] veth0_macvtap: left promiscuous mode [ 425.369032][ T5956] veth1_vlan: left promiscuous mode [ 425.369078][ T5956] veth0_vlan: left promiscuous mode [ 425.370089][ T5956] veth1_macvtap: left promiscuous mode [ 425.370108][ T5956] veth0_macvtap: left promiscuous mode [ 425.370149][ T5956] veth1_vlan: left promiscuous mode [ 425.370180][ T5956] veth0_vlan: left promiscuous mode [ 425.370757][ T5956] dummy0: left promiscuous mode [ 425.370860][ T5956] veth1_macvtap: left promiscuous mode [ 425.370875][ T5956] veth0_macvtap: left promiscuous mode [ 425.370919][ T5956] veth1_vlan: left promiscuous mode [ 425.370949][ T5956] veth0_vlan: left promiscuous mode [ 425.648455][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 425.652746][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 425.828576][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 425.832943][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 425.985921][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 425.990242][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 426.163641][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 426.178243][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 426.253431][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 426.663578][ T31] audit: type=1400 audit(1791490927.105:569): avc: denied { write } for pid=8340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.791971][ T31] audit: type=1400 audit(1791490927.235:570): avc: denied { write } for pid=8351 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.827842][ T5956] IPVS: stop unused estimator thread 0... [ 426.829728][ T5956] IPVS: stop unused estimator thread 0...